Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a79965-bc4b-3a4d-a46e-9a29d3ee8dfa.roa
File: d7a79965-bc4b-3a4d-a46e-9a29d3ee8dfa.roa (raw, json)
Hash identifier: 5X2OWe+JncOapIDeHUXX/i5Fsi5kykzYLH+AHCAn88g=
Subject key identifier: CF:6C:9A:EA:AF:D9:99:82:21:10:C3:02:9E:BB:B3:76:4B:AC:D1:F4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424AF962A71C0D88B5359840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a79965-bc4b-3a4d-a46e-9a29d3ee8dfa.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.28.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:f9:62:a7:1c:0d:88:b5:35:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=717adfd0-8b58-4341-ad88-3d29cda345cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:7e:e6:75:ba:83:27:40:dd:60:f7:db:1d:
5c:bc:6e:f6:49:60:c9:2d:25:60:8d:92:97:d9:71:
72:e2:18:03:27:e3:cc:85:92:9e:fc:5d:4f:e2:9a:
f8:7d:46:87:83:c7:01:af:19:15:29:cf:f1:29:47:
2f:38:60:28:39:9d:f7:dc:db:07:75:a8:e1:92:58:
9b:a9:9b:26:e3:5e:7a:d6:02:5c:af:b4:29:82:9a:
74:28:ad:41:02:8b:47:03:e1:ab:63:28:48:c7:01:
43:02:dd:83:3e:32:6e:b4:69:a2:d4:ee:51:7c:46:
79:de:18:af:15:92:bc:73:25:0f:00:11:0a:ff:bc:
ac:9e:cb:70:e9:a6:79:1f:c4:d7:28:a1:49:65:76:
b1:3e:be:3f:7c:fb:01:30:b6:fb:cf:82:13:05:e3:
eb:1c:b9:8a:57:ad:c1:9e:e9:5f:1d:63:a3:44:45:
04:a9:fb:11:16:8e:e3:b8:52:51:0a:f3:f9:e3:cb:
89:21:18:51:0f:2d:03:07:ed:30:78:da:14:eb:8f:
4b:fd:7b:b7:47:a9:7c:ce:54:bc:06:49:1d:98:e0:
d7:45:aa:54:25:5f:f1:50:51:e9:bf:92:fb:c4:38:
ad:ff:ff:2b:be:32:cd:ac:15:d2:89:36:84:bf:0b:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:9A:EA:AF:D9:99:82:21:10:C3:02:9E:BB:B3:76:4B:AC:D1:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7a79965-bc4b-3a4d-a46e-9a29d3ee8dfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:21:24:5a:fe:eb:79:b8:ac:f7:c7:a8:9b:8a:14:0d:b0:35:
cf:20:4e:d0:96:08:dc:e0:3a:3e:75:b7:e8:33:71:47:15:5f:
78:3e:ef:69:b1:a3:02:76:ed:87:ad:29:b4:8f:2f:6a:37:f7:
47:b6:cd:83:08:07:91:5b:91:6e:36:68:f0:49:12:c8:79:6d:
09:64:14:97:3e:33:3d:6f:fe:1c:32:ff:79:2d:5f:97:0c:06:
26:0d:ee:89:2d:83:3d:67:3a:1c:cb:18:76:f4:20:0c:b1:49:
8c:30:61:ab:ee:56:6c:78:9f:7d:50:de:c1:ab:23:4b:2c:e0:
37:58:e2:c3:d8:73:c9:57:39:aa:4b:df:5e:d6:96:15:e8:15:
10:e4:fc:02:f3:af:22:60:7a:73:85:90:a4:09:a9:89:7c:98:
a1:2b:bf:16:19:89:ba:f1:e5:5c:c1:84:b5:95:35:39:e1:77:
d5:75:e0:9a:0a:09:78:5c:41:3d:96:56:39:e6:52:3c:34:6f:
ee:dd:88:a7:dc:71:cf:48:96:fc:f7:8d:4e:79:58:ee:9a:bf:
d7:b5:4b:b5:76:b6:7b:6d:89:1b:8a:dd:c0:bc:c0:d1:e9:f2:
8b:75:ca:b4:3a:62:23:2b:8e:29:0e:b7:c9:8c:00:85:71:24:
0c:f5:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:02 2025 by rpki-client