Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffb890d2-c657-3dfc-b5c4-6bc235b68459.roa
File: ffb890d2-c657-3dfc-b5c4-6bc235b68459.roa (raw, json)
Hash identifier: jL+I6zFPCyU0ljtvESi+QAaex6zzu4LWzMThzTkYejg=
Subject key identifier: 96:72:78:60:2A:66:45:BF:87:FE:A2:13:96:DB:E1:83:3E:04:5F:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424AFA5E2D19EC499EB45A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffb890d2-c657-3dfc-b5c4-6bc235b68459.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.28.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:fa:5e:2d:19:ec:49:9e:b4:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=a1af922b-887b-40ad-ab9a-7d3206705729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:b7:50:46:26:fd:54:04:96:34:1e:91:f9:
94:22:6a:bc:a4:c1:33:5d:81:20:0b:1e:06:fe:75:
03:32:32:29:5f:7c:cd:6b:90:d3:6a:78:42:ee:1e:
f0:63:64:cd:13:c1:cc:8a:e6:05:eb:57:e5:74:5b:
d6:16:30:93:2e:c6:a0:40:0e:21:bc:70:4a:e9:cc:
c6:f1:20:17:5a:a3:d8:9e:2b:53:e5:44:45:a3:ff:
6b:2f:2b:59:2d:22:47:0e:08:72:3f:4c:48:59:2d:
73:f0:dc:17:b9:b3:71:69:34:31:46:e1:aa:59:09:
83:d4:fd:3b:2a:5e:f9:7d:57:c4:24:07:33:da:b2:
2e:73:88:87:e3:3d:a5:c6:51:1e:a9:75:a4:5e:5f:
d3:c2:a7:df:d3:ea:a3:4d:10:e9:6d:b9:0a:a5:d2:
62:08:46:44:93:34:e9:67:2e:07:aa:09:06:c3:90:
7c:0f:24:3e:46:38:85:a7:d5:6a:16:10:62:bb:83:
42:56:2e:e6:88:a6:37:75:3b:2a:d7:04:75:d1:e4:
5c:0c:ef:1f:73:55:35:e8:96:fa:16:cc:8e:3f:ca:
06:e5:e1:10:17:f5:be:b7:25:e1:34:78:35:05:82:
8a:76:a5:3e:f8:45:e0:2e:f2:71:d7:1e:ac:e7:50:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:78:60:2A:66:45:BF:87:FE:A2:13:96:DB:E1:83:3E:04:5F:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffb890d2-c657-3dfc-b5c4-6bc235b68459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6d:18:b2:34:15:b4:ad:22:54:1a:1b:55:49:b1:36:50:cc:
c5:89:9e:19:eb:03:2b:e8:75:a8:76:42:41:93:c3:d6:b0:f8:
c4:4f:49:63:8d:4d:3b:03:b8:af:6f:03:ef:58:3f:ac:e5:5e:
3a:da:bb:eb:2b:ad:f1:b1:77:11:c3:d5:1b:06:6c:54:fa:9c:
70:82:df:e2:07:0e:ad:97:5e:a3:ca:ba:ad:28:e5:a7:33:c2:
a2:59:89:12:5d:ed:f5:08:0c:52:a3:1f:df:0c:2c:15:fd:ea:
9e:32:26:d1:b1:2a:f3:26:c5:bd:e2:92:95:6b:85:27:b5:97:
67:c0:b8:c2:08:5b:24:4b:2e:b6:02:9a:4a:e1:7b:47:3a:1c:
90:10:fd:4f:bf:c9:77:8f:f6:1b:e0:36:c8:c9:c1:ce:80:c6:
44:2f:a7:ff:1c:46:56:01:53:16:5f:cf:8c:b3:5d:9e:c3:24:
53:59:a8:6b:cf:15:12:19:38:b8:bd:60:4f:c8:ca:60:01:39:
ee:2f:a9:33:1b:ae:d6:02:d0:6c:8b:06:79:34:06:26:9e:70:
45:44:33:fc:c9:60:86:1a:c8:b5:84:b4:b7:cb:f5:4d:6c:70:
20:cf:0c:28:3b:a3:f5:ca:dd:cf:15:25:d1:7d:de:26:df:05:
9e:b0:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:07 2025 by rpki-client