Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
File: 86f93181-bd05-3575-8aa4-a212bd3e92ab.roa (raw, json)
Hash identifier: BfXnwT0+xz6OcBS4WIjWfwvTKSX7lz0HnHrGPXxLkzI=
Subject key identifier: 18:1C:5D:04:09:A5:EE:4B:5B:CE:2E:10:96:6D:C6:2C:99:35:F2:A3
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848C6E6374748DF4105683A6980
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 28753
IP address blocks: 172.84.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:37:47:48:df:41:05:68:3a:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=0ec7c0a1-0d9e-48b7-a09a-88cc8fa87195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:8e:1d:10:11:e7:1a:12:07:cc:8b:51:86:
04:48:5e:5a:4a:89:de:e6:56:3b:e8:17:50:4e:09:
8a:c1:ac:5b:42:87:f3:ae:d7:05:21:c9:27:37:a5:
6b:f6:3a:9a:52:5c:76:6b:a0:ac:ac:df:41:47:8d:
46:e5:97:15:b9:15:a9:b7:7c:3a:bd:c4:84:76:f1:
66:cb:e8:0c:01:0d:fe:7a:26:2d:27:18:70:06:a3:
81:2e:b3:b9:65:b7:8d:21:8a:62:8c:3d:ab:06:9c:
08:65:fc:42:30:b8:e7:2a:2c:5e:b8:7f:62:6f:59:
39:24:2d:8c:e6:c3:61:68:71:f5:db:f1:25:c0:3f:
b5:bc:77:66:92:97:26:d2:80:09:98:72:3f:12:ba:
3b:56:58:7f:a1:fd:7b:09:4d:5e:41:e1:06:e0:cc:
f9:61:85:90:41:8f:6f:98:bc:ac:9e:67:67:81:ec:
a7:d5:1e:77:b8:a2:6d:92:27:9b:98:6f:07:45:76:
44:61:d0:f2:53:b9:45:d6:58:a5:fa:bc:1a:fa:1e:
04:50:cd:34:fa:c5:1f:6c:6b:55:85:ee:b6:c3:84:
59:cf:81:da:00:90:9d:dc:9d:bb:c4:a2:cc:18:12:
7a:33:f0:54:64:2b:29:ee:12:fb:00:a0:d8:34:f3:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:5D:04:09:A5:EE:4B:5B:CE:2E:10:96:6D:C6:2C:99:35:F2:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:7c:3c:94:0b:eb:1e:aa:98:63:c4:de:37:32:45:17:f7:99:
de:ad:f5:a2:33:54:ae:10:0b:bd:3d:ab:67:a6:5f:36:77:3e:
17:25:09:ec:04:27:47:c6:19:ba:e2:07:cb:45:df:44:96:2f:
32:e8:c9:bc:7e:b4:ae:b2:3a:73:52:65:f8:96:8d:cf:cf:a8:
a8:fe:9c:49:1f:5d:20:c1:51:23:ac:8c:a9:af:de:b6:36:11:
34:d6:6c:bb:93:ad:35:05:5c:91:cb:08:99:29:0f:20:e4:15:
30:bb:ee:22:48:7c:bd:4f:72:04:7e:28:e4:53:cc:11:f3:a0:
6c:eb:9c:59:f7:47:0a:c2:73:15:f6:54:cb:21:7f:3c:4b:73:
31:b6:e2:21:c0:f6:46:f1:a5:19:21:d6:38:4f:88:cc:26:2a:
07:29:e4:2f:0e:b5:80:cb:fe:73:23:2c:12:f7:a9:7a:1a:83:
4c:5f:b8:5b:82:14:fd:08:6a:f5:96:7b:82:a6:6c:98:2d:89:
c7:00:2f:0d:d8:92:ae:76:e2:39:54:c2:90:40:b0:ad:17:9a:
15:c0:0d:5f:68:84:37:da:76:5d:23:60:af:9b:b7:50:3f:31:
61:5a:83:48:2e:13:f2:5e:01:4a:cd:97:5e:68:00:db:e2:7a:
22:6e:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:12 2025 by rpki-client