Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa
File: d6fed470-07a0-3210-99f9-cb0d4504744a.roa (raw, json)
Hash identifier: RgVVjsRv2PMfElcK0kMxFBneC2cCyQ70Isjem2Tl6YA=
Subject key identifier: A4:A4:27:EF:EB:02:B5:72:B7:9D:8C:66:C1:A2:6C:BE:84:0C:95:79
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848828081749EB48642C3DD1380
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 40676
IP address blocks: 172.84.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:81:74:9e:b4:86:42:c3:dd:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=e573f451-c618-40d7-a3e0-ebd9c313010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c9:cc:dd:c9:56:81:b6:1c:b9:09:ef:e0:86:
5c:8e:32:97:9f:50:8f:74:cb:48:25:64:db:12:f8:
ba:d1:f5:c0:5c:e1:a4:03:80:40:38:aa:d1:ac:08:
68:e2:1a:4b:c4:2b:74:0f:7f:86:75:db:4e:f6:05:
0e:a1:26:ca:4d:6a:ac:e5:3e:57:f0:bd:ef:56:b3:
d6:b2:c6:f3:0a:a9:2d:26:1e:dc:8e:65:9b:c7:bb:
ea:ba:89:aa:ed:17:46:0d:5b:ec:5a:04:7f:cf:4c:
05:9e:3d:b9:c2:86:7d:5b:e1:54:89:2a:0f:ba:f1:
99:45:3b:87:78:68:c2:07:3d:3e:c8:15:60:dd:4c:
3d:5e:64:8c:43:59:29:c3:2c:27:24:c9:79:66:32:
1a:d8:b9:f9:4f:79:c4:b0:2f:93:70:ed:6b:ad:30:
2e:fa:b4:42:ae:d0:6c:49:22:84:50:79:dd:c2:b6:
3f:3f:5c:41:5d:e3:67:fe:e4:91:c2:75:aa:03:7e:
44:8c:34:c3:11:42:82:90:ee:d7:ce:e4:75:da:6e:
af:e9:7a:70:e7:15:89:7c:f6:77:ab:f4:16:39:99:
33:07:ea:69:cc:a4:4a:91:f0:ca:79:18:5f:69:22:
68:3d:d5:e4:7f:72:42:7a:d6:ea:37:81:c6:77:28:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:27:EF:EB:02:B5:72:B7:9D:8C:66:C1:A2:6C:BE:84:0C:95:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:2f:55:9d:4d:e2:0f:ba:12:8d:77:0f:70:84:35:7f:f6:b3:
d5:5c:2d:cf:07:53:98:95:9a:73:cf:55:5f:64:87:fa:db:6b:
a8:53:15:9f:04:d8:09:ab:e8:43:f3:ed:3a:41:fc:f3:5e:74:
b8:95:5f:41:9d:40:42:ae:2b:0c:9b:cb:ea:28:22:64:d3:29:
b4:b0:96:bc:1b:44:0f:ba:c7:b0:94:e3:f4:1a:e2:0c:7e:6b:
02:be:a5:35:df:4a:ac:98:0f:67:ef:93:89:64:54:38:7b:4f:
8d:90:71:d8:45:51:b1:1c:69:e2:8b:85:ed:cb:48:a2:65:57:
3e:a1:f8:12:cc:10:d5:23:f1:4b:a7:b9:94:42:15:bf:71:2c:
e9:52:03:0e:04:b7:03:25:cd:7a:57:a1:f5:65:80:7f:dc:a4:
02:b6:b5:ff:9f:d8:1f:57:db:f5:8f:eb:37:d2:29:18:47:1f:
f6:c7:2f:d9:ad:2d:be:5f:83:3f:21:26:94:54:74:5e:8d:a5:
74:ac:5d:31:5e:e6:37:53:30:45:94:cf:65:22:f5:db:82:d7:
ca:fd:86:ca:b7:17:3f:de:66:f5:74:5a:43:d5:d2:ee:d2:1e:
70:cc:42:25:53:3c:7c:18:49:ad:94:f4:83:05:30:fc:16:3b:
46:8c:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:01:25 2025 by rpki-client