Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa
File: 0c612045-db9e-3173-a144-1b3346db1c06.roa (raw, json)
Hash identifier: Lu9UWsuqLIie4nB2TDS0JPhrjCkzFOV3sVjSJJ/NKWA=
Subject key identifier: 38:0F:92:F9:9A:05:96:C2:DB:5A:31:47:56:4A:1D:47:B8:26:93:68
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581F7A1FBB13818242C1F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.63.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:f7:a1:fb:b1:38:18:24:2c:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d845fd6d-fdbb-4ab6-bcf2-637bd241a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:ce:bc:ea:33:c2:1e:7c:f6:f6:83:cf:18:
ec:27:ca:28:73:53:24:ec:f9:f1:b5:e4:a4:af:38:
49:b3:a9:8a:67:5a:4f:a5:36:bc:22:36:d3:95:e8:
eb:22:c8:f3:3d:8b:b8:22:6d:88:34:c4:3d:a3:a0:
83:82:ba:b0:5c:cd:ae:2a:02:a8:51:67:9c:1f:48:
36:a8:96:9b:9b:89:b6:30:8e:59:a5:c9:3d:8c:e1:
ef:67:56:bd:58:3b:e0:09:51:3b:c0:92:68:fe:41:
33:d0:30:43:75:98:c1:85:d8:8a:ef:7f:f6:e1:89:
b9:1c:83:c9:ca:d5:45:c6:47:8b:26:69:dd:88:9f:
2c:a0:57:e7:d2:76:68:09:4e:31:ae:0a:5e:ee:ad:
66:ee:71:e1:18:cf:0d:dc:c5:45:f9:02:d5:fc:1c:
1b:18:b9:4e:c4:0e:af:80:64:4e:2d:44:2a:c1:1a:
b7:1a:a3:21:1f:78:83:fe:ed:95:ef:c9:3e:cf:46:
f6:07:96:18:52:1a:eb:03:17:cf:cd:09:7e:5b:d4:
7f:07:c4:2c:19:de:04:0b:63:9c:17:6b:7e:a2:6e:
f0:47:dc:ee:2b:d5:65:bb:31:41:4a:53:78:c0:0e:
f3:2b:de:4c:33:d2:2c:bb:dc:3c:40:6f:3f:6f:63:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:92:F9:9A:05:96:C2:DB:5A:31:47:56:4A:1D:47:B8:26:93:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c612045-db9e-3173-a144-1b3346db1c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.63.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c1:38:60:7e:38:e1:65:95:09:de:68:8a:b6:67:ff:e5:c7:
9b:e2:b5:b3:21:62:ee:62:a8:b6:84:e2:ea:83:87:a8:d4:77:
d5:70:de:00:ce:ba:af:68:fc:41:6c:4a:98:5c:2f:e0:e6:b2:
75:b8:48:df:bb:db:7a:a8:57:e9:57:82:0a:f9:e3:45:de:6e:
78:58:28:dd:d4:01:91:d7:94:5e:6a:11:99:b7:01:d5:97:bb:
04:13:f7:f6:99:5b:58:63:07:dd:dc:57:ff:0f:97:c5:bb:88:
67:3c:c3:7c:11:b8:98:58:3c:b7:f1:94:cd:4a:3a:49:0a:df:
2c:f6:0c:ec:e5:31:f7:17:ff:aa:f8:9f:76:2e:0f:9c:71:55:
1e:1a:7a:40:f5:61:f0:02:33:56:a2:92:13:63:ff:28:9d:fc:
0c:5e:fc:68:c3:92:cd:30:8f:02:e4:eb:a8:7a:f8:94:91:f7:
ae:6a:0c:9c:17:18:cb:9f:44:1a:be:6d:95:9a:87:38:55:5b:
ca:ae:56:9f:91:fa:a1:9b:65:4c:58:ab:f4:3c:0d:4b:e3:c8:
6d:e7:54:47:25:d5:e9:78:48:f0:48:6a:14:69:2e:83:e3:0e:
7c:c8:72:c9:3d:71:d7:99:ed:b6:a8:d0:1f:e4:f5:7d:06:52:
d9:da:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:46 2025 by rpki-client