Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/318ca794-5049-33a4-83ba-6016f5f5e7ac.roa
File: 318ca794-5049-33a4-83ba-6016f5f5e7ac.roa (raw, json)
Hash identifier: H8qXKW9ATa/WXTkVkETBLyR2vQc243bN77C20HJFzvk=
Subject key identifier: D8:9E:15:A0:A6:E7:0F:7C:3F:71:F8:C9:C2:4D:46:9E:56:61:33:B2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58159FDCA48511B0B0F8E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/318ca794-5049-33a4-83ba-6016f5f5e7ac.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:59:fd:ca:48:51:1b:0b:0f:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=b5745a75-489b-4b3b-9861-6cdb5bd7c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:39:11:e4:d9:7e:30:13:63:f1:d1:2d:6a:
ea:d5:d8:43:2d:3f:7f:e5:13:ef:6a:dc:39:5c:3e:
a6:9a:e2:22:78:8d:2a:52:1d:0d:2a:1d:93:ac:2c:
08:67:27:70:78:a2:f2:52:b9:e8:de:a5:ac:7f:f3:
77:6c:30:b7:da:8c:a0:3c:ea:41:1d:ae:cb:9e:ef:
e3:11:ce:f2:d7:24:f3:e8:27:bd:fe:76:6c:6f:12:
c9:96:54:ea:97:f0:44:86:9c:ff:37:32:9f:dc:a8:
7d:d4:2b:9c:f6:46:07:8b:ad:00:4d:6b:11:ce:b7:
5a:36:b1:58:7b:5a:de:b7:6e:08:9f:1d:8a:8e:94:
3f:d7:d0:f8:d4:87:75:2e:81:c7:64:4c:1e:4e:68:
8f:03:2e:3b:2d:ff:0a:7f:5e:1c:ca:e9:2e:2d:23:
0f:d0:c6:4c:6f:ba:4c:01:44:ee:38:69:63:c1:30:
e4:8f:1f:3d:4b:dd:18:e3:9a:40:bb:64:10:5f:29:
57:02:4b:a4:94:77:c8:79:62:f7:02:1f:fa:58:af:
27:8e:8e:54:50:fa:8f:78:af:09:47:3e:2e:6a:7e:
e3:89:f3:d5:77:77:67:f5:15:b2:ae:eb:c7:e2:7d:
1e:eb:20:93:d7:fe:c4:15:94:c1:ff:a2:a7:86:45:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:15:A0:A6:E7:0F:7C:3F:71:F8:C9:C2:4D:46:9E:56:61:33:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/318ca794-5049-33a4-83ba-6016f5f5e7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:af:57:bf:7d:e1:17:14:85:b9:2d:e7:c3:9c:b2:fb:fe:86:
d7:bc:0c:3f:62:2d:9c:6a:b2:6d:8f:dc:80:cf:94:05:c9:13:
65:f2:2d:1f:b9:0e:35:13:3e:00:fe:58:0c:16:10:ad:0b:c1:
d3:56:b9:b7:a1:af:29:70:91:27:e3:e9:65:0d:24:78:1f:51:
72:51:77:01:5b:01:44:04:e1:2c:3b:a8:d0:d0:8f:b1:36:1a:
f9:53:0a:25:88:31:2c:34:f3:1f:85:94:2b:b7:9a:3a:30:bc:
b4:e5:d7:6e:1e:0f:01:a4:e5:27:01:c8:d1:14:60:0e:90:84:
51:3a:aa:3e:50:10:09:f5:31:71:56:af:cf:68:73:4b:b6:16:
51:8f:ff:b6:87:84:76:da:58:93:1c:26:eb:e4:1b:db:c3:31:
ad:2d:a1:e9:1d:7f:9e:14:4c:fb:4f:67:ae:4d:43:a1:a1:3f:
2f:7f:6a:29:a1:6b:e9:3a:85:92:c9:45:e5:5a:99:1b:b2:f3:
f6:a5:d3:e8:ce:3a:a5:9a:1e:64:c3:71:e7:bd:0f:3f:fc:cd:
d6:b0:bd:14:43:06:2c:b1:62:b1:29:22:e5:ca:ea:18:4b:9c:
2b:e1:ff:2c:1a:64:db:ba:33:15:cd:a8:6e:f2:89:7d:f3:01:
51:5a:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:25 2025 by rpki-client