Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa
File: 475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa (raw, json)
Hash identifier: 3Sgb8LK6TIl57wKB38Xe6II6LpNORRJq2ImCxFpAQAc=
Subject key identifier: A8:4F:9D:77:CF:E4:73:0E:10:B8:16:F5:09:BA:70:A0:35:24:55:7A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58150C7A604247EB7FF6400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.20.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:50:c7:a6:04:24:7e:b7:ff:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2b51c910-bb76-41b5-849f-049aafb0bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:3d:16:6f:33:8d:18:10:52:c3:9a:1c:41:
92:4a:97:e9:61:b6:5e:a1:e7:b1:5c:80:46:de:e8:
1b:22:80:4f:eb:a3:a3:3b:95:88:f3:8a:9e:90:52:
a1:d2:e7:2c:6e:ad:87:c6:00:32:a4:fb:55:b8:9c:
60:24:d7:9b:37:aa:e5:32:7f:ee:5a:92:e3:f2:21:
ae:dd:92:1e:c4:6d:ca:0b:68:bb:00:f1:97:a8:74:
0f:14:49:00:e0:6e:a4:06:35:8f:a8:94:8c:e1:e3:
4e:b2:d2:59:6e:0d:a7:e8:37:f0:f1:f8:db:e6:7f:
80:d8:f5:af:9f:9d:f2:4e:18:b6:ef:e9:b3:21:89:
22:91:fd:85:64:16:be:6a:d1:9e:f6:8f:9f:df:fe:
16:85:11:d4:1f:5e:e9:47:e3:4f:03:90:b5:ee:80:
c6:97:a8:01:59:98:6e:45:fc:2c:e2:5a:a5:8b:4b:
ce:cc:77:52:02:ee:19:f4:d7:44:52:c1:e9:3a:31:
9e:41:73:d7:59:51:a9:a3:7b:f0:18:5f:4d:df:93:
0d:da:21:7f:d9:34:73:1f:2f:59:58:98:29:f0:29:
06:01:ad:87:6d:61:d0:ac:e2:88:c6:a7:4e:04:9f:
ba:9a:99:84:a0:73:83:21:c4:69:d8:d6:ef:c1:af:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:9D:77:CF:E4:73:0E:10:B8:16:F5:09:BA:70:A0:35:24:55:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/475c173c-6a30-34d5-bbb4-950f7ffe8f11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e4:40:9e:92:48:7c:dd:18:08:40:35:c1:91:57:da:e9:0c:
59:4b:cd:a7:06:cc:23:e7:1a:5f:f6:81:60:4b:10:f0:9f:84:
bf:41:43:48:6b:53:68:25:92:5b:49:8b:26:46:cd:5f:61:1e:
99:87:32:8e:bc:ad:52:fd:03:88:ac:57:40:7d:e3:51:32:ed:
79:77:ec:84:dc:7b:47:72:2c:95:4a:3b:4c:c0:ee:f7:ef:f2:
e9:2b:75:46:47:cd:8a:fd:d6:28:40:bf:27:be:8f:4d:42:c1:
eb:fa:f0:f4:55:7e:91:2b:12:02:cb:f0:04:f9:e1:24:59:0d:
e2:f7:f0:04:42:b9:03:c2:7e:bf:9a:a5:af:d8:44:2a:28:86:
0c:2f:34:de:df:2b:db:fe:06:c2:75:f9:2b:9a:79:f6:93:40:
9b:7b:2d:bd:a4:06:0b:e2:6f:0d:3f:bd:c5:47:26:5a:cb:22:
f0:ce:0b:18:ef:25:77:90:40:d0:06:73:97:22:1d:9c:85:bd:
10:9b:6d:49:ea:2d:8d:fa:7f:bb:a7:fc:58:8f:c1:08:f1:31:
0e:b4:cc:7a:f1:ac:eb:a7:9e:aa:3e:c4:78:2d:0f:8f:34:5a:
36:ab:ac:dc:3f:37:fc:17:2e:13:77:13:22:d7:5f:79:fa:ea:
ea:fd:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:39 2025 by rpki-client