Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5db1b704-42cb-3498-aaa2-b8631e762eba.roa
File: 5db1b704-42cb-3498-aaa2-b8631e762eba.roa (raw, json)
Hash identifier: qu5Q3Yd2/jPcha3wU/ZhJZeJv8k8ccrdHeY901lFUvM=
Subject key identifier: 3F:BB:81:AD:CB:FB:AA:A4:21:BE:D7:09:D8:A9:98:79:63:87:C6:E9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581922428065DE7FFCC2400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5db1b704-42cb-3498-aaa2-b8631e762eba.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 40306
IP address blocks: 184.20.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:92:24:28:06:5d:e7:ff:cc:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4247dca4-7840-4ae7-9b74-9bb48551d7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:f5:64:c6:26:b8:99:b6:e4:07:07:6f:7e:
9c:f6:c8:36:de:43:f4:76:ee:0f:82:e5:d9:b7:a9:
ce:0f:b5:d6:6d:ce:15:2f:bc:c1:b9:c8:0e:8f:28:
9a:ce:e2:3d:79:0d:d0:ec:3a:89:62:0f:ff:69:d3:
40:48:c2:3d:92:4c:18:22:9e:51:8e:81:05:5e:37:
34:d8:e3:31:76:2f:33:78:0e:cb:f2:b7:c0:cd:28:
63:7a:17:aa:48:10:a4:ff:d2:b6:c3:e2:61:76:d0:
6a:8b:22:8b:5b:76:88:66:25:ce:72:77:b7:32:5e:
77:4d:23:2b:12:04:0b:c4:01:8c:61:70:38:b5:24:
31:19:14:e6:da:1e:f1:3c:26:ad:ef:cb:d3:6e:f9:
93:4e:c7:35:fb:b5:89:0a:54:f8:d6:bc:47:2d:4d:
e0:7c:0f:e2:fd:61:c2:80:92:7a:cd:98:fe:3f:cb:
b6:3e:20:d7:b7:e9:cb:24:07:81:a9:2b:1a:f3:ec:
9c:14:cc:bb:4a:7e:91:00:7a:7d:4a:e3:d5:74:75:
d3:13:fa:0c:b1:71:32:74:fc:c7:38:ad:4c:0c:8c:
79:57:42:76:b2:10:fb:9a:4c:16:9d:a5:df:80:86:
d3:89:47:a7:78:4e:dd:85:2d:01:da:1b:34:c9:6f:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BB:81:AD:CB:FB:AA:A4:21:BE:D7:09:D8:A9:98:79:63:87:C6:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5db1b704-42cb-3498-aaa2-b8631e762eba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:e6:74:c7:09:04:f1:f6:7a:2e:f4:67:8f:c7:59:10:76:16:
f3:8f:90:87:88:46:2a:5a:6a:d0:7a:ab:56:33:02:b0:35:eb:
8d:60:8d:5c:e8:0b:d8:6a:46:45:32:53:8a:74:2b:ae:ed:ce:
e2:7a:33:cc:d3:a5:83:29:86:a1:ab:23:af:19:ff:0f:a4:30:
6f:e8:7b:63:4f:07:a3:8f:f4:c5:d3:54:35:cd:8d:de:fa:94:
87:53:b3:26:1b:d4:d5:6e:2c:c0:1c:b5:32:99:da:b2:d7:f6:
b0:ca:4e:a1:9d:28:67:01:08:34:32:ec:97:c1:26:b5:20:80:
27:84:08:e6:6e:69:dd:f1:08:6b:5b:b5:e1:11:21:a5:b4:ad:
5d:ae:1a:17:63:dd:49:08:db:b8:47:33:be:6b:1f:15:24:d7:
7a:05:56:bb:f1:f7:6e:36:d1:9b:27:ce:f5:d5:7c:02:0d:b6:
58:e4:9b:1f:aa:6a:17:cd:c1:ff:a4:2f:41:f6:3f:91:7d:78:
b4:ab:b5:ce:f0:fa:f2:31:b3:fd:c8:b7:f4:8d:a9:4d:82:80:
45:02:49:38:99:ff:7c:08:20:d6:7a:b9:96:b1:5e:d1:40:ad:
a1:ab:38:6f:3e:62:30:76:db:44:1a:23:9f:e6:e8:b2:6f:d5:
03:80:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:27 2025 by rpki-client