Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
File: c49baf38-987f-31eb-9c02-e0c174f96a89.roa (raw, json)
Hash identifier: 0AG4qPku+WMM42KKhcZmOwArhOCadNjCIfnrGXWmH9w=
Subject key identifier: 28:71:09:41:2F:6C:48:FB:B0:46:12:BA:EE:AC:46:85:56:EA:55:92
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5815B676382F4E93E3CCF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:5b:67:63:82:f4:e9:3e:3c:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d944a9f5-0f67-40e4-b3ef-2449bcad3959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:e9:9f:a0:fe:81:eb:12:ed:57:a9:0e:f7:
01:1d:17:f8:f3:ed:7d:c9:41:00:13:65:fe:16:15:
35:fd:60:13:96:a4:92:15:e5:44:a0:35:11:bf:8a:
a6:33:c2:51:bf:32:f4:d0:cb:72:10:d9:2f:f3:cd:
fc:99:ac:8f:cc:64:1e:67:64:ce:d3:0d:16:de:e7:
42:80:54:30:e0:78:25:4a:ce:13:6a:44:17:4b:f5:
3c:90:34:4a:e6:0e:2d:fe:82:53:e6:f1:43:85:c0:
2d:f8:45:ef:45:a8:07:41:0c:bb:e5:f2:7b:93:90:
d0:ee:9c:2c:59:f6:14:d6:ed:b8:2a:bc:c3:1e:64:
f0:3b:19:9d:a2:0b:2c:cf:35:9a:db:4c:99:06:cb:
64:de:1e:b6:0f:22:72:e4:aa:ea:71:5c:88:75:ca:
d5:d4:df:75:5f:5f:01:ed:fc:62:6e:55:e1:9d:40:
79:82:b4:e6:f5:9e:d5:28:07:5f:19:e8:a7:ce:3d:
8b:c0:1e:27:c6:89:a9:88:a4:ee:60:50:55:b5:e7:
96:4a:c9:7d:2f:92:ad:e7:be:71:32:46:7e:1e:7a:
53:51:14:c5:7d:62:af:f0:4f:fb:0c:0d:33:c2:38:
c5:fe:02:0d:ca:cd:8c:0f:1a:67:81:d9:21:bd:0a:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:09:41:2F:6C:48:FB:B0:46:12:BA:EE:AC:46:85:56:EA:55:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c49baf38-987f-31eb-9c02-e0c174f96a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:ed:ee:7f:8c:49:e7:88:3b:99:3f:0f:f0:71:39:f9:c5:6d:
3a:67:44:cf:e1:9a:2b:cb:17:ef:c0:e4:d3:60:f9:f3:95:52:
8c:ac:2d:f3:fd:d0:46:78:94:f6:92:35:a3:d5:6b:83:f2:78:
cb:da:aa:c4:74:72:de:8b:42:2f:3b:c0:e2:6d:37:6a:fa:a0:
04:07:16:da:b7:86:3f:e5:99:eb:71:9f:2a:b9:ac:38:08:f7:
b2:4c:27:90:f6:2b:ef:d5:39:d1:a3:df:c7:a0:ff:3e:8d:9e:
8f:0e:6f:8b:e1:21:22:77:81:ec:72:13:5c:17:76:1e:ee:84:
7b:29:16:e8:c7:3f:01:13:b4:25:c0:73:99:df:5f:45:d0:de:
5b:b3:52:fb:09:a0:3b:99:14:74:65:57:1f:98:ea:2d:95:0c:
36:9c:ac:0e:d0:70:72:02:5b:30:74:3c:d7:44:ae:a4:93:03:
68:4e:16:e1:5f:78:f8:af:bb:43:1e:2e:ae:20:be:c4:e5:55:
78:c3:13:cb:a3:5c:8c:36:f3:eb:1a:cf:3a:b6:3b:08:17:f1:
39:d4:04:14:01:3b:7d:e9:3e:b1:bb:18:4a:b1:4a:22:87:3c:
68:bc:74:a5:0e:a6:4b:98:ba:96:4b:4c:4b:78:7f:d2:ea:f2:
b6:95:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:56 2025 by rpki-client