Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa
File: c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa (raw, json)
Hash identifier: Iey5CJuPcIWV1hUvtXQeLevyDFj6nbxOMvTcCWmllpQ=
Subject key identifier: BC:7C:2C:91:2E:5D:80:9A:2C:FE:BB:41:5A:14:96:EB:B9:8E:08:93
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5815A5ED667034DFA4B4580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:5a:5e:d6:67:03:4d:fa:4b:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=896516c0-751e-4962-8f37-38e031099c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:3b:18:1e:4c:fe:7c:44:03:88:5d:2a:e7:
4b:c5:97:ea:29:05:6f:99:c6:cc:71:4d:a7:a3:ca:
1e:7c:22:3d:fe:60:4a:d7:b3:85:e3:6b:b3:cd:04:
b0:dc:71:1d:af:16:79:ed:e1:ae:c0:bc:f5:0f:7a:
dc:3f:e1:68:17:86:68:a4:14:ae:36:c6:5b:c1:33:
e8:b7:37:9e:2b:e5:1b:54:3b:f2:1c:07:25:47:6f:
ed:ad:c8:aa:07:92:e7:82:8c:a9:8e:50:e6:77:63:
01:66:0c:9f:c3:b1:84:ba:45:35:f1:85:92:cc:11:
33:82:b3:b0:71:ce:a4:92:34:ee:f9:69:76:5d:73:
82:db:a7:6b:e4:9c:25:d1:11:5c:63:90:83:13:30:
48:d9:5f:ff:7a:79:00:7e:bb:53:90:95:12:2e:45:
14:38:df:72:3c:4d:0c:d4:47:0e:a1:3a:84:20:46:
e3:3d:cc:4d:9b:83:d6:a3:6c:66:84:22:9d:87:b6:
8f:04:ac:30:3d:2f:1b:b7:30:fb:b2:e1:20:f5:9f:
ec:15:4d:02:03:09:c8:5d:89:69:3d:13:31:3e:bf:
dc:51:fc:7f:77:e0:4c:83:22:37:87:bc:07:2d:01:
b0:5a:5c:c9:71:e2:14:9b:cd:03:5f:69:6d:95:46:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7C:2C:91:2E:5D:80:9A:2C:FE:BB:41:5A:14:96:EB:B9:8E:08:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8f24f1d-b9c3-32c1-a839-df61360f2d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d0:df:c5:1f:d5:c7:c9:cd:7e:f9:31:32:0e:41:93:12:28:
5f:96:e7:61:fb:56:09:43:9b:a8:3e:d8:7b:1f:b5:46:65:c6:
52:fb:0f:d5:f6:e5:db:a1:cd:16:be:ae:61:1b:92:f4:bb:f0:
53:49:0a:e5:34:54:c0:4b:56:92:49:28:ad:e2:36:86:82:1f:
2e:30:33:2d:2d:b5:80:36:7c:e1:c8:c5:ad:07:46:42:b9:18:
1b:96:86:8a:ad:0f:80:06:d2:86:c8:f0:4e:4d:ec:10:3f:32:
e1:94:76:3c:1e:99:4b:49:f3:55:2b:6f:17:60:e4:fb:35:b2:
ea:ed:6b:15:c9:ee:58:aa:57:eb:a9:7c:3a:ca:db:1f:16:65:
ba:11:6a:74:b8:15:be:38:1a:f7:ea:d1:75:46:18:a2:36:54:
97:bd:65:1d:59:9b:c0:02:04:db:b1:f6:81:5e:34:6c:34:00:
da:e3:0c:7d:03:76:8b:b3:6b:dc:8a:cd:6f:3f:33:f8:6e:db:
6c:ef:34:63:b5:8b:bf:9a:d6:52:bb:9b:fd:ed:5e:5b:3e:d1:
74:d1:b3:3e:df:e2:ab:93:76:27:85:92:c1:98:f5:d4:9b:62:
fa:e3:1a:45:83:7c:1c:60:b6:5f:aa:fc:3c:03:41:a6:bb:94:
8d:3e:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:47 2025 by rpki-client