Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa
File: cb9f349e-81a2-3b62-a174-0e2494547880.roa (raw, json)
Hash identifier: CVoN6Kamm6MO3z8I+i7uA8vuO2jwehALV0BiWLkcvxM=
Subject key identifier: 68:9C:A8:A3:25:70:DF:F6:18:BB:D0:1D:DF:B7:72:16:C3:9F:CB:BC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58152E5C960B5A6F271F300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.20.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:52:e5:c9:60:b5:a6:f2:71:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9219c21f-57a2-4d15-8821-f3762c0ca0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:f1:86:c3:2e:1c:5d:08:8b:8e:5e:16:50:
da:92:7b:74:61:af:2a:82:9a:3c:14:be:f3:0f:76:
1e:94:c9:ec:ab:fd:3a:62:70:e9:0d:54:ea:f7:1f:
ea:cc:93:d3:be:c9:af:d0:cf:44:4b:97:aa:2c:4b:
90:d1:e4:b1:e5:21:b8:b7:0e:77:6f:cf:14:50:31:
6d:20:30:45:e0:8c:9c:4a:da:71:9f:ff:57:73:88:
80:c9:00:80:96:95:bf:3c:5f:88:f7:0a:c1:51:75:
3f:f7:68:69:86:e1:e2:98:8d:8a:ed:d0:2d:f4:7c:
1a:e2:e8:4d:53:fa:d1:34:88:8f:fb:b3:1a:43:3c:
00:87:aa:77:e0:1d:c8:48:05:5c:e8:e7:2d:26:cc:
e5:b8:6f:0b:95:81:bc:21:ac:30:e6:d5:92:40:87:
28:7c:70:3d:4e:5a:a9:00:f5:55:ec:88:a0:91:b8:
78:5f:10:c9:06:bb:42:b6:22:7e:24:7d:7e:db:69:
b6:ae:b3:19:f8:06:b1:f4:a5:43:47:e8:ec:17:0c:
9c:7b:e9:86:e6:50:a2:8e:d4:fa:8b:d0:56:84:33:
27:38:1a:a5:3f:d4:bd:f8:64:92:c6:1e:d6:52:24:
c2:da:b8:4e:64:3e:e0:68:30:7c:ba:03:66:76:da:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:A8:A3:25:70:DF:F6:18:BB:D0:1D:DF:B7:72:16:C3:9F:CB:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb9f349e-81a2-3b62-a174-0e2494547880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:ad:c5:a0:3e:a0:0b:76:54:1d:10:cc:70:05:47:01:b2:6b:
c4:ca:f7:ec:a8:86:d3:33:3a:b9:4c:e9:c4:9c:ff:20:7a:e1:
33:03:fb:2c:04:14:c9:6f:13:c1:7f:a4:ca:fb:09:f7:de:45:
ee:b0:c7:81:f4:df:d8:b7:da:5f:a4:78:ea:f8:1e:ea:b5:ff:
f4:22:47:27:db:2b:5b:6f:56:01:06:98:cb:37:b9:48:3b:87:
24:0c:a8:56:6c:b6:c9:ad:f1:61:b5:23:da:67:37:87:d6:58:
e8:8d:32:89:e6:38:38:09:77:59:53:e2:a6:7f:73:ce:9d:1b:
a8:ca:17:2c:00:fe:3f:73:e0:00:01:d4:98:5d:98:6e:cc:19:
51:3c:3a:30:8d:69:f9:2f:27:05:43:b2:2b:c7:7e:a8:9a:3e:
0e:92:4d:45:b8:93:7c:03:4f:f5:97:bc:61:a0:92:f7:8b:5e:
3d:4f:df:28:cd:bc:ec:fb:80:0e:29:d9:1e:d7:a1:56:3e:70:
76:fe:61:d0:2b:b5:9d:05:41:80:e0:2c:38:7f:e5:c1:21:c8:
61:50:83:80:fb:33:0f:e3:80:a4:b6:34:03:6e:18:db:dd:10:
fd:0d:2a:2e:c7:b9:1e:48:03:18:ba:1d:33:80:da:5d:d3:48:
16:1a:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:58 2025 by rpki-client