Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
File: d74be132-87cc-301d-8deb-b13bacf08e1a.roa (raw, json)
Hash identifier: uFVCgiI0uu6Zy2qoheSU2UWz8hgvoOlD5RbYJBX+dcU=
Subject key identifier: 52:4B:0E:8D:78:A2:EA:8A:C4:7B:F6:DA:29:A8:C2:85:AE:03:A6:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5815A937192CC7E814C0D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:5a:93:71:92:cc:7e:81:4c:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f5bfac53-2316-4489-9f64-2d39a22b5bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:40:5f:13:d7:be:51:2f:bc:5f:67:12:a3:
fc:93:a0:22:f6:fb:62:d2:c8:38:3d:e1:6a:c8:ff:
bf:a9:8a:a4:ed:fb:b9:ee:2c:af:79:4a:00:8f:7f:
2c:39:a7:ea:39:94:13:f6:54:45:32:07:d7:64:90:
4d:0f:b8:c7:e7:b0:35:07:d5:ce:e7:84:5c:20:39:
83:2b:2f:5d:bf:b8:9d:7e:60:d7:fd:bf:31:e1:a5:
8c:8c:30:45:a7:77:e1:b4:b4:86:7b:ab:38:68:87:
67:30:c1:21:88:2b:42:9f:cc:13:3c:35:07:e6:b9:
eb:e9:0c:1f:88:54:d6:0e:ce:78:d7:7c:56:bf:da:
8d:d6:45:ec:6b:2c:19:b9:9e:d9:78:da:3e:81:1f:
34:00:b3:81:d8:27:4d:c7:f1:4d:f3:35:bf:40:00:
7c:36:4a:89:89:4e:2a:bc:aa:5c:14:a4:3a:5d:0e:
3e:f3:26:40:47:7b:cf:a1:57:66:30:93:23:63:fe:
3a:3f:28:1c:10:8a:33:39:90:9d:94:ab:a1:f5:e3:
67:4b:b9:20:0a:a4:2c:ff:8c:66:55:1c:17:77:05:
02:8b:e7:c9:8e:70:3e:61:18:d9:36:91:db:a4:67:
1c:7c:e6:f9:2b:8a:42:b1:7b:af:1d:93:5e:9b:b2:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:0E:8D:78:A2:EA:8A:C4:7B:F6:DA:29:A8:C2:85:AE:03:A6:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:0d:ff:1e:eb:90:eb:c4:71:c7:59:6a:6c:e2:0d:3a:c3:c6:
2e:0d:56:e7:60:23:5e:c4:c8:29:f3:7a:0c:25:3a:f6:56:00:
1b:33:24:ec:a4:57:e8:d2:38:e7:a7:94:4f:5a:65:53:2f:83:
2b:af:69:1b:6e:92:50:b4:28:7d:a2:8b:31:7b:7a:37:f7:50:
0d:c3:d5:77:de:6c:8b:00:3f:eb:5f:81:ca:a7:53:62:6c:82:
eb:f0:a8:06:7d:97:bf:2c:08:6a:77:61:50:56:ae:c2:d9:90:
da:a7:68:bb:47:63:7c:18:ea:a6:06:1f:11:97:19:ba:3e:9c:
a1:d1:7b:d1:41:c5:31:64:b3:99:b3:9e:2b:aa:a3:7c:c2:ae:
ba:0b:4a:46:cf:ca:c6:5e:da:37:1e:49:cf:05:89:20:22:7a:
4c:c3:ed:72:a9:c4:ad:2e:5b:84:b2:bb:67:fc:4c:c7:6e:c6:
f5:64:2c:4c:3a:a9:17:0e:e4:90:7a:d4:c5:6c:9c:8b:af:a1:
50:a1:42:da:de:2e:c0:ab:8e:a5:a0:30:04:d6:70:90:d3:33:
75:b1:f6:8f:a4:61:e4:b9:66:48:b6:04:ad:87:58:e2:75:45:
51:95:ba:c7:21:05:b7:02:60:0d:48:7a:b8:5b:01:b4:e8:0d:
b7:9b:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:05 2025 by rpki-client