Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa
File: daa10777-c684-32fe-9f6e-447d88b5dcff.roa (raw, json)
Hash identifier: 2fI3Vy7cRc4myU5T7fdMfRxlnPEB2wobQjQnCwKxir0=
Subject key identifier: 66:9A:6B:14:43:F7:48:6C:F0:B2:4E:F2:C7:AD:A8:84:D4:19:1E:86
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E8529694AB8F9507F180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e8:52:96:94:ab:8f:95:07:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2381b59d-4a6a-42cd-a21c-39e625fac0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:94:5b:ad:87:1b:f2:c4:4a:20:2a:2c:c5:
fd:22:df:80:46:ef:c7:86:76:a3:db:b7:19:df:9f:
67:87:f8:f0:c8:50:07:15:17:90:41:8c:99:85:3d:
fd:06:1d:63:84:62:5e:94:34:b0:72:19:ba:89:ac:
7d:a2:c2:b1:a9:2b:d9:9b:9c:ae:49:19:fd:e6:8c:
9b:78:b6:c1:2f:76:7c:b8:11:aa:73:3b:82:2a:1b:
c5:9f:44:58:09:40:62:11:c0:4f:fa:0c:64:42:cd:
3b:26:d9:4e:1c:dc:a5:98:32:39:84:34:46:c1:40:
ab:41:ee:3b:4d:1d:99:95:ca:2c:a3:e7:ed:aa:1c:
a4:75:fe:c9:87:ff:dd:91:d9:97:9b:c0:e2:74:a4:
47:9f:7a:ec:d8:53:23:54:61:03:fd:bd:25:1f:3e:
ae:1c:82:f0:23:c1:38:ae:77:5e:b4:e5:94:ad:e8:
6a:55:dc:03:99:b8:84:3d:00:75:25:63:4b:a7:ad:
60:5c:68:4c:16:3a:6e:47:97:f0:32:00:3e:f6:78:
7c:db:97:8f:41:dd:82:68:10:d5:dc:8d:16:2b:1c:
21:3b:5f:0e:ef:44:5e:87:04:7b:eb:04:45:b8:4c:
51:f5:78:af:92:15:98:16:c3:aa:dd:11:f2:8f:91:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9A:6B:14:43:F7:48:6C:F0:B2:4E:F2:C7:AD:A8:84:D4:19:1E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:d0:4c:ca:31:aa:fc:03:3a:d3:69:97:4e:e7:8b:bd:75:46:
74:42:05:0c:07:64:4d:45:38:83:57:3a:b1:75:7b:c9:8e:b7:
82:b7:b7:08:06:47:63:11:1f:f4:90:01:09:76:2e:82:14:a9:
61:0e:12:36:72:4e:b1:36:9e:80:0d:89:bd:2b:c7:97:6c:25:
2a:fc:86:45:e6:69:bb:a8:60:69:16:34:db:1d:25:86:77:51:
a2:53:71:02:cf:5a:12:6b:de:bc:e0:d5:e2:52:53:ba:08:3b:
ed:34:83:78:1e:65:52:2e:26:69:33:de:af:39:0e:c0:54:84:
8e:52:30:48:45:62:00:ca:ef:2f:97:bf:64:a0:f8:f0:4f:db:
ed:5b:bf:67:f5:83:ad:08:84:78:0c:af:f6:8b:83:ac:88:fc:
c7:3e:59:c9:cb:16:ac:17:7d:51:6b:3f:42:db:4c:70:41:2f:
2b:d1:2d:4b:ae:96:35:e3:45:b2:a0:c1:4b:71:89:5b:ae:eb:
3f:98:0e:b8:fc:88:2e:9e:49:ed:ac:cd:08:fa:b5:f3:c9:1d:
ee:f8:3f:f6:12:50:c4:a4:41:8e:63:aa:18:70:0b:f0:97:be:
23:6f:0a:d7:46:00:06:04:ef:04:5b:f5:1a:0b:e1:c2:ed:56:
e4:a9:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:06 2025 by rpki-client