Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa
File: 1dc05d3b-5d97-310c-8346-241611fbe0f9.roa (raw, json)
Hash identifier: r91bRv6VFW4xU14eoTB0tWQ1LtVbF4RSEV2tDarCHnE=
Subject key identifier: 0C:B2:32:CB:47:A8:26:FE:9E:EB:4C:06:91:5B:1C:C1:43:E0:94:F5
Certificate issuer: /CN=b93a0e00-9040-44f1-b95b-7f094433ae50
Certificate serial: 010D0C9F43285848BE8629B4CAF0DF294B747180
Authority key identifier: 82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 13820
IP address blocks: 84.247.2.0/23 maxlen: 23
84.247.2.0/24 maxlen: 24
84.247.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:29:b4:ca:f0:df:29:4b:74:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a0e00-9040-44f1-b95b-7f094433ae50
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=f9c5efd6-142e-499e-844e-13301d1b94b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:11:9b:51:a6:1e:06:ce:c3:da:22:5b:9c:
6b:8f:c8:bf:f6:45:ff:ac:ae:ca:7e:36:0f:a8:67:
57:54:30:6e:89:cd:a5:e1:11:08:a7:ae:d8:e4:f6:
3f:75:4d:b3:38:43:28:1a:9b:6b:7c:ad:13:35:f0:
a4:c1:43:1b:81:7e:52:bf:f3:8a:a6:c9:58:96:44:
80:9e:f9:33:cb:a2:29:cf:11:8d:91:99:64:69:ee:
54:3c:4a:e5:a8:d2:50:db:72:f3:6d:08:83:2f:c9:
b0:e6:af:07:4f:d9:2e:12:46:95:c0:b8:d7:33:30:
47:02:58:76:90:bd:df:ef:48:a7:f1:79:c3:be:02:
d5:68:c3:ee:89:aa:cb:3a:fe:61:d4:0d:09:36:77:
32:18:12:5d:31:ca:90:8f:99:23:18:45:c6:e1:5d:
db:76:89:20:ac:33:61:bf:2f:2b:58:f6:09:f6:4f:
74:78:6d:a6:48:31:e4:d5:cf:32:c2:f9:ee:f8:d5:
6f:ed:b1:40:71:d5:51:da:f3:3c:79:84:db:91:3a:
b2:ab:ea:60:60:4f:a7:bf:20:f3:fb:e8:b2:43:99:
cd:5c:3d:32:20:66:31:6d:eb:7a:9c:7b:75:fe:97:
b0:6d:62:ea:8b:21:8d:58:08:f5:40:21:b2:44:02:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:32:CB:47:A8:26:FE:9E:EB:4C:06:91:5B:1C:C1:43:E0:94:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.crl
X509v3 Authority Key Identifier:
keyid:82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer
sbgp-ipAddrBlock: critical
IPv4:
84.247.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ec:6c:af:3b:21:1a:04:e6:93:df:8a:8e:aa:00:1b:b6:7a:
da:97:5a:81:c9:40:78:1b:6d:83:5c:82:f0:6b:86:5a:f3:95:
da:fb:c7:17:83:67:84:be:97:13:a5:29:67:26:ed:46:e3:a9:
ef:a4:76:9c:ba:9b:68:33:c4:4e:a8:df:1c:4a:2d:10:6f:ab:
b0:52:ff:d9:96:d4:e8:cb:38:7d:dd:3c:fc:b6:90:79:75:37:
cf:25:19:8a:77:c0:d2:dc:dd:91:f7:0d:1d:f0:c5:ed:80:4b:
57:a0:0f:de:ed:5e:52:cd:e9:14:73:a9:7e:a2:bd:9a:71:2e:
95:0b:65:d1:ff:cc:38:e5:2b:a8:f3:0a:eb:3f:c5:b2:dc:54:
65:25:72:5d:44:30:d5:92:db:d5:a4:3f:ca:ac:3b:f0:a3:ff:
58:ee:3f:b4:dc:a5:2c:0c:b8:a4:fe:86:b3:f3:c6:34:d2:8b:
0c:88:0e:f0:1d:63:1b:5a:6d:35:18:0f:bf:f3:e7:05:80:c7:
5c:6a:6e:db:db:04:97:f2:05:65:8a:9c:a0:b4:bd:4d:98:0a:
b0:7c:cc:db:50:ce:f8:be:1d:a9:33:1f:eb:be:1a:e8:ed:b7:
b0:d8:54:bb:9e:81:b4:91:06:4a:6e:85:23:85:4d:32:66:26:
c2:c8:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:07 2025 by rpki-client