Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa
File: 3bdaef7d-61e4-33a9-a168-75cb034a8456.roa (raw, json)
Hash identifier: g2Asw3ln7hkyCd3H6ohuoneM4291utiynqpNaCEXGB4=
Subject key identifier: 7F:EF:C4:91:54:8B:51:A6:19:98:48:C5:BD:43:A0:BF:0D:DD:91:57
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DD3BAFB3746179E1367A4300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 24319
IP address blocks: 184.28.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:af:b3:74:61:79:e1:36:7a:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=fe6b9cff-dd68-47d9-941b-b79f98bfad34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:52:d3:5d:4a:ea:5b:41:dc:b8:7c:9f:cb:
5d:91:b6:20:ac:9f:f6:e5:83:6e:7c:ec:97:eb:34:
7c:03:64:9e:58:0a:6f:62:68:a8:1c:22:2b:ac:ac:
61:14:7f:b8:4f:48:80:35:9f:e5:36:56:f0:35:af:
1e:62:32:e6:e5:fc:f4:1f:0b:e7:b7:5b:e3:9a:08:
ec:c3:e1:09:0f:93:25:4f:6c:0e:8b:bf:4c:18:dd:
f5:40:7f:6b:9b:b7:66:cc:a7:cf:ea:4b:31:c6:5e:
1c:74:96:d2:a2:26:64:31:0c:76:33:97:95:e2:12:
c6:e1:b3:60:6c:02:1e:2a:38:69:af:ca:fa:dc:66:
0a:32:fa:64:8a:f3:80:ec:03:32:c3:2a:fc:d7:7a:
0f:ce:67:b0:36:21:5a:18:51:2e:99:84:fe:3f:0c:
6d:a5:24:39:84:36:d2:88:85:ed:07:47:5e:0f:29:
e9:f1:ae:5d:ae:7c:64:4c:6c:d9:aa:3e:33:02:3b:
e0:22:3a:58:3b:dd:5b:e9:fe:f0:28:c2:31:b1:83:
2f:aa:67:b0:75:06:5e:27:67:c6:7d:25:80:94:4a:
7b:76:43:0a:0b:2d:f2:22:f0:6e:c6:25:a8:97:65:
0d:6e:d2:d0:f8:b3:5a:f7:20:b5:93:d6:6c:a6:99:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EF:C4:91:54:8B:51:A6:19:98:48:C5:BD:43:A0:BF:0D:DD:91:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:f1:d0:7a:33:ee:12:14:65:3d:c3:c2:a3:bf:e5:3c:ef:33:
88:59:a5:23:82:ca:ae:49:ff:77:6e:d2:a0:d2:6d:92:3c:69:
ac:7f:6c:91:c1:f6:f2:81:dd:20:eb:0c:51:85:7c:53:69:76:
21:17:2c:dc:05:39:0d:0c:84:0e:d9:ca:cf:f1:5c:10:9d:3c:
25:dc:df:11:8f:42:48:eb:3c:c5:58:85:83:cd:ea:62:89:4e:
14:5a:ca:7f:45:ec:0f:02:4c:82:e1:d7:9c:f8:13:9a:a7:f2:
f1:71:f1:cc:0b:ca:f6:92:9b:1e:5b:07:b1:53:25:a5:46:2f:
ce:98:d8:7a:f8:4e:91:76:3b:85:15:19:7c:e1:91:37:b9:ea:
d4:7f:98:4c:6b:eb:48:c4:c7:b1:7c:d8:b2:c3:e7:2a:bf:f1:
3c:bf:87:ee:ed:55:3f:81:f0:15:a0:6e:20:3e:2e:01:1d:6a:
11:42:19:fe:e1:df:7f:16:b6:97:bc:ab:a3:ae:58:d3:93:f2:
e8:aa:6b:16:26:cc:96:9e:09:b3:e1:59:91:da:6b:4f:75:cd:
d2:eb:36:11:91:59:e6:d9:cb:da:c0:a9:8e:73:5c:b5:43:c1:
b8:90:2a:2c:7c:d5:02:b3:e6:dd:02:78:0d:28:46:ea:26:d8:
99:70:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:47 2025 by rpki-client