Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa
File: 85604a7c-b0e6-39c7-9011-6f96128586c3.roa (raw, json)
Hash identifier: 8gHkZg/N8mYrytuiNYwmJcWc1++o+35+I+xXC1Y+h2c=
Subject key identifier: 07:39:A6:C8:E8:F1:C7:58:94:A3:2C:94:30:76:B1:DE:16:73:39:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489075FB0BE43AE996FC77E800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 4775
IP address blocks: 184.87.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fb:0b:e4:3a:e9:96:fc:77:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=166602ac-2424-41e4-a529-3c9d50e1e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:83:46:ef:b1:94:f3:b0:e3:fb:cd:1e:c4:
40:a0:91:4e:76:38:e1:52:30:dc:10:d2:6b:6d:34:
c4:9c:b2:0c:19:5b:29:08:e9:a8:94:c9:64:a2:b1:
04:09:02:c4:79:3c:41:99:2a:ab:7b:d6:47:77:a3:
45:1f:cb:8a:b8:b6:e0:b4:43:c0:c1:cb:cb:07:a8:
99:f8:fe:15:75:f0:d1:38:0b:c3:84:56:5d:af:da:
23:b9:e7:88:62:00:e4:11:3b:21:ed:b7:e0:d9:c3:
93:30:97:7f:1a:b6:3c:6c:c1:8b:5f:3d:ce:0b:a3:
47:83:46:57:28:67:ed:6c:7e:24:2d:3a:0e:75:a5:
71:2a:50:52:fe:c4:fa:2d:07:c3:1e:5b:24:33:bb:
36:18:fa:a0:20:ba:20:49:ff:e5:95:c1:bc:89:96:
b3:78:a9:1f:26:f6:17:8d:df:4c:8d:c3:f7:03:34:
cb:94:91:b7:8e:bb:bf:29:79:54:2f:b7:5c:e4:76:
d6:58:01:36:f4:f4:5b:12:11:4f:bc:bf:b8:35:7a:
6f:41:03:f2:a9:5a:ca:be:42:4f:f3:91:7c:66:ea:
f5:42:9e:c9:55:54:66:0a:c7:98:5b:9a:71:00:b0:
b9:11:f2:da:ec:4c:7e:35:11:c7:45:f5:4e:63:12:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:A6:C8:E8:F1:C7:58:94:A3:2C:94:30:76:B1:DE:16:73:39:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.87.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c8:10:48:ac:54:45:ed:94:fe:02:20:22:fa:6a:68:10:5c:
6b:c2:5b:99:35:65:7e:16:ca:01:7c:6f:77:7c:99:8c:29:81:
0d:8d:7e:37:26:3d:46:2c:25:ec:45:7f:00:a5:22:ba:58:3a:
5a:69:61:a5:48:e8:ef:cd:12:e2:2a:c2:3b:cf:a7:63:59:d7:
59:7a:26:6a:2d:cd:46:8d:8f:b4:96:7c:ca:8b:0e:37:21:6e:
b3:73:53:39:52:be:a0:4d:7e:51:94:15:d9:9b:8b:d9:19:d5:
5d:00:95:9d:29:ff:51:fe:14:ee:62:99:57:7d:b5:63:61:ee:
6f:19:96:e6:dc:4f:c7:be:87:71:d0:df:11:50:7f:cc:2e:a6:
da:6b:7a:46:cf:29:37:f5:cc:7d:10:28:03:b0:13:89:76:f9:
71:68:9f:4a:e8:74:07:29:60:30:d1:c4:9e:cb:8c:b2:cc:a8:
8c:7f:eb:0b:ce:af:d2:99:50:9e:cb:59:56:10:28:b5:b0:fc:
56:1b:64:b3:6f:f3:97:bd:eb:88:49:62:35:f3:85:56:e8:09:
87:5b:cb:5b:67:44:b3:91:ed:b0:6f:07:0d:59:ba:d6:f5:b0:
c2:30:6a:f5:ac:b0:9d:96:f2:4d:6b:d6:11:f7:6c:0f:13:fa:
01:84:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:52 2025 by rpki-client