Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa
File: 8917e5fe-6b12-3804-9883-7a75cbc60100.roa (raw, json)
Hash identifier: KbU8zGxvZ1vhj8/EsNKgggWxFasSkQPrtnB+CZBwL2I=
Subject key identifier: 6A:EE:A6:1A:89:06:2F:3E:5A:53:48:5F:4B:9D:36:13:15:0D:BC:43
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849218430A1700AEE3C7AAA8A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 184.29.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:30:a1:70:0a:ee:3c:7a:aa:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a5e7e0d4-d66a-4e7c-8a0b-3d84ac317af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:28:b2:1f:41:01:d3:42:d5:74:1c:84:aa:
b3:5a:7e:75:21:d7:42:c4:9b:ec:f5:87:96:d8:81:
5c:7b:d7:74:75:25:5f:ec:4d:07:84:08:ac:6a:b9:
dd:b6:29:12:cd:cd:bd:3d:6b:73:1a:f1:ac:46:d8:
43:7c:ac:38:b8:f1:cb:6e:a6:0e:4f:59:fb:33:75:
e0:c4:02:32:2d:f5:50:df:4c:eb:06:5e:7e:4a:60:
06:bf:f9:3d:02:d8:5b:8d:2e:83:22:8f:35:e1:16:
15:32:6a:cd:5e:33:5e:d4:14:0a:1d:3f:96:49:b4:
59:9a:57:13:ef:2e:a1:16:89:cb:f9:d9:c9:19:64:
71:76:a8:24:1b:38:dd:56:31:69:df:ec:07:87:4e:
58:68:7e:28:e3:fb:77:bb:6c:25:01:c9:cc:6b:9a:
84:08:d2:6e:18:99:57:50:55:0d:f7:a0:5f:c5:8a:
f2:d2:0a:79:88:9c:83:42:28:16:a9:b9:05:32:74:
86:83:f4:44:95:87:d8:5f:54:5a:a3:1a:88:ed:18:
47:0f:69:98:6c:b0:fc:ea:b8:ed:97:ec:fd:54:6a:
6c:6e:9e:b0:6f:cb:0c:3e:36:94:23:0b:9c:56:86:
9c:69:07:82:54:85:bb:27:78:f3:b3:30:77:7b:e8:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:A6:1A:89:06:2F:3E:5A:53:48:5F:4B:9D:36:13:15:0D:BC:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.29.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e5:f8:86:04:83:56:03:51:57:8b:a4:7f:2d:eb:62:75:f9:
ec:e0:f8:af:7b:cf:08:25:fa:97:a8:e5:23:0a:83:c2:b3:07:
24:98:16:a9:94:40:ff:d5:37:5c:32:f8:b1:4c:15:15:b1:5d:
9e:de:11:e9:53:12:b0:5e:a5:af:5b:05:ee:31:be:56:d6:d4:
51:34:36:87:ed:e9:bd:3a:78:f6:7d:cd:e7:4a:51:26:57:26:
fc:3f:cb:24:6d:df:af:3d:03:4d:85:53:73:af:09:21:dd:ff:
0e:48:5e:c8:f7:8f:e9:ae:01:c3:d2:26:40:4b:52:6a:74:62:
26:ec:b7:be:35:e4:62:2e:f5:2a:e8:92:79:cc:7e:0c:40:be:
2e:26:c0:8f:c4:54:28:42:17:97:4d:53:a4:f7:40:35:3a:84:
ef:8c:38:74:c7:12:70:1e:f8:7d:19:61:e7:9d:bc:03:f8:dc:
10:5a:9e:e1:01:84:d8:6f:9d:e9:df:7e:a9:e7:88:fc:b0:f9:
ba:ef:5b:ea:57:f4:66:a8:f4:a5:3c:54:a4:15:fb:b2:01:81:
da:27:3e:cf:b8:2d:7f:0b:66:f3:e8:f4:32:b4:5a:1b:1a:28:
43:c2:9b:74:38:65:ab:a7:7c:81:a3:e5:bb:ff:03:de:09:1d:
e8:a3:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:24 2025 by rpki-client