Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
File: 8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa (raw, json)
Hash identifier: 1hH7LWOYvT54f8L+Fd3Ah01p1yNxoE0CkZwYBRunGvU=
Subject key identifier: CC:43:29:46:4A:C3:77:E5:B0:7D:2E:F8:9F:A0:D7:CA:14:C8:1C:B5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830B21C93826FA20DB66F70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 9299
IP address blocks: 184.87.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b2:1c:93:82:6f:a2:0d:b6:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=6138b6aa-0f58-4413-b38d-a02bb16ce63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:38:08:53:74:8d:41:2a:9d:9e:ab:59:2f:
44:e0:cf:ba:06:80:59:11:73:6f:f4:a9:0e:e9:e4:
9c:04:24:5c:fe:3f:89:85:76:a1:9b:e7:f9:bf:22:
fc:4c:bc:39:45:13:85:10:03:b8:bb:c6:c3:72:fe:
98:7e:b1:96:6b:df:cb:9d:cd:dc:01:f5:70:24:fe:
52:72:56:db:44:75:06:78:41:bd:fb:8a:47:cc:fb:
6b:12:1f:f0:08:f9:61:13:19:de:56:df:fb:ef:03:
c7:d2:bf:16:6d:ca:bc:d9:22:27:50:26:86:ae:6e:
53:33:4f:8c:6c:1f:47:72:1e:2c:61:86:18:e8:86:
9d:4b:1f:46:bc:5c:32:61:14:7f:2d:cd:a0:45:c1:
42:c7:ac:2b:61:ae:33:57:0f:35:5d:e9:ed:61:d2:
5e:c5:bb:85:55:b7:e3:54:3a:70:96:3d:22:8b:65:
53:5f:af:15:b6:73:68:da:b1:0c:3b:07:38:75:5e:
71:64:e9:b8:4b:91:05:3e:be:23:b9:c7:51:34:21:
d4:19:b3:54:9f:f0:77:9d:76:c3:da:8d:2c:8b:9f:
77:66:b6:15:32:76:b9:60:d4:6b:8f:cd:a3:a4:bd:
9b:f7:ab:fb:29:76:84:57:37:ec:e9:53:37:6f:60:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:29:46:4A:C3:77:E5:B0:7D:2E:F8:9F:A0:D7:CA:14:C8:1C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d413dd1-ed31-37a3-88d7-cdfc2c2f0f6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.87.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:22:c1:a9:48:5f:e5:f6:df:ad:45:81:3f:2d:c1:5a:eb:fc:
4b:47:a6:33:8f:d3:26:f7:3e:1b:7f:e9:b2:51:59:00:7a:bd:
44:a4:2a:4d:46:25:8f:f3:5f:43:25:bd:dd:bc:61:c1:4b:bd:
c6:73:a2:30:72:12:fe:50:25:d4:60:5e:87:3b:f8:05:2e:5a:
b6:d3:4d:5d:ec:fa:7b:77:62:db:a9:e3:91:66:d7:ea:aa:15:
b5:8b:b5:e4:a4:7e:11:c8:56:12:2f:d5:0a:11:85:55:ca:24:
a6:1f:8f:22:00:7f:22:af:1e:e3:dd:0c:fb:d7:45:5a:a4:33:
4a:38:10:3b:02:06:72:21:d3:74:79:c1:71:8d:3e:3c:a1:54:
76:9b:88:99:98:20:c6:61:80:90:42:ab:f9:6a:9a:c9:79:94:
c6:18:9c:b3:2e:1b:35:dc:1b:50:c1:e7:b1:6a:f7:71:be:8d:
86:dd:f5:c2:3f:b4:b1:4b:03:b0:89:5a:d4:5a:c3:dc:f8:a5:
27:4e:a9:df:da:b5:de:1f:17:64:3c:d8:5b:2f:5f:aa:86:42:
e5:54:a4:0e:5f:0b:ba:ea:45:48:0d:bc:76:53:d1:b1:fe:06:
bb:03:63:19:54:4d:c1:79:85:07:8d:38:af:9a:23:8a:b3:2e:
98:5f:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:29 2025 by rpki-client