Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddde3c36-f856-3bbc-b318-9ecca774b529.roa
File: ddde3c36-f856-3bbc-b318-9ecca774b529.roa (raw, json)
Hash identifier: kcgHoyEsaL1dsqeaoqY9z6cX217j++9lzwNtdS/aPtA=
Subject key identifier: DE:57:C8:56:CF:6E:EB:45:ED:14:4A:9B:B6:36:F2:41:61:C1:22:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849218431E8DAA177EF310F3C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddde3c36-f856-3bbc-b318-9ecca774b529.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.31.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:31:e8:da:a1:77:ef:31:0f:3c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=da7fdcc1-5128-4a75-a4ca-0d37abb31a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:df:60:cd:54:8e:d0:3e:0b:6e:e8:17:1d:
a5:b5:24:2f:b4:36:b1:25:ba:7c:0b:e9:07:a4:00:
49:6b:56:88:12:55:6b:71:27:ff:0a:33:66:b7:9e:
ef:5e:aa:81:5d:26:c7:1b:32:7a:b7:d4:c1:42:14:
47:43:20:38:8a:d6:0c:c1:07:14:73:b1:c4:59:fe:
01:a7:01:a8:9c:21:aa:05:0e:03:cf:46:b7:01:ea:
b2:8a:84:a2:2d:61:c9:63:a0:92:e6:8f:07:9c:cf:
a3:ff:31:9f:23:9f:9f:84:7b:5b:50:54:96:8f:dc:
ee:7e:1a:ef:89:1a:00:8b:e9:10:6c:13:3f:24:b0:
81:a0:96:60:66:77:a2:bc:a2:28:7c:6e:c7:59:fb:
45:12:f2:b9:25:69:e7:b9:ef:31:74:15:c2:45:6b:
66:bd:f7:cd:cf:10:a6:95:d1:ec:9a:0a:57:1b:a5:
e9:f3:20:a1:5a:2d:4c:62:92:19:98:77:74:88:83:
b9:0a:07:53:af:71:a5:bc:9c:67:87:34:e4:e2:59:
f6:ab:fb:01:98:90:8c:54:d0:92:f6:11:1d:29:57:
a9:88:03:48:19:ea:53:a8:b6:94:85:18:0d:6c:1f:
de:80:93:82:56:84:9c:5f:61:ae:3b:22:78:c3:22:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:C8:56:CF:6E:EB:45:ED:14:4A:9B:B6:36:F2:41:61:C1:22:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddde3c36-f856-3bbc-b318-9ecca774b529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.31.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:70:75:e1:fa:9a:7c:28:3e:57:02:3c:28:06:36:55:d2:59:
e9:e4:f1:b8:45:e2:70:5f:51:e0:07:ef:49:ab:d6:57:3b:c5:
f1:b0:df:70:c9:40:2e:15:88:53:a0:b8:f8:ac:ed:20:78:4f:
c7:06:a3:d4:f1:97:4d:ce:0b:b9:d2:49:6b:a0:44:d0:ae:fd:
bd:7e:42:e6:3f:1b:1a:9f:f7:e2:f5:1b:06:f2:c5:f6:3d:f4:
f0:20:b6:c5:3b:3a:f9:8e:b1:b0:f5:05:ce:e9:f5:4e:0a:78:
b7:6c:03:2a:45:4f:70:35:3f:3a:d9:d5:1d:4f:ef:90:98:3f:
89:07:ba:5c:e1:c1:be:ba:03:88:82:e0:59:0c:e9:4a:4b:ac:
d3:b6:5e:3a:48:66:d7:4d:ba:a3:bb:76:0f:b1:b7:be:61:b1:
4d:94:a1:ad:d3:d8:59:14:67:81:9c:f0:ab:38:ac:be:18:b4:
20:94:d3:03:de:99:99:9b:41:96:74:54:11:59:ac:0a:14:a4:
36:ec:47:2e:9c:fa:9b:41:c6:2d:bc:b1:4e:59:0b:cd:45:65:
17:58:22:c3:54:d5:f7:1e:2d:a1:ef:b4:cf:a1:79:f9:19:21:
28:63:f6:ba:7b:20:4d:73:01:7b:81:87:dd:13:07:e0:b7:b0:
24:56:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:19 2025 by rpki-client