Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95bc256-87a7-3242-a71b-12ac3c6c1364.roa
File: f95bc256-87a7-3242-a71b-12ac3c6c1364.roa (raw, json)
Hash identifier: fzK72rCjG6hnaqssDmPoXcNTkCwTr4gwzSSOVg8QEC8=
Subject key identifier: 26:20:F6:67:FE:5A:E2:4B:30:5A:54:BB:D7:C4:F2:59:4B:78:D1:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849218430F82F477B3F7698AF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95bc256-87a7-3242-a71b-12ac3c6c1364.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 35994
IP address blocks: 184.29.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:30:f8:2f:47:7b:3f:76:98:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=94ea3d6f-e67a-458f-8e0f-93a0966e25f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:82:4b:ee:3f:2a:5a:dc:e3:2b:93:34:10:
24:49:64:50:86:ae:fa:39:b9:0a:72:22:1e:32:3b:
e3:cf:0f:40:49:c0:94:19:a4:ba:c1:56:7e:96:74:
28:b4:68:cf:d2:73:b9:fa:24:82:eb:c3:d1:cd:4e:
3d:5b:95:ac:e0:e1:08:4d:e0:ed:9f:ec:66:26:d4:
b2:11:2b:22:66:f3:49:89:c0:e8:a4:da:f4:51:43:
2f:1a:a4:59:23:df:2d:95:7d:24:08:d8:0b:86:d1:
85:b1:16:d7:67:0a:6a:ae:e0:ba:a9:d4:99:e3:2e:
28:2b:8b:e0:ac:00:3f:c6:aa:ce:3f:bb:8a:ac:6c:
0d:a4:a2:be:ec:98:ca:3e:86:bd:b7:47:3d:9a:16:
c2:4b:3d:4e:6d:a8:21:54:21:59:f8:45:8e:8d:14:
ca:54:1c:66:93:a4:0d:92:c1:e6:68:2a:cd:4b:6c:
01:9b:48:92:19:0e:bd:9d:ff:00:7e:29:62:be:5f:
1c:7d:f2:90:65:9f:b9:49:22:0c:2f:58:c1:b5:cb:
47:8b:4f:cf:00:96:5a:66:75:c8:87:b8:86:e5:79:
5b:db:47:aa:7a:09:1e:b2:ec:20:2e:ed:0f:5f:3a:
53:b5:36:95:fd:29:6f:df:86:e7:84:ac:5a:ef:6a:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:F6:67:FE:5A:E2:4B:30:5A:54:BB:D7:C4:F2:59:4B:78:D1:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f95bc256-87a7-3242-a71b-12ac3c6c1364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.29.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a3:f0:18:82:39:ab:aa:dd:7e:08:64:8b:69:b2:3e:16:53:
82:f9:94:8e:72:3b:36:87:cc:b2:00:d8:9d:f2:32:63:19:07:
87:82:48:3d:01:31:c2:01:a2:ba:8a:fe:0e:d4:c2:4f:ae:1b:
8b:c5:32:15:1b:4f:ed:73:08:e7:fe:14:61:ef:6d:d8:cc:f1:
09:c5:28:0a:f4:77:fc:0b:5e:d3:b5:a6:7b:04:2c:8d:1c:36:
94:4a:80:20:1f:28:45:d6:cc:29:39:66:68:a2:d6:d1:3a:fc:
f4:ad:3c:c8:98:42:19:b4:eb:c4:7d:8e:36:32:5b:ec:28:eb:
82:49:11:ac:9f:ce:8c:f1:c4:4a:d1:09:15:b1:27:a4:ce:7d:
1e:59:02:29:f1:30:77:6b:e5:ad:fb:98:d1:3f:61:4e:4c:c4:
22:73:be:8c:2a:88:1e:cf:e7:87:24:eb:c3:fe:c5:60:22:cd:
65:ae:35:c6:8c:84:2f:cc:6e:48:79:e3:e8:41:17:91:dc:02:
89:54:44:d3:38:e8:b7:35:10:e8:a9:13:0d:d5:f2:9d:76:ff:
ce:1b:10:f0:ec:39:6d:1e:64:66:bf:e5:c1:14:60:62:58:4d:
10:f3:6d:d2:fd:1e:43:67:a4:b8:d0:d5:e4:ee:e5:b3:00:66:
30:e6:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:46 2025 by rpki-client