Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa
File: b2803a04-3084-37b9-b27d-9e21bebb101b.roa (raw, json)
Hash identifier: DRB8UlYh5S7N9mmD8Zi8B6sEUjSPAYSFRtD2J6PFWPA=
Subject key identifier: B0:FD:57:C0:E0:77:A4:0C:7B:02:E3:AB:3B:2D:86:DB:E8:78:7B:2E
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F43285848EF61603739256FF04B8B37D0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.184.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:60:37:39:25:6f:f0:4b:8b:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=a95b79e7-3d9e-4dd5-8586-2c4282f89c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:09:3c:7e:32:6c:a7:31:e7:55:1b:d8:c7:
bd:8a:1b:c5:52:d8:0a:17:10:82:74:e2:76:a7:36:
09:e9:8b:0f:ed:5a:9d:70:5a:37:49:fe:ed:ba:7c:
80:44:a4:1b:e6:c2:6c:24:c6:81:1f:7b:ca:68:2a:
de:3f:e6:51:25:e3:62:98:bf:e4:e2:76:8b:9d:98:
be:56:6d:11:62:85:0c:57:6c:ae:0f:c8:ce:3f:aa:
63:2f:3c:55:6c:b5:72:18:68:8a:05:f2:f4:c2:78:
44:c2:23:1e:a1:1e:87:94:f3:00:25:a2:89:40:de:
03:01:e0:88:df:2d:1d:ca:0f:36:45:48:c9:7e:ee:
24:1c:d9:2d:5f:09:93:1c:8e:f3:1b:29:98:16:a4:
01:d6:8d:ae:0b:55:95:da:f2:b4:e0:64:45:a6:a4:
b5:3c:63:98:80:64:be:3d:63:2f:b2:fa:c2:71:9b:
93:a1:67:e7:91:38:cd:bc:7a:e5:8d:0b:e3:95:8e:
95:cc:33:22:76:ac:67:8e:27:c7:95:c6:ec:7c:d9:
c7:75:9c:33:ab:be:fd:17:30:98:9b:87:a9:63:2c:
60:ee:2a:23:40:2f:5f:6f:cb:ce:ee:16:01:04:33:
2d:8e:98:c6:00:43:3f:91:44:9c:80:ce:d4:69:78:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:57:C0:E0:77:A4:0C:7B:02:E3:AB:3B:2D:86:DB:E8:78:7B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b2803a04-3084-37b9-b27d-9e21bebb101b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:65:c8:e2:b1:f3:73:ee:f8:ee:37:f2:7c:81:c8:58:2e:65:
41:14:35:8f:70:60:1a:fe:6e:98:5a:7a:cd:6c:93:3e:f4:68:
ce:ec:ec:d8:cc:04:d1:30:a0:7a:38:40:df:19:34:86:21:d1:
db:ab:67:d4:f8:0b:c5:14:4b:ce:f2:4d:c0:99:c4:58:98:b7:
ce:58:6f:68:7f:a7:f8:d0:fd:19:24:93:23:3b:26:37:b1:d5:
20:17:e9:7d:24:30:ef:81:7f:a2:43:03:88:a2:37:ca:5d:a1:
a4:47:d7:13:03:b5:7f:b9:2e:46:3b:3d:a7:a0:46:53:67:61:
b9:ad:e4:31:0b:71:28:bd:29:58:c1:e3:74:3f:a3:c5:eb:a6:
41:9a:1d:27:d3:fb:fc:2a:e7:68:21:38:3b:06:94:e3:a4:c8:
07:42:51:64:ba:48:fc:e3:08:eb:45:cc:67:26:38:f2:b4:37:
58:71:4f:da:53:ef:5e:94:a2:d1:9c:b5:b2:95:ad:d3:af:3f:
71:8e:75:39:3e:1e:8b:9f:9f:0f:76:27:57:56:00:6f:ab:aa:
08:5e:c6:72:f1:05:cc:21:74:59:b0:3a:70:bb:65:15:11:f9:
a1:85:e1:9a:a7:47:83:ae:04:ae:c5:f2:12:c8:33:d8:d5:e1:
83:67:41:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:52 2025 by rpki-client