Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa
File: c23a7526-f08d-3cf8-92df-a220fcbaffac.roa (raw, json)
Hash identifier: JjKHKNCwr6CWBG3TO7LHpYwgNjJpjUdEjcfMX6MJAvk=
Subject key identifier: 53:83:26:27:3F:9A:F7:F2:B1:FA:54:A2:92:42:5C:88:A2:B7:71:E4
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584908816311DFEE6762B21BE89A
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.184.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:63:11:df:ee:67:62:b2:1b:e8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=098f8da5-f445-4387-90a3-ebdabef97d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:4f:ee:44:b1:8c:01:8b:df:80:bf:9b:e5:
49:47:e9:b3:f1:df:ef:a0:85:d6:91:3e:08:6a:7a:
70:fa:76:94:6b:d3:55:dd:7f:27:05:70:a4:a6:fb:
38:e1:37:05:68:75:b1:ba:0d:d4:07:c7:dc:61:42:
ad:a9:bf:55:42:d3:42:a0:69:ed:ff:f9:db:1c:c8:
b4:61:89:30:e3:5c:32:98:8a:f2:0d:75:17:14:54:
d7:20:ec:9c:7f:19:24:16:4b:fa:f3:76:91:02:08:
49:8e:ac:f2:a8:87:9e:d0:8f:fd:71:0a:00:33:5d:
18:11:fa:37:40:57:ee:94:2d:cb:8a:2b:0b:14:32:
99:fc:97:c8:e6:7a:5f:e7:c7:43:85:9e:0e:7b:26:
50:6e:37:3c:c2:ae:ff:49:ea:19:fc:86:97:b9:6a:
22:cd:3b:fd:9d:d7:cf:29:6e:a1:b8:2c:61:b2:49:
92:95:c0:ae:4b:ea:2b:f5:5a:99:a8:e0:cc:e6:5a:
f8:6b:3f:31:9a:17:19:f4:19:f2:c9:d1:e7:54:8a:
99:05:32:75:bc:ea:a7:bb:82:d5:1c:26:cb:ab:12:
af:84:29:ac:25:a6:6d:9c:cf:6c:a4:3b:da:c3:52:
67:96:fc:77:7b:62:46:0c:40:6a:28:c1:4e:26:a2:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:83:26:27:3F:9A:F7:F2:B1:FA:54:A2:92:42:5C:88:A2:B7:71:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/c23a7526-f08d-3cf8-92df-a220fcbaffac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:74:de:71:2b:00:ad:dc:98:be:8c:97:b1:85:81:02:25:c4:
48:a8:0f:34:56:74:e4:e8:be:1d:f5:d7:a4:a9:62:35:17:f2:
65:2a:0d:82:6a:a6:3e:79:88:ab:19:ff:9c:f9:ad:57:92:1a:
ab:2e:37:3f:65:d1:ba:58:42:92:c1:f9:46:9d:63:55:6e:f1:
57:f0:2f:3b:35:b1:9c:b8:ca:f7:26:10:aa:fb:d2:76:20:39:
31:87:9f:45:a8:eb:b6:fe:4c:6a:0b:42:a6:83:80:32:cf:c2:
70:23:d8:15:97:ad:31:7a:9d:60:77:ec:77:d5:af:2d:c6:04:
4d:6c:20:f5:55:6d:56:e3:c3:cd:8a:b4:f9:c1:8e:ae:ed:ae:
fb:eb:5a:19:99:b0:bd:f0:36:9d:ff:f2:67:de:9b:98:d5:c2:
ee:d0:21:11:5f:d7:51:5e:b5:f9:e7:77:3e:a0:94:fd:a5:df:
94:b4:3a:8d:7f:4f:77:88:19:e4:c6:7d:39:00:c4:14:d8:58:
87:43:e8:e5:58:ac:4a:1b:e7:19:66:69:10:4e:dd:00:8d:37:
e0:c4:ad:e5:d9:d8:f1:d9:e7:1c:ae:36:dc:e9:a7:3a:03:43:
ef:8d:8a:57:08:fd:3f:59:ab:b8:d4:6a:8a:e9:ad:f8:46:8e:
0b:7a:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:11 2025 by rpki-client