Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa
File: b49125fe-35ba-3ca0-bf4f-39057abb8317.roa (raw, json)
Hash identifier: oSiipK1IZC2LbY7JlWgvosUZIfqJa09cVca4KY6MDpE=
Subject key identifier: 1A:75:0F:19:62:D2:07:87:61:65:09:27:17:BF:25:D6:55:1F:8F:41
Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial: 010D0C9F43285849088164CD5CF72AAF0FD2A680
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 19202
IP address blocks: 184.170.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:64:cd:5c:f7:2a:af:0f:d2:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=db2e5506-d6b4-4060-a9fd-e322433aa687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:d7:6e:34:0e:1b:52:c9:d0:7b:68:6f:e9:
89:21:98:54:62:e5:0d:9e:67:c6:72:76:62:45:26:
26:d1:af:fd:3e:8d:bc:28:9a:2d:ff:00:3e:77:85:
fc:39:2c:7f:59:1d:90:8b:a4:7e:ad:6d:29:36:57:
7d:86:4a:4f:a5:b9:16:63:2f:74:72:a7:33:fa:1f:
90:6a:7c:a3:ab:35:7c:9f:03:95:84:d8:83:c4:b2:
e0:b6:a1:14:0c:f1:55:25:79:da:46:69:20:0e:da:
d3:b3:1a:e0:38:f1:49:af:29:a3:f9:0d:e9:db:55:
da:36:fc:35:07:6e:4c:87:6d:10:1e:fc:55:2e:3b:
96:6d:f3:d4:b6:4f:57:e0:e7:43:21:0a:85:3b:2c:
60:37:02:29:1e:67:38:6f:7d:22:7c:ee:f1:54:49:
cb:59:4c:59:5d:37:5a:6a:6a:d6:4a:76:88:3e:7d:
bc:fc:b6:a7:9b:5b:e6:b9:97:bc:e8:db:bd:fd:7a:
e6:e0:e2:12:c3:c3:21:51:ee:45:b5:c1:ed:1c:cb:
d7:a2:c6:33:c5:34:af:d2:a3:2d:7e:38:e3:ae:47:
9a:f9:ba:ed:37:60:40:3e:2f:96:1a:0c:51:84:05:
0b:ff:45:e9:19:e9:4b:a1:f5:31:a8:4e:44:0e:a4:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:75:0F:19:62:D2:07:87:61:65:09:27:17:BF:25:D6:55:1F:8F:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b49125fe-35ba-3ca0-bf4f-39057abb8317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
X509v3 Authority Key Identifier:
keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
sbgp-ipAddrBlock: critical
IPv4:
184.170.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:27:c9:01:71:d9:28:b8:60:e4:c8:4b:5e:68:a3:df:64:66:
46:42:d8:ee:3d:a8:58:cb:d4:30:ec:c8:23:66:5e:f9:1b:8f:
09:e2:f2:80:f3:2a:0b:b9:12:4c:60:d3:89:dd:11:6e:f7:e4:
52:7b:64:70:3b:0d:e4:24:19:b4:90:07:d8:b5:03:82:e8:69:
cb:f5:0a:f7:a9:ee:14:9e:77:a3:c9:95:44:3f:6b:d2:75:71:
da:88:be:96:0b:b7:7b:aa:34:58:0e:22:71:1d:5e:fb:e8:03:
d5:2c:86:a3:89:e0:97:a0:ec:69:67:85:d1:25:00:7b:0c:09:
b9:3d:f2:03:8a:04:21:ef:cd:5f:ce:aa:50:f3:67:7a:d9:e3:
b7:78:1b:91:44:f8:55:09:92:ae:35:36:cc:35:9e:7a:e1:dc:
d2:63:e4:88:c6:61:43:2a:cf:a9:aa:50:0d:f5:87:d3:7e:05:
4b:11:07:c5:74:2c:b8:2e:1a:a1:d0:01:68:c6:7f:95:5f:af:
4a:b9:fa:56:f2:9e:20:41:70:79:14:87:c1:49:f8:a0:b3:49:
34:c0:b5:45:13:76:1b:9c:96:fe:ab:c8:bd:f2:71:b4:f3:7b:
06:85:c9:89:3f:02:f8:3f:75:53:b8:85:44:5b:b7:12:b7:c1:
dd:10:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:43 2025 by rpki-client