Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a/3005cbb4-414b-3002-90b5-8804652532be.roa
File: 3005cbb4-414b-3002-90b5-8804652532be.roa (raw, json)
Hash identifier: sG45Hl/whg4FrURBzA3F2DDtCoWLvYHXd+nhW/TMxYE=
Subject key identifier: DC:F1:39:D9:53:CB:A1:0F:02:12:56:97:8F:DB:E7:41:75:23:8F:31
Certificate issuer: /CN=a78cb68b-4f24-4533-932a-d843cdb5015a
Certificate serial: 010D0C9F432858491246C75FE4D525B1E0294700
Authority key identifier: 77:B5:43:CD:9D:A6:4F:B8:03:A0:E2:F8:94:AE:C1:8B:7A:9D:19:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a/3005cbb4-414b-3002-90b5-8804652532be.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 151338
IP address blocks: 23.164.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c7:5f:e4:d5:25:b1:e0:29:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78cb68b-4f24-4533-932a-d843cdb5015a
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=2d1ed67e-23f2-4470-bf9d-cabef2f38712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:58:20:ec:16:a4:30:a6:aa:98:0d:d1:bf:
e1:8a:f8:f6:51:9f:68:64:b9:5e:3e:2a:f9:f6:e9:
f8:87:8a:53:82:2b:50:3d:ee:ac:f8:4d:21:1e:99:
99:a6:67:1c:32:74:0e:1c:f4:3e:bb:d4:35:67:93:
c4:cf:09:6e:45:67:cf:9f:58:86:f1:3c:27:9e:c1:
c3:84:3c:bf:31:a9:5b:01:90:96:8a:11:30:18:cc:
8b:29:c9:9e:42:e5:66:7a:68:9f:8c:cb:78:d8:31:
39:46:03:82:99:76:4f:2d:d1:ed:b9:fd:92:83:bb:
2e:1f:b2:32:dc:2d:80:2e:ea:69:2b:03:ac:78:05:
84:0d:81:c1:a5:65:99:2a:39:6a:d1:75:9a:87:2f:
46:42:09:9d:94:92:a5:1e:64:66:36:66:0c:b4:2d:
9f:84:8f:1f:5f:c2:63:47:9e:f6:99:6f:a8:b6:20:
eb:cf:59:60:86:1d:65:40:f2:81:66:cf:22:3a:51:
c1:37:8f:8c:46:a8:5a:2f:34:3f:02:bb:0a:e3:7d:
3a:14:aa:8a:e1:a3:de:2a:01:da:91:a7:4e:e0:cc:
29:8e:4b:a7:cd:0a:0f:0e:92:03:50:79:81:63:5b:
e7:27:04:2e:f3:54:79:9d:22:8e:f1:74:93:98:cd:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:39:D9:53:CB:A1:0F:02:12:56:97:8F:DB:E7:41:75:23:8F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a/3005cbb4-414b-3002-90b5-8804652532be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a/a78cb68b-4f24-4533-932a-d843cdb5015a.crl
X509v3 Authority Key Identifier:
keyid:77:B5:43:CD:9D:A6:4F:B8:03:A0:E2:F8:94:AE:C1:8B:7A:9D:19:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a78cb68b-4f24-4533-932a-d843cdb5015a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d4:8b:23:d8:d8:07:00:4f:66:5d:26:21:ea:02:72:72:c1:
b3:9a:67:3a:a3:93:0f:ab:ee:c5:b6:cd:ae:1f:78:c6:6d:20:
26:13:5b:6d:a5:16:d3:68:1a:5f:5c:9b:35:8f:50:8f:cc:a5:
a7:73:f7:1e:76:24:c7:e2:57:f1:19:b5:3d:85:f0:3a:d8:0c:
19:1c:0c:52:2d:3c:ed:96:28:85:81:66:14:a7:87:82:84:2b:
77:d2:f4:e6:17:42:ab:19:0a:fd:79:98:60:69:95:61:15:2f:
46:53:f7:b2:cc:aa:4f:47:5b:d0:0a:f8:00:62:74:33:d2:93:
2c:33:b9:0e:79:7f:fa:50:c2:3d:5d:ba:7f:7a:28:74:86:8f:
14:13:88:0a:b3:a8:38:92:51:5f:53:37:e7:14:fd:2a:09:0e:
c8:89:1b:29:3a:ec:9d:a9:44:77:02:81:b1:5e:5f:e2:c9:37:
2e:ef:7f:e8:cb:c8:a7:bc:c3:83:f7:88:57:d1:87:86:e0:27:
e7:00:74:80:15:73:f3:0f:02:ac:ca:f4:fc:62:dc:ce:a8:3e:
59:60:0b:bf:9a:8a:ce:14:35:49:7e:2d:6a:96:5b:e2:f8:18:
7d:24:a1:ca:b7:60:b6:81:1a:af:15:dc:65:fb:ac:b7:bf:5f:
bb:f4:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:02 2025 by rpki-client