Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa
File: fddc6c19-90c4-3bd0-8396-9396533123ef.roa (raw, json)
Hash identifier: 3i6YVxZoqf/XIF5eSJxp4qWOL5YANEMaB4AEwqyAcmc=
Subject key identifier: 06:4B:81:BE:81:B5:E0:4B:A7:63:96:9D:67:8C:0B:22:0C:78:A9:42
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F43285849088163022BBE2FDE0D7D0100
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 192.184.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:63:02:2b:be:2f:de:0d:7d:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=8b9eb02c-8aff-40d4-a6c1-4218afd6448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:d0:23:13:db:fe:df:57:c1:f0:32:b3:c0:
a8:98:38:82:bc:c4:5d:60:89:21:5e:2b:4e:70:18:
c1:b0:f3:c3:36:00:b5:33:e3:fc:c3:56:8a:8a:9d:
a4:e1:d0:0b:59:66:8c:da:69:20:2e:67:79:4a:60:
6c:a3:40:2e:0b:06:55:f5:d6:03:d9:ff:3d:11:4a:
42:4b:8e:65:c3:e3:9f:2c:f8:f3:79:46:7c:9c:90:
d8:df:90:77:4a:63:57:8c:d6:8a:25:f5:57:d4:05:
28:92:60:1f:f4:bb:97:8f:d3:f5:a0:7f:2b:00:6c:
58:ee:c0:21:cc:44:16:86:52:ca:92:27:9a:07:78:
b5:d1:06:37:13:e7:fa:2a:e2:84:f4:ca:ff:21:40:
c3:2b:23:7b:9c:9f:ca:83:aa:f0:82:41:61:7e:04:
f0:7e:47:32:46:1f:02:8d:83:d8:86:cd:6a:f6:68:
4f:44:5f:d0:aa:85:8b:cc:8d:5d:66:9f:c8:db:e5:
b8:73:82:80:ef:e1:00:9f:c8:52:40:7e:66:75:4b:
bb:e3:2b:30:a3:0c:19:77:15:e1:10:c7:54:81:dc:
31:a7:3a:f5:29:bb:9a:58:3e:c4:fd:60:81:ce:c5:
4d:87:00:6a:82:c1:20:a8:d4:ab:c8:91:70:05:e1:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:81:BE:81:B5:E0:4B:A7:63:96:9D:67:8C:0B:22:0C:78:A9:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/fddc6c19-90c4-3bd0-8396-9396533123ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:41:92:9c:07:68:ae:6e:15:6a:ed:f9:e2:97:68:47:fb:c6:
1c:a2:58:04:3d:d6:7b:e3:de:c6:95:8b:9f:4f:69:33:b3:95:
59:f5:cc:e2:38:5c:a2:de:5d:ac:2c:7b:28:08:fb:4b:2e:1f:
88:a9:7e:c8:05:3e:be:0a:22:96:1a:fd:5c:de:1a:7f:66:f4:
1e:fb:fd:94:1f:c2:80:d4:12:3b:c6:08:bb:b5:65:44:c4:b7:
f5:89:61:55:e2:5b:b2:5a:6e:4f:d3:94:b4:3b:d3:6e:ac:47:
11:73:14:39:34:62:ee:b5:09:d3:9a:39:8e:53:ca:21:48:c9:
11:81:8e:76:2e:54:51:6d:17:ed:43:8c:ae:b0:ae:31:ab:f8:
34:74:ec:db:8f:14:c5:9d:80:9d:63:96:62:94:be:9d:49:3d:
62:cb:ac:40:47:39:38:b8:4a:f0:e9:e1:43:0d:a5:c5:e8:72:
9d:1b:90:96:4a:fe:80:3f:9f:c7:55:b2:7c:b9:4d:1f:34:f1:
a3:b9:c6:5b:db:81:89:1c:33:3a:68:bc:40:26:c7:ee:fe:bc:
92:f6:76:dd:fc:2b:76:e0:b4:61:20:7c:23:de:da:ef:cd:b5:
1f:da:d4:c0:17:67:31:da:53:cd:75:d6:11:c4:01:47:4c:a4:
3d:a0:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:54 2025 by rpki-client