Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa
File: 4e51dc1c-d4fb-3612-ba14-360365d33789.roa (raw, json)
Hash identifier: mkmVmwkcCuBBdHO2af71zwoUlvmVF9Z7CndHtTUCrf0=
Subject key identifier: D1:09:7D:3D:3D:49:7F:EF:C2:5B:FB:C8:7E:A9:96:94:48:DF:0F:F9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BABF6F1679D9323DE780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394996
IP address blocks: 184.105.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ba:bf:6f:16:79:d9:32:3d:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=38bfe571-7f97-444e-8c2f-d1d27396bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:7c:8f:7e:d7:b2:b6:f8:fb:1f:f9:05:f2:
65:71:4c:91:f7:73:0a:f5:62:97:87:90:08:7e:2b:
57:79:7e:de:cd:59:d0:5d:58:79:40:50:13:58:b3:
9b:04:5c:94:e3:1c:65:01:ed:16:1e:02:55:04:b3:
1d:12:c3:27:f2:a4:dd:fb:95:6e:62:fd:89:36:58:
a7:3c:eb:51:35:1e:b1:ec:b5:0f:9d:9b:13:7d:66:
76:70:e3:20:7f:fa:92:cb:3c:89:73:ff:63:74:d0:
fb:4d:f4:a5:5b:fd:c1:cc:9c:6c:03:d7:fa:3f:cd:
af:62:ba:59:d2:ae:82:ff:59:5d:07:58:33:a3:64:
40:2a:42:25:fd:77:92:39:98:52:1c:ca:23:ed:60:
20:06:98:ee:97:83:3d:db:a1:d6:54:63:ca:c0:3b:
97:4f:79:78:cf:d4:6f:f9:04:20:c5:0d:55:c8:73:
d2:db:10:2a:ad:c9:c9:3c:ea:ca:f8:34:d1:5b:d3:
9c:fa:96:a6:c7:e7:a6:38:a3:fd:05:6a:f7:d8:dc:
71:8a:50:d2:0b:ea:3d:93:a6:86:8e:12:db:50:16:
4b:d8:ec:3a:34:31:7d:6c:ea:5d:bc:e9:01:19:86:
aa:27:39:68:d2:0e:eb:6a:d7:34:80:a4:9b:d4:d8:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:7D:3D:3D:49:7F:EF:C2:5B:FB:C8:7E:A9:96:94:48:DF:0F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:52:40:68:d4:44:eb:33:d1:9e:32:49:95:4e:49:74:33:3c:
d7:71:2d:a4:8a:80:37:da:a8:6d:b9:32:87:6a:c9:cb:59:f4:
21:e9:20:a4:a4:6b:50:11:30:61:92:80:30:d8:2e:c3:a8:40:
4c:b0:5f:6d:5d:8e:4e:d2:b2:27:dd:38:8a:0d:a0:88:0f:02:
2a:e2:40:46:d9:1e:7d:91:4c:95:a1:84:9d:46:76:9f:24:16:
63:c8:70:8d:ea:39:5c:4d:13:14:49:a4:39:23:0b:54:f0:ac:
83:a4:9e:72:da:16:34:13:bd:c4:53:82:08:00:1a:03:f3:b6:
60:40:f6:a1:7a:cb:92:b1:55:78:2c:e3:fe:7a:22:d6:7b:68:
d8:d6:fb:aa:25:25:6f:e8:15:1f:51:e7:ca:ba:40:66:f6:ad:
65:1f:24:28:a5:a3:f3:05:14:a3:d2:67:88:e3:ad:dd:64:1a:
a8:bd:b3:f5:69:9f:2b:47:5f:be:2f:f0:eb:6f:de:6d:e6:26:
c2:6a:92:6e:98:04:22:0b:8b:e4:fd:b5:87:e4:2a:07:e4:e0:
c3:ca:40:28:a0:a1:fc:49:7d:dc:2c:fa:7e:0b:f7:6c:f1:ef:
91:1b:f2:b4:1d:1b:0e:f4:18:67:9b:3f:5d:be:a2:59:bf:a7:
b1:5f:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:49 2025 by rpki-client