Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
File: 6652241b-01f8-3251-b6a9-15aa6ee02051.roa (raw, json)
Hash identifier: wy7apGjWHw+XnnOMAUTNgRKUQO3iWDWJIBsZwJau1rw=
Subject key identifier: A7:DC:BC:DA:9D:EA:8E:9A:C5:F1:33:D4:B4:C8:E7:CE:52:41:8C:52
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926DAEED4F036D30823E600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 399203
IP address blocks: 184.105.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:da:ee:d4:f0:36:d3:08:23:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=30008f38-6dfb-45e5-9569-2981639dab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:35:79:f2:83:ff:33:7a:d5:ba:1e:a8:a6:
f3:f2:f8:d5:78:39:b4:60:f8:61:22:71:a4:df:d7:
2f:a0:57:9d:97:bd:29:85:fc:c0:0b:7b:32:30:bb:
69:18:ed:16:fe:aa:1d:9e:bc:e3:05:8d:6f:83:01:
65:1e:1c:dd:90:ef:49:1b:86:7c:48:82:20:0c:ca:
53:e0:ff:b9:26:5c:0a:df:40:af:3e:3e:07:0f:46:
63:a7:5b:2f:5c:3f:61:a4:9e:33:e2:73:4d:b8:88:
64:76:c5:c7:b0:5a:a5:b6:da:e3:d0:87:40:7a:54:
77:42:a3:44:c0:ce:59:fe:24:df:45:ec:db:91:1a:
c3:13:d7:b7:a7:e5:13:7d:00:1e:7d:91:2c:6f:37:
a2:ce:80:de:bd:8f:41:93:34:b7:55:bc:78:af:83:
d3:d9:8f:28:30:9a:9c:70:2a:19:1d:ed:f6:2f:75:
b8:4a:cf:54:d0:16:e6:49:70:cd:38:1c:66:05:a8:
21:85:b7:2f:ed:c4:f4:31:81:2c:25:64:cd:99:a6:
9a:3f:d8:50:c0:77:7c:69:7d:1c:39:39:f1:63:c8:
4b:5b:11:16:64:12:23:fe:d2:f6:cf:3e:b7:d0:a1:
b5:f0:ce:3c:c8:2f:e6:ff:6c:b9:b0:db:7c:8a:f1:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:BC:DA:9D:EA:8E:9A:C5:F1:33:D4:B4:C8:E7:CE:52:41:8C:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:62:c9:e2:a2:db:51:0a:27:87:d5:9e:e5:7d:84:53:cf:d6:
a3:2f:e2:6b:d1:5f:4c:08:cd:8a:9e:df:69:80:94:bd:09:e1:
1b:72:d4:c0:99:13:52:46:d6:4c:b5:79:7c:fe:6c:ef:0e:02:
2f:e0:72:3c:75:53:04:b3:67:e2:1b:94:4a:65:e2:77:80:15:
95:b7:cc:ab:e4:19:a7:da:a7:b7:68:c6:fc:25:b9:1a:47:e7:
2d:a8:ce:08:0b:73:bb:f3:36:57:c0:da:e2:11:85:e4:a1:a4:
02:8d:3f:e7:13:72:9e:de:ca:a9:17:55:cd:d3:f5:38:93:5f:
10:99:5d:ad:6f:62:8c:72:2e:4b:4b:b8:e0:7b:87:70:f9:e7:
56:28:cd:c4:e0:d5:ea:3b:71:54:93:d6:1a:57:09:53:ae:c0:
a6:7a:50:bc:a1:3c:b6:04:13:6e:dc:75:dd:13:c6:67:f1:aa:
ca:36:a3:a8:b6:f6:1e:a2:0c:fc:70:19:43:bb:1a:88:01:80:
97:06:a1:a8:be:64:52:ec:7e:8e:1d:06:60:da:63:22:1b:82:
88:0c:fe:e0:ce:38:b8:8f:25:cc:3b:5c:47:b8:7e:06:03:fd:
c7:f8:20:f8:c6:d8:f2:4d:a2:b1:55:fa:d3:f3:3e:6f:88:bb:
ab:7e:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:56 2025 by rpki-client