Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a27b7-d180-39bf-8fb3-ebbab41e6468.roa
File: 861a27b7-d180-39bf-8fb3-ebbab41e6468.roa (raw, json)
Hash identifier: aBIeNCnwy5Gdx2rj8Kd5qfF8/XuCRREqhkC9c1rsIkU=
Subject key identifier: 4B:30:E6:DB:0E:77:CA:9B:1A:EB:FD:2A:A3:C4:D1:22:13:CF:52:9B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926BF7D2D81F849821ED9E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a27b7-d180-39bf-8fb3-ebbab41e6468.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394708
IP address blocks: 184.105.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:bf:7d:2d:81:f8:49:82:1e:d9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3ffb4cc8-d6d9-48a2-b672-7eae063621ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:f0:d4:4c:aa:0b:a4:af:da:b8:9d:7f:f2:
d8:61:45:13:23:a2:35:05:9d:e1:76:5e:37:0b:9b:
eb:55:a3:72:e4:4e:2e:39:4c:a1:9c:0a:4b:94:80:
01:6c:b0:ce:cb:cb:50:1b:b7:b9:fc:ec:4f:bc:fe:
4e:cf:43:dc:18:bc:fb:b0:34:b3:53:21:e3:d6:45:
9e:7f:58:a6:d9:ba:dc:c3:b9:46:19:19:d6:65:5f:
d8:6f:cf:17:1a:e9:3f:fc:c1:37:37:ef:51:3a:32:
46:26:e8:55:75:29:73:a3:11:d5:cb:7b:0b:7f:4e:
d1:5f:b6:58:74:1c:01:1b:d7:b6:06:88:df:bf:28:
23:c7:92:a3:f9:ca:71:4a:dd:d5:d0:94:72:f1:8c:
89:18:23:b6:0c:94:fd:a2:82:ff:33:1f:28:7e:c4:
f4:86:98:b1:89:05:e2:40:25:cf:12:bf:b0:89:27:
a3:45:a0:fc:b4:b7:46:84:29:fa:2e:ea:62:72:63:
18:44:1a:14:f7:9b:fc:f1:ca:1e:1f:57:92:04:6e:
e8:7f:d1:21:c3:63:24:c0:a5:fd:57:19:ef:a1:04:
23:35:d3:0a:93:c2:8c:6f:77:6b:ae:b1:92:94:36:
51:e9:a9:64:bb:d8:2e:81:0a:ce:e4:92:73:86:b2:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:E6:DB:0E:77:CA:9B:1A:EB:FD:2A:A3:C4:D1:22:13:CF:52:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a27b7-d180-39bf-8fb3-ebbab41e6468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:fa:90:3d:b9:35:e3:0a:b5:9a:8f:81:bc:4d:e3:7c:d4:11:
18:b7:08:83:b4:d6:45:e7:d5:66:68:76:66:b9:64:32:d0:88:
e2:c6:22:d9:56:73:06:2f:c0:86:8a:7e:56:a5:53:27:f0:99:
69:0a:64:13:6e:2f:ef:64:15:48:26:7c:c8:bb:ce:93:ec:06:
33:d1:bd:e3:66:8f:9a:60:11:d6:f4:9b:11:af:f1:4c:f6:a2:
a1:17:f1:83:a1:7f:ff:62:61:93:54:45:c3:ac:43:fb:55:ef:
0a:ac:a4:06:21:da:82:4c:2d:a6:e7:b8:ab:22:6c:20:bd:59:
d8:37:a4:69:e1:83:32:78:d3:82:32:cc:a9:49:2e:a3:84:f5:
3d:f5:ee:89:9d:65:19:b6:d9:29:9e:57:7f:be:5e:2b:5a:62:
9b:a1:d9:18:cf:a2:fc:26:26:9e:49:75:8e:26:f8:4b:16:d4:
49:f4:ea:cf:4d:ac:74:9a:4f:be:5e:09:bc:05:cb:fc:3b:23:
73:f6:52:a6:bc:41:71:f6:4e:c8:8f:ae:33:7a:1a:4b:27:2d:
e6:15:3d:bb:ec:f5:21:6d:a2:14:18:ce:5b:c6:7d:3b:e9:df:
35:53:a5:cd:1c:f8:f0:04:c7:1d:d3:dd:9b:e5:c6:38:71:a4:
ba:27:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:34 2025 by rpki-client