Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa
File: 8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa (raw, json)
Hash identifier: th/keBvdwr0dbEPA9YTcyCf91bEAvJ7CgaMCDRojkTg=
Subject key identifier: D0:2B:E4:67:71:74:0C:80:96:E7:DB:F3:B4:AD:86:A8:F2:FE:0A:59
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D7CA5DD67951A63AED00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 394996
IP address blocks: 184.105.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d7:ca:5d:d6:79:51:a6:3a:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=72dda361-8c15-4e7e-9e7b-392b2ae025f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6e:bf:aa:02:61:b4:58:fc:f7:12:62:d9:29:
b8:62:70:97:9a:84:76:da:ca:96:82:e9:7a:7b:e6:
7a:2f:6b:1f:53:7d:66:ec:6b:28:1d:68:04:73:5a:
71:5f:67:c1:b6:2f:d9:dc:2d:c9:67:4d:1a:70:98:
6c:d5:88:66:68:83:44:6c:f2:10:10:a0:62:50:de:
45:14:72:25:1f:33:5b:f9:f8:62:8e:55:97:6e:40:
03:e7:fb:de:08:0b:60:de:01:71:3a:29:26:77:a8:
cf:3a:5b:01:e1:b7:5e:e0:a5:54:7c:b1:fc:57:fc:
af:da:16:91:f6:c9:2d:e2:ca:a0:ce:b5:ec:2d:b3:
d9:8c:4d:3c:b3:a6:f8:42:15:5a:51:33:48:26:c3:
84:2b:ce:09:40:c5:f0:bd:1f:61:d1:ac:af:d6:fc:
85:c7:65:76:a6:3e:c2:a7:3e:9d:b2:ce:bf:b8:3f:
d5:00:af:b4:a3:74:d4:0e:5d:3d:b1:fd:1f:80:a1:
66:3b:c8:8b:0e:62:2e:00:d4:f4:aa:a3:bb:8a:2e:
c6:81:9b:d2:38:3d:72:d4:9c:28:64:5b:12:f8:05:
19:04:ee:16:e5:8a:48:1b:ac:7f:d0:ce:c8:b5:9e:
d4:c8:66:9a:67:66:b4:c8:54:7f:ae:24:d7:3d:12:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:E4:67:71:74:0C:80:96:E7:DB:F3:B4:AD:86:A8:F2:FE:0A:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8791e16b-9da1-34bf-aa77-2a7e4f2381a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:06:51:50:51:23:ed:b4:e6:81:9e:b7:62:15:91:ae:fc:1a:
e0:c0:92:03:1d:56:4b:43:bb:d1:2b:21:5c:cd:0b:cf:32:24:
24:17:29:73:ca:65:55:58:a2:64:8a:0a:e8:5f:c5:7f:61:d3:
08:8e:36:b7:1b:fa:9c:a6:bd:61:50:dc:5f:34:20:45:8a:98:
b5:b5:6c:05:ec:73:db:62:e9:20:13:de:8f:37:3d:01:cb:bc:
30:db:ab:04:db:ee:22:5c:39:02:a3:71:da:e9:da:f9:aa:8b:
87:ee:75:6f:37:b2:fb:df:36:46:d1:d6:80:57:1d:32:c5:54:
9c:20:42:8f:e6:d8:78:48:b9:06:54:eb:13:17:fd:1a:b3:9f:
ba:82:d9:05:b8:bc:89:3e:81:14:cc:33:91:25:46:c8:71:04:
bf:18:c7:b3:5e:a5:92:68:f5:90:f1:0c:01:5a:32:c8:9b:38:
9b:9c:6e:75:08:62:b7:5c:86:7e:66:8f:65:ff:3e:28:a9:41:
46:5a:bb:9f:75:ef:9a:0e:fe:14:d4:d8:1b:85:ed:7b:08:67:
a5:46:e5:ac:0a:c6:76:49:86:cf:d0:32:82:25:d5:1f:e5:1e:
45:ee:71:e6:67:5e:82:c2:aa:cf:1e:58:ac:d5:e6:0b:0e:b5:
c9:14:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:47 2025 by rpki-client