Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa51791d-b631-3820-b282-2531b2f91a65.roa
File: aa51791d-b631-3820-b282-2531b2f91a65.roa (raw, json)
Hash identifier: gYLdfLZRYZj9GnWLjYZu171kpe1ZK2ggXl28HD1aqVw=
Subject key identifier: B9:CA:D6:51:CC:CE:47:FA:71:27:AF:A5:D6:49:EF:E8:C5:50:4C:4A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926E41F04DDB6685D809500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa51791d-b631-3820-b282-2531b2f91a65.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 297
IP address blocks: 184.105.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:e4:1f:04:dd:b6:68:5d:80:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=83c34650-d030-4d40-b534-a5612d802266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:4b:a3:fb:64:e3:ff:6c:af:76:3e:ff:dd:
1a:14:1b:53:7a:a3:af:7b:94:63:54:27:a5:11:ad:
dc:4b:85:e9:df:b6:d0:7f:57:3d:92:0a:6a:15:98:
d5:55:79:e5:6a:6f:e8:26:e0:df:d5:cd:d3:d0:a4:
fc:63:19:39:49:03:a3:8b:dd:66:5f:85:9e:fc:ab:
a2:5b:09:4c:47:cc:89:17:85:3f:1e:d0:43:07:35:
24:06:41:b9:94:5b:66:5b:4d:3c:f0:24:33:9c:73:
1c:88:a3:a0:2e:3d:1a:42:b5:e4:15:23:22:7c:55:
6b:92:25:ab:44:74:ba:67:e4:26:5f:88:91:1f:9d:
c9:4c:a6:cc:37:ca:e4:3b:fc:06:a5:32:29:fb:91:
fa:cf:dc:26:cc:23:c6:2c:ff:26:70:77:de:e5:b0:
00:33:75:fb:66:a7:f6:50:e9:d6:7f:d2:2a:d8:5d:
54:fa:45:9a:25:97:34:39:fa:44:4c:76:a5:1a:c2:
a5:b5:bd:bd:c3:a5:4d:a8:ed:56:f1:2d:10:a1:ce:
ff:33:ce:44:b6:35:6d:b3:19:e7:3a:85:93:c4:44:
54:f9:00:85:83:8b:81:70:4c:b3:e9:fb:55:85:94:
55:8d:f5:dc:61:b0:67:41:16:b7:f2:7c:b6:49:f6:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:D6:51:CC:CE:47:FA:71:27:AF:A5:D6:49:EF:E8:C5:50:4C:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aa51791d-b631-3820-b282-2531b2f91a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:68:30:8d:39:18:c3:a2:49:c3:b1:f9:94:88:58:8b:0e:07:
46:06:b5:eb:9b:69:af:b0:dc:c9:e1:86:25:90:16:ba:73:aa:
29:21:61:5e:a6:af:86:cc:19:4c:ff:1d:70:e3:0b:90:73:8b:
fb:3f:f8:83:84:54:b7:80:2d:e9:ee:ba:db:e4:1d:ce:e2:fb:
fe:8a:39:53:0d:be:11:f7:08:4a:91:ef:4a:b1:17:ed:b8:4b:
0d:80:83:ce:6b:68:b5:97:af:a7:41:67:c7:bb:32:76:bf:8a:
99:28:78:1a:40:3c:95:98:32:87:02:47:df:01:bb:25:56:2a:
a0:57:1c:94:66:35:72:3b:62:c2:ba:80:4f:0b:74:2e:51:fe:
7a:e1:12:5b:e0:6d:98:d2:7c:52:02:c9:24:61:99:d5:0e:91:
96:d5:51:2d:02:12:3f:10:f2:0c:a5:3e:5b:f3:9e:8a:b3:85:
de:2d:07:a4:17:b0:05:d6:91:03:11:24:6e:a9:1a:87:eb:72:
14:a7:2b:ea:fe:55:26:87:fc:87:b2:50:b9:e1:58:7d:60:1c:
eb:a3:95:05:8c:4c:54:9c:eb:89:08:6a:cf:99:31:17:a6:a9:
61:dc:0d:e1:0d:eb:0f:e8:10:5a:09:1e:62:59:53:f1:c9:e3:
1d:ae:4f:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JuQfBN22aF2AlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODNjMzQ2NTAtZDAzMC00ZDQwLWI1MzQtYTU2MTJkODAyMjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFLo/tk4/9sr3Y+/90aFBtTeqOve5RjVCel
Ea3cS4Xp37bQf1c9kgpqFZjVVXnlam/oJuDf1c3T0KT8Yxk5SQOji91mX4We/Kui
WwlMR8yJF4U/HtBDBzUkBkG5lFtmW0088CQznHMciKOgLj0aQrXkFSMifFVrkiWr
RHS6Z+QmX4iRH53JTKbMN8rkO/wGpTIp+5H6z9wmzCPGLP8mcHfe5bAAM3X7Zqf2
UOnWf9Iq2F1U+kWaJZc0OfpETHalGsKltb29w6VNqO1W8S0Qoc7/M85EtjVtsxnn
OoWTxERU+QCFg4uBcEyz6ftVhZRVjfXcYbBnQRa38ny2SfbZcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnK1lHMzkf6cSevpdZJ7+jFUExKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWE1MTc5MWQtYjYzMS0z
ODIwLWIyODItMjUzMWIyZjkxYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGm5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChoMI05GMOiScOx+ZSIWIsOB0YGteubaa+w3MnhhiWQFrpzqikhYV6m
r4bMGUz/HXDjC5Bzi/s/+IOEVLeALenuutvkHc7i+/6KOVMNvhH3CEqR70qxF+24
Sw2Ag85raLWXr6dBZ8e7Mna/ipkoeBpAPJWYMocCR98BuyVWKqBXHJRmNXI7YsK6
gE8LdC5R/nrhElvgbZjSfFICySRhmdUOkZbVUS0CEj8Q8gylPlvznoqzhd4tB6QX
sAXWkQMRJG6pGofrchSnK+r+VSaH/IeyULnhWH1gHOujlQWMTFSc64kIas+ZMRem
qWHcDeEN6w/oEFoJHmJZU/HJ4x2uT0g=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:37 2025 by rpki-client