Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa
File: 0bf675c4-28ff-3657-899d-f546725b735f.roa (raw, json)
Hash identifier: nvxUiovtB/hAHWh61DdNdJ7ccQeas7yaY7l3XaDfsME=
Subject key identifier: 14:DE:26:59:3B:94:FE:9E:A8:32:7A:A6:0F:CC:A9:23:DC:C7:D5:C7
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F43285848239540DA42BD9E0D4CF22E80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 27281
IP address blocks: 192.184.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:40:da:42:bd:9e:0d:4c:f2:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=3bcb38ad-ad36-465a-ade6-a316a20ba0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:12:f1:e2:98:a5:14:c3:31:84:dc:64:c9:
f4:c1:d8:25:70:1c:4b:4c:e9:45:a9:ec:db:04:e5:
84:f5:4c:18:47:d7:46:af:32:51:ce:8f:52:45:f2:
f3:be:d1:25:50:80:e2:a5:9f:2e:a8:b3:57:ae:fb:
b9:f7:3d:07:cc:69:1c:bc:86:73:ea:87:50:29:ef:
cc:05:ee:e7:47:a7:10:31:56:ad:f6:91:d1:96:df:
af:9d:24:1b:1a:e9:5b:f0:75:b3:72:74:ac:f0:cb:
b9:b8:50:c8:d4:0d:34:77:a6:93:da:cc:64:44:07:
77:5a:f6:e5:09:a9:c7:ba:09:6e:ce:f5:5e:e4:96:
94:cd:0e:a2:a0:23:17:3c:d1:0f:1b:c1:c9:03:7c:
ae:43:33:91:56:17:75:2f:9b:0a:a4:15:e3:9b:39:
a1:a3:d5:c7:aa:6c:dd:07:23:70:30:da:9e:53:ab:
d5:37:c9:91:3a:68:b5:8e:5c:90:09:82:20:25:c3:
32:7e:07:cb:3d:94:d5:a2:ca:2b:65:72:81:30:39:
4e:52:d1:1e:75:77:64:0b:df:f2:be:bc:ca:b2:d4:
8c:6a:73:92:5e:5d:6f:fc:18:28:10:ed:42:e4:db:
05:4e:49:34:e3:cd:68:3c:7e:7f:0f:7d:05:bb:f2:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:26:59:3B:94:FE:9E:A8:32:7A:A6:0F:CC:A9:23:DC:C7:D5:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:78:9a:df:37:ac:77:8e:74:59:4b:f7:a4:7b:61:c1:f5:cb:
be:40:1f:f1:df:63:19:d1:b0:cb:c1:e1:a3:90:b4:52:d9:11:
a6:3b:1a:fd:76:83:a5:68:8e:54:e6:cd:44:ca:d4:52:02:06:
12:a9:0b:60:ec:f9:0d:d9:c3:2a:df:f6:ce:57:79:0e:08:a8:
87:52:e9:ce:3b:92:d3:23:cc:45:eb:2f:3c:de:f9:2e:1a:dd:
95:82:9d:19:0e:5e:61:77:b2:ed:b2:89:1f:b7:5b:13:77:dc:
9f:46:a9:1d:d2:bc:2e:c3:28:0f:09:e9:6d:ca:2e:f6:24:27:
22:63:61:70:ad:5e:7e:8d:fa:a6:b0:16:c0:93:74:98:3d:73:
bd:07:7f:38:87:4b:03:88:68:d9:08:e6:91:2a:5c:00:34:2e:
37:49:5c:59:ca:05:f7:13:2d:ab:dc:c9:22:1e:6c:1a:81:19:
85:7e:b7:4e:a6:e7:a9:b1:7e:12:e8:71:7b:d8:17:a5:59:a6:
4d:e9:9b:21:46:c7:f6:31:28:34:11:62:28:a5:8d:46:86:e1:
3a:af:b7:b0:ab:52:66:e6:75:b0:75:3e:00:07:75:f2:28:73:
87:95:de:2b:1e:8f:9e:2b:f3:b3:54:b7:17:5b:7b:32:78:36:
e5:16:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:54 2025 by rpki-client