Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa
File: 34b9c606-ab1a-3521-bc4d-770e76616417.roa (raw, json)
Hash identifier: FKhg5edfT1yt7HUlj6Yj7/CkK/0fdwrMya/6xDM5Ui8=
Subject key identifier: 36:D0:A4:6E:83:36:DB:47:C7:A6:73:F5:7C:CE:95:0D:21:7E:B1:F0
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584827C532F50866C243A1A2CF80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 27281
IP address blocks: 192.184.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:32:f5:08:66:c2:43:a1:a2:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=697e5656-bc82-4483-9d4b-74dd14b93031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:84:18:c7:0e:28:e0:4f:ed:d7:b6:3e:c1:
04:df:cd:9d:4e:d6:66:19:53:a8:3d:ca:35:c5:1a:
c0:2c:a9:22:f7:e0:0d:b0:8e:e7:4b:53:57:33:d1:
79:77:7d:c2:57:2c:23:99:2b:f4:f7:c6:c7:97:57:
3e:a9:b7:1f:0e:35:00:19:74:77:d4:a3:f3:78:75:
c8:6a:55:5b:38:95:b8:ba:31:3a:ee:6c:ac:d4:eb:
8f:0a:90:a5:1a:62:8d:2b:d9:14:b8:c6:db:d5:1b:
78:51:03:86:57:66:56:6d:41:ba:60:9d:64:98:d0:
77:37:4f:d3:91:bc:e2:7d:32:fa:db:11:c0:0e:f5:
c1:c1:4b:f7:25:8c:e7:e0:50:bf:68:cd:e2:f7:66:
8b:64:4c:94:9c:b9:52:de:59:87:c0:a3:cb:6a:14:
49:79:37:c9:86:bb:b3:4e:42:d2:cb:e4:74:eb:27:
f2:4e:1e:e9:d8:98:3c:ba:35:d8:23:2e:e4:6d:9d:
c9:be:b5:fe:1c:45:a2:15:94:49:66:0a:bb:1d:62:
cb:96:1a:75:17:93:1d:c4:a4:77:be:14:25:84:a3:
3d:09:91:95:6c:7f:2d:cb:37:01:d8:c5:f2:60:59:
00:05:83:6e:89:f5:6e:83:92:bc:1f:d8:c4:45:56:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:A4:6E:83:36:DB:47:C7:A6:73:F5:7C:CE:95:0D:21:7E:B1:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/34b9c606-ab1a-3521-bc4d-770e76616417.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:30:86:cb:b1:ae:97:91:6c:39:8e:97:43:53:2e:09:07:b1:
a1:8c:9c:13:36:71:7b:9e:31:b5:f0:1a:43:32:40:28:b5:43:
8d:c9:c4:29:cb:53:e3:ea:76:f7:ad:18:67:f2:96:13:24:a9:
c1:d0:b6:2a:98:66:32:85:26:bb:94:e1:6a:90:16:1c:75:2d:
6c:39:42:ee:9c:ca:17:d4:00:d1:03:39:0d:64:bf:2f:7c:2f:
b0:e3:f8:91:8c:55:80:9d:a1:46:9e:b8:a5:00:b4:fc:4a:be:
44:29:0f:e0:b8:ca:f5:ce:09:b7:66:e8:61:54:b0:62:6f:fa:
e6:ab:d3:9a:b0:1a:f9:72:06:01:cd:fc:4a:bc:4c:cc:0e:56:
96:5d:52:58:53:a3:be:04:42:fe:da:d2:44:9f:77:03:b4:64:
0c:e9:7c:5f:17:0c:45:36:43:bf:87:41:8e:f4:58:91:3b:e0:
1f:30:49:c0:30:d2:36:7f:95:c2:56:4e:e8:8f:c0:cc:68:d3:
48:7e:78:ab:fe:c0:3f:f5:d6:4a:11:90:4e:da:35:c2:fb:a7:
b1:64:ff:1f:24:41:b1:fb:7f:dd:d5:6f:ba:a0:c6:19:64:1a:
4a:93:aa:c6:a4:07:d7:cb:24:92:2d:cb:01:22:f3:4d:f1:b0:
26:58:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:23 2025 by rpki-client