Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3b80aa56-d7c9-3d3f-9a34-5fe4f9179401.roa
File: 3b80aa56-d7c9-3d3f-9a34-5fe4f9179401.roa (raw, json)
Hash identifier: 4zo0f+blGx05WB7t0k9CO02WIWX3yuCVO9XFDDBo5iY=
Subject key identifier: 0C:E4:72:02:F4:8F:C3:AD:17:E1:0A:F4:BC:66:27:00:E4:56:3C:A5
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F43285848222FD9065E5D9B94739C0E80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3b80aa56-d7c9-3d3f-9a34-5fe4f9179401.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 192.184.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d9:06:5e:5d:9b:94:73:9c:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=82b9ab66-d7d7-4609-80de-4ac373ff4d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:91:76:1c:0f:88:e5:bd:0a:52:1f:5a:8f:
fd:fe:39:13:e6:18:ca:e1:9f:e7:24:76:d6:d4:88:
84:d2:c1:0f:ac:a4:fa:68:a9:70:46:02:cd:f4:1b:
44:7d:68:f5:9f:be:f8:a0:98:93:90:84:64:81:ae:
53:07:63:97:e8:f8:a8:a1:d5:68:6b:bc:23:a1:d3:
c2:ab:fa:18:b6:a1:b6:75:5f:3c:69:f7:05:b9:0f:
c7:9f:85:22:29:98:f3:9a:cc:da:a6:fe:8d:fa:19:
a3:f8:aa:91:d6:3f:ca:8a:30:3d:69:ef:d2:15:1f:
fe:f9:3e:1c:be:cd:4f:43:1d:8b:54:a2:20:2d:94:
61:c6:33:8c:5a:eb:c8:04:05:2f:5a:fc:32:9d:e5:
a4:b1:71:88:23:eb:45:33:49:a9:81:4e:8c:26:72:
27:f1:c9:6b:8b:54:db:5a:ed:33:92:3c:f9:68:0b:
21:1a:03:df:ac:3b:42:01:06:b2:95:a5:cf:e2:80:
9d:94:46:26:3f:78:51:70:49:08:90:15:43:49:e3:
76:62:c8:32:ab:e7:b0:04:d4:db:02:d6:65:49:0b:
a7:5a:dd:30:47:b7:4a:b0:36:59:db:07:ec:18:0d:
35:bc:cc:7f:8c:54:78:b4:1c:55:94:f2:ea:b3:c3:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:72:02:F4:8F:C3:AD:17:E1:0A:F4:BC:66:27:00:E4:56:3C:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3b80aa56-d7c9-3d3f-9a34-5fe4f9179401.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:1c:83:85:b3:31:b2:7e:35:76:13:a3:53:ea:9d:90:cd:95:
68:dc:8d:cb:48:87:ee:50:c5:c3:eb:7a:db:27:4c:10:35:df:
8e:87:3b:78:28:63:84:12:d9:14:81:2e:12:c5:71:40:79:41:
0f:42:0d:65:a4:b3:84:08:97:7a:24:82:88:54:10:2b:87:34:
3f:1f:91:6a:6b:e4:e6:25:fd:e5:c9:ab:6d:18:81:b1:fa:1d:
87:6d:b4:cb:c9:a7:bd:d0:de:a3:04:f8:13:10:6f:14:41:52:
7a:54:d7:ab:fc:f6:27:6f:3a:75:dc:e3:9b:0e:e5:be:b1:85:
69:7a:29:8a:3f:00:3c:9d:1e:f5:95:a8:5f:11:2d:7d:e0:ea:
42:57:e4:1b:79:bd:c9:bd:ea:e5:2c:c1:99:57:18:f7:dc:ba:
e9:78:e5:5d:ff:de:f5:67:eb:29:a7:5d:97:4e:c9:90:b5:22:
02:8b:79:2f:29:66:88:13:e3:08:b9:26:63:4a:ea:6d:34:12:
e0:1e:31:4d:80:c8:e1:b2:fe:b6:bb:bb:0f:fa:e5:94:8e:50:
b9:3c:75:34:42:a2:1d:ff:b5:b3:df:d7:11:4f:42:b4:b3:1a:
1a:06:d3:5b:4e:9d:95:ba:fa:94:8e:ae:f7:d3:29:20:59:7b:
7c:f1:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:18 2025 by rpki-client