Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa
File: b25afc6e-65f8-30df-b098-3a2395986d3e.roa (raw, json)
Hash identifier: aIobcakWnGETOSjzWNVQmHFzsuPQ7av77tcYkB9tT8k=
Subject key identifier: FC:6F:2C:0D:D7:A3:49:E1:61:66:0D:0B:46:B6:C6:34:1C:17:FD:41
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584832F02923653AD880DACD04E0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 27281
IP address blocks: 192.184.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:29:23:65:3a:d8:80:da:cd:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=461f556c-d02a-459f-b588-0bbea8fb4f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:da:f0:0d:11:6a:18:34:ed:cc:51:2f:fa:
91:c1:d7:93:9c:3c:6e:11:49:9b:b8:c0:64:d9:dc:
1a:c4:9a:46:aa:a4:cf:86:75:9e:1a:91:16:7f:6b:
ab:0b:8d:e5:99:9f:31:59:f9:61:49:20:28:88:da:
b6:ef:e2:86:35:53:21:be:59:f7:b7:f5:35:06:9b:
08:ef:30:15:bb:5f:a5:a3:c0:06:e7:c4:8c:37:d1:
48:46:dc:1a:47:5a:f9:39:72:bd:ea:29:c7:9a:db:
c3:f5:ee:bd:1b:40:c0:4c:c0:60:29:fe:99:87:b4:
6c:1f:4e:ef:59:f0:07:60:9c:10:05:0b:5e:74:b8:
ca:1f:5e:b7:6e:31:35:cc:f1:4d:99:32:f8:21:32:
b5:87:a2:05:24:2b:73:26:2c:2e:f5:84:f2:df:57:
1d:d4:ec:ca:a5:c2:2a:7a:2b:0f:d1:29:51:ee:92:
b2:dd:14:fa:2d:f6:25:8d:dd:1c:74:6e:fd:3c:a3:
33:54:5c:32:b0:e5:a1:da:c2:ab:55:c7:1b:89:3d:
78:4d:08:31:3f:59:c6:c8:59:f9:1e:0f:af:42:7b:
1a:de:3a:b0:5e:9b:cb:aa:cc:bd:40:82:ff:8b:d8:
83:94:ca:61:78:99:f5:d2:5d:a1:3b:c4:9f:83:09:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:2C:0D:D7:A3:49:E1:61:66:0D:0B:46:B6:C6:34:1C:17:FD:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/b25afc6e-65f8-30df-b098-3a2395986d3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:c5:ae:84:96:c7:75:5c:83:9b:c1:0c:75:df:d5:60:6e:38:
13:05:e4:ba:0c:5e:59:bc:15:86:b9:32:e2:e6:fb:e9:63:0f:
3e:79:02:3e:40:53:9f:f8:c4:4f:80:8a:19:cf:4f:e4:db:c4:
9e:bd:7b:87:fa:e1:5f:c1:e3:90:8d:01:ec:10:3a:64:be:de:
f3:39:9c:bc:e4:84:51:1d:c6:85:78:0b:c3:db:65:e3:b5:53:
e0:0d:a0:b7:60:52:89:9e:27:d6:e4:0a:18:fa:37:f4:84:73:
20:4e:0b:ad:d4:65:0a:5c:fc:5e:0d:86:f3:ca:90:42:26:ca:
ee:da:74:e6:0a:2e:68:fa:92:4f:3b:b4:87:c4:ba:32:11:20:
b0:aa:8c:a4:2a:14:26:58:3b:6c:54:bf:fb:5c:82:17:ea:71:
b3:d4:76:b0:c2:e0:7e:04:69:4e:ae:9b:0b:9f:81:c2:c6:4e:
61:d5:27:b3:13:5f:7d:0d:8c:90:a2:a1:fa:ca:b0:4f:22:d5:
50:64:3a:b2:2b:78:07:c9:e6:54:4b:14:8f:30:ef:fc:73:57:
fc:cd:e4:f2:46:f8:47:e8:e3:09:16:7a:79:50:b5:85:02:fc:
5e:66:4f:36:e6:fd:d2:40:5f:61:ac:a7:58:22:30:39:56:66:
29:64:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:06 2025 by rpki-client