Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa
File: 29bf653b-e4f7-392d-b105-2ac60f5c4331.roa (raw, json)
Hash identifier: kN0CJDIiZrU8w4UQQI+8Q5Rao0PDXRKFsTtuMEwHnco=
Subject key identifier: 54:68:9F:75:BC:5C:07:59:05:0F:F4:3A:65:21:D4:74:6A:DA:5B:30
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D011B867FEC72AD1636000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 21788
IP address blocks: 184.104.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:11:b8:67:fe:c7:2a:d1:63:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=8564d667-8671-4ba0-9e5d-e3c6535ef6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:81:7c:ba:b2:4f:41:5e:6a:c0:15:3c:e8:
3c:7e:aa:fa:17:21:1f:5d:8a:d3:c3:b6:10:86:f8:
a1:2a:6a:96:9c:d6:27:3c:c9:f3:67:ea:07:eb:6b:
d9:29:49:49:3c:b2:60:e1:f4:25:d7:61:39:2d:d1:
50:12:cb:f7:38:4d:9d:5f:02:d3:2b:66:f8:3b:cb:
cf:30:cb:2d:db:8f:d1:d0:29:e2:0f:18:15:7a:13:
3b:02:d1:69:9e:8d:c7:48:b6:23:c3:8a:1a:c3:ef:
0d:8b:ee:99:d4:83:a3:62:f0:27:a4:d4:40:28:c3:
5e:21:62:81:06:02:4c:e6:78:f3:54:a0:ac:de:0f:
56:34:6d:18:70:1b:21:f0:02:1a:82:36:1b:a4:30:
51:a6:a0:29:aa:21:a6:73:94:62:69:30:1d:04:64:
e6:52:5e:5a:ab:4f:3e:35:5a:27:53:c8:b8:45:91:
4d:0c:3f:2f:97:38:10:43:32:75:17:91:1f:d6:5b:
2d:a4:ad:fd:b9:bb:32:de:50:c1:31:76:c1:65:a8:
34:b5:18:ac:a3:1f:bd:d0:cb:45:a9:88:1b:07:08:
81:c3:16:c3:ad:a9:b0:7a:61:26:41:8a:0c:6c:d9:
bf:59:85:7e:a5:d0:73:6d:60:b0:96:b9:e3:f0:b2:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:9F:75:BC:5C:07:59:05:0F:F4:3A:65:21:D4:74:6A:DA:5B:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bf653b-e4f7-392d-b105-2ac60f5c4331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.104.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:3a:92:89:f1:bd:a1:08:41:e4:c5:09:10:de:ba:34:16:a1:
af:10:0d:26:0e:94:bb:21:da:38:dc:ef:75:77:0d:79:0d:83:
9e:41:c3:b5:ab:36:80:41:a8:35:e9:b8:63:71:91:76:64:24:
4e:32:89:bc:8b:df:a5:f1:a6:b3:75:73:f7:34:dc:d2:21:19:
8e:06:bd:49:1c:8d:86:7f:0d:2a:73:41:7c:12:30:6c:89:84:
49:e4:b9:4f:38:05:d7:dd:67:69:ae:09:20:dd:21:d7:26:c6:
82:cd:a5:59:9b:5b:2a:75:cf:92:d9:e3:9c:d5:f4:79:ab:e2:
2d:dd:31:bd:7c:fa:20:ca:d1:89:ea:51:91:f5:e5:14:e8:30:
22:7a:df:6d:74:f6:3a:87:e2:08:45:3c:41:8e:38:c8:39:0a:
30:ff:56:28:20:0e:eb:7d:61:a8:76:15:c9:4c:ab:d8:c1:89:
61:f0:a3:dc:eb:8c:8a:39:1c:6b:c2:6d:6e:cd:c0:67:78:d2:
57:f6:4e:81:82:f0:ff:7b:3b:1f:25:e6:35:56:a3:dd:ca:cd:
05:78:03:23:0a:31:31:e9:df:dc:d8:96:b8:8d:10:f6:4d:97:
9b:42:bf:44:be:7e:37:ef:8e:36:f5:fc:fb:ca:ca:b6:53:f2:
74:83:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:40 2025 by rpki-client