Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
File: 6652241b-01f8-3251-b6a9-15aa6ee02051.roa (raw, json)
Hash identifier: IbOuqXAT5iTx+Ow9Mw4mMsrKTLOSlfSmYK1u/vN/CN0=
Subject key identifier: 74:A4:E9:68:B2:3F:6E:B0:59:4A:1B:26:D6:A4:B9:81:10:66:EB:86
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D01013BD72A295BEC22680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399203
IP address blocks: 184.105.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:10:13:bd:72:a2:95:be:c2:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=db31e1ba-1954-427d-8a25-2bb67fd51c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:5d:bc:43:0a:5b:a0:59:5c:52:53:b0:ad:
c8:a2:94:bf:2e:23:0e:8a:ac:63:11:88:f5:2e:a7:
95:42:ac:87:71:a7:61:9e:34:06:3a:97:7f:b4:2f:
49:b7:61:71:12:4a:52:b3:74:98:43:b7:8a:f5:54:
0d:e5:16:1f:79:05:58:03:cf:59:b0:8e:6e:b1:7b:
94:b3:39:16:8b:f1:9e:4c:e7:9c:f1:da:11:24:9d:
7c:2b:83:d0:d1:46:4c:51:4f:8f:c8:2c:b9:8b:8f:
a5:41:7b:69:54:01:05:70:0a:00:d5:4c:56:66:24:
e3:6a:d4:12:8a:80:12:1a:d0:70:6b:df:b7:c0:fd:
d8:1d:30:35:74:1f:62:bc:d7:d4:d9:27:e5:c6:28:
33:17:48:b4:32:e9:d8:d7:ef:c6:4e:9e:b4:92:0c:
ae:1f:93:18:9c:85:a1:f0:a0:a3:b4:50:46:5e:17:
f5:97:79:63:21:2b:b3:5c:8d:29:e6:ac:46:a4:0e:
a4:39:31:72:ed:0b:d2:df:8a:37:d5:0b:95:63:02:
f1:12:c8:66:f0:65:1b:a7:f4:72:0f:2a:1b:04:10:
55:31:77:74:c1:c4:66:25:50:1b:33:f3:68:a1:f9:
75:4e:35:f8:c4:64:01:59:06:e9:c6:87:3e:a1:9a:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:E9:68:B2:3F:6E:B0:59:4A:1B:26:D6:A4:B9:81:10:66:EB:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6652241b-01f8-3251-b6a9-15aa6ee02051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:3f:dc:f9:73:2b:3e:83:d8:f2:ef:6d:8d:12:91:2d:16:71:
80:a9:c7:f8:d2:af:90:b5:7a:a9:b8:30:37:a4:ea:be:93:5e:
6f:c0:d4:19:51:15:5d:85:3b:46:e4:8d:f2:f7:20:d1:ac:6a:
83:3e:93:39:2f:b6:0e:cb:11:a4:c7:d8:fd:39:09:f4:ed:a7:
1d:1b:0e:60:a1:26:15:da:0a:ed:58:66:0f:f2:b2:22:db:61:
98:01:9d:64:a9:c1:81:57:bc:cf:82:33:0b:2c:fe:7f:dd:36:
96:9c:b8:b0:47:f0:dd:bf:ad:a2:7f:92:88:7a:68:4e:9f:c4:
a8:18:f9:e3:09:02:03:00:d0:d1:e1:49:81:5f:79:81:19:cf:
aa:23:b7:c7:6b:54:3c:46:5a:fc:bf:4e:e8:46:07:64:91:e2:
7d:ab:c2:67:94:5d:24:9b:09:27:bf:3c:6b:c6:54:20:e7:b4:
ea:1e:d7:7b:65:b6:1d:cf:78:a3:8d:c0:a4:d8:fb:2a:9d:31:
d4:49:c9:85:2f:06:a6:19:16:aa:12:3e:8e:fa:bd:b6:83:dd:
c1:94:f1:56:00:5d:cf:b6:84:bc:f7:15:c8:da:2c:df:c3:7b:
64:d6:dd:0d:e3:e4:f7:e3:68:90:5a:06:03:29:56:f3:50:d6:
ef:01:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:05 2025 by rpki-client