Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b11d846-1bcc-3b12-964a-d8c3fee49ec2.roa
File: 8b11d846-1bcc-3b12-964a-d8c3fee49ec2.roa (raw, json)
Hash identifier: 5BgfB2HgGbgaTQhHdnZb8ZcoH58Wmy+GTJPA0/qs4ok=
Subject key identifier: 49:F4:EE:FD:70:E3:A1:52:8D:43:1E:D0:BC:0A:8B:52:99:CB:5B:90
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFEAE1B9F572A23BAFAF40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b11d846-1bcc-3b12-964a-d8c3fee49ec2.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 23250
IP address blocks: 184.105.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:ea:e1:b9:f5:72:a2:3b:af:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=9ec0ae51-38d0-4600-b0f2-348685fac696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:66:e9:81:6e:0c:96:1e:f2:0f:20:8a:ea:
e0:0b:19:cc:cc:61:10:4d:56:34:b0:7c:fd:f1:b8:
e1:fc:7e:01:f4:86:db:b7:8b:7e:d3:56:62:ed:d6:
d8:b0:c8:a8:91:a6:05:70:3b:60:71:11:2e:14:e4:
30:ef:5d:ef:39:1e:4b:92:7e:23:54:a2:ba:77:c4:
e7:54:d4:54:2b:02:6a:9a:46:1f:cc:11:51:ea:6a:
c4:81:08:5d:d9:ec:76:f8:17:28:30:72:18:b3:fa:
19:be:2f:6d:a9:14:2f:b3:21:1d:cd:c4:61:d0:17:
09:a1:2b:62:21:5d:02:30:7e:9a:da:5f:71:02:fd:
b1:1c:68:a9:19:0e:a0:1b:c6:e8:0b:f6:df:1c:68:
59:02:47:c3:52:5e:e1:dd:7b:cc:f3:46:7c:66:a3:
76:af:be:bf:c7:80:34:12:61:76:fc:06:20:62:fc:
07:40:58:00:41:de:86:d4:14:97:de:46:92:81:1b:
ee:07:c0:70:6c:05:34:5a:7e:03:4c:91:21:bf:06:
a6:24:24:7b:99:87:a4:16:d2:63:88:b4:ba:08:86:
c7:b8:f6:be:28:02:48:81:81:ba:67:4b:ea:fb:93:
4b:6d:bd:b1:47:99:93:e1:7b:ba:d8:0b:7e:2c:a6:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:EE:FD:70:E3:A1:52:8D:43:1E:D0:BC:0A:8B:52:99:CB:5B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b11d846-1bcc-3b12-964a-d8c3fee49ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
184.105.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ce:53:9f:25:a0:21:7e:de:35:d3:59:2f:eb:16:03:24:6b:
50:ae:d1:5f:93:40:22:83:53:78:8c:a2:d5:c5:e8:62:47:aa:
79:f9:90:67:4e:c0:c5:22:81:35:c8:4d:98:6d:79:ff:9a:a2:
1f:94:90:5f:10:e1:78:f4:c3:92:1a:ae:98:6a:e0:59:5d:56:
ec:f8:3f:c5:dc:a5:6a:4d:4a:f5:3d:a8:53:e0:f8:61:13:cc:
b7:06:1f:aa:b1:e6:70:86:d9:d5:2d:f6:6d:7f:11:94:f7:7d:
38:9d:f3:6a:25:e6:c1:cf:29:9c:59:fd:7f:17:c8:b9:4c:6c:
a2:9e:4e:3b:38:61:a7:fc:cc:70:75:95:a0:7a:25:1b:d6:06:
4e:34:be:3b:76:cd:40:d5:96:5b:f5:6e:2d:a3:42:d3:7d:91:
50:34:e1:3d:10:3c:03:e8:a3:ae:2d:01:16:23:6b:3b:6a:00:
7d:c8:b3:74:04:ce:c9:19:ea:75:3e:13:51:0c:91:34:55:04:
c0:de:6d:9c:63:c8:b4:20:ab:a7:08:99:75:05:c1:9d:5c:09:
00:20:d0:93:6b:fc:1a:59:0b:08:75:bd:56:18:b0:b8:5a:b9:
08:3f:7a:13:21:ec:ac:d2:03:d0:5b:b8:2f:a8:fc:fe:03:fb:
65:64:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:24:12 2025 by rpki-client