Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa
File: 5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa (raw, json)
Hash identifier: mWscVyo2rIqXT4TObEAvsLIdWxgvOJ4TAdUOtFWdKsI=
Subject key identifier: F4:D9:3C:EE:71:E4:2D:5B:BF:11:21:E7:49:3B:71:69:88:CF:2C:72
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F432858487CEB357D0F0FDC6ED52E4F80
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 5650
IP address blocks: 172.84.188.0/24 maxlen: 24
172.84.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:35:7d:0f:0f:dc:6e:d5:2e:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d7ba7602-ec09-4885-8b22-bb934df1845a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:d5:99:d4:03:d0:93:9c:ac:35:02:d1:b9:
f0:8f:55:aa:da:16:55:22:f4:73:d2:3d:b0:4e:51:
a9:3a:e8:24:a8:b5:0a:4d:e5:e3:45:11:f0:21:40:
11:8c:89:15:17:fe:84:68:09:5a:fa:7b:23:04:e7:
d7:11:65:27:9d:8d:b2:e7:29:e4:8b:03:6c:e6:d1:
9c:b0:b9:d8:43:52:dc:8e:d2:b1:a7:12:5d:87:12:
26:3d:70:a0:f9:ef:2b:db:d4:b7:f4:ce:ae:8c:38:
9e:dd:f7:f6:d4:9c:2e:cf:8c:b7:78:38:f4:2f:1b:
1c:2c:ba:c2:ce:b5:a3:b3:f1:a1:fd:e7:6b:1b:0f:
4c:fd:2b:55:f2:75:54:e0:f9:82:61:0d:fe:5c:18:
5b:29:83:80:e9:4d:fc:f9:a7:4c:01:5a:19:13:75:
4b:36:75:5f:cd:88:48:8e:0e:93:54:31:30:f7:95:
f2:0c:1b:12:2c:e1:89:44:51:c0:94:69:c5:f7:09:
a4:ba:1a:79:45:3c:81:b0:47:d3:88:1e:7c:61:6a:
aa:72:e2:01:08:49:74:02:8e:18:45:40:a1:d0:b8:
c8:dc:6a:ab:94:7d:90:20:cd:20:4c:20:30:01:15:
ac:c2:51:f0:c7:46:30:4d:2c:ed:d9:df:e2:21:48:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:3C:EE:71:E4:2D:5B:BF:11:21:E7:49:3B:71:69:88:CF:2C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/5a711d36-ab42-3f0e-a09c-10c0505f9ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
172.84.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b5:e8:e7:ba:8b:f8:03:52:36:cd:77:3c:f9:32:ba:03:3b:
8c:92:21:0d:fe:11:8c:c3:90:88:e3:14:89:c5:54:60:da:ab:
b0:62:23:0a:a0:ca:09:d2:ba:a6:99:fa:d2:30:c8:7b:c1:97:
0f:96:84:e9:a4:0f:82:03:74:fa:05:b9:8d:89:11:45:ec:5c:
2b:0e:a0:41:c2:6e:86:73:84:62:55:eb:fa:12:fb:fd:7e:fd:
dc:84:21:0a:a4:39:3d:a6:f4:fb:12:9e:63:06:02:aa:43:21:
8d:d3:87:1b:e6:e7:55:ed:58:a7:d6:9b:cd:61:74:18:75:33:
eb:1d:e0:ac:82:e1:67:f4:0f:1a:64:12:c2:c3:2c:90:6f:0d:
63:59:50:04:f5:b9:89:fe:58:3b:76:7e:7a:a4:3b:87:ed:37:
8c:5b:c9:40:65:22:8f:53:cb:1e:ed:9b:c4:9a:f4:b5:e8:e6:
2d:3f:0f:4a:3a:47:27:e9:cc:c8:34:f0:63:de:e6:60:85:c2:
be:6d:06:fc:bc:1e:fe:7f:f8:35:bb:14:22:d3:82:50:30:69:
0b:18:8f:ce:63:ec:0c:17:2b:1e:11:77:8c:67:c1:c6:48:c2:
7c:21:c4:c0:7b:4e:e2:2e:a5:b7:8c:f9:41:20:77:8e:70:90:
04:60:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:18:24 2025 by rpki-client