Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153c3705-12c6-33e1-936c-7f62d3930fe8.roa
File: 153c3705-12c6-33e1-936c-7f62d3930fe8.roa (raw, json)
Hash identifier: 2YF25tBe8NoYREucfTUrPHhAuTSEefQJgyzbKMgAqs8=
Subject key identifier: 80:37:46:4E:AF:1D:DC:11:39:FE:53:91:E8:E3:9F:42:3C:B6:7E:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FC7F9DFF2A88DEF5E06EA700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153c3705-12c6-33e1-936c-7f62d3930fe8.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:9d:ff:2a:88:de:f5:e0:6e:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=2f086707-dac3-4a53-a3d2-072adb828383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:31:3e:40:42:ec:66:ee:97:8a:76:96:ff:
53:6b:b8:1c:48:e1:44:a2:67:f4:e2:ab:db:a5:bc:
4c:86:ab:73:c1:0e:3e:f6:50:00:db:bd:ec:0c:2a:
b7:f9:58:06:19:33:40:0d:8f:07:ea:ca:87:c5:7b:
88:f3:fb:6a:86:45:ad:30:c9:65:af:28:de:fb:27:
89:f1:fc:e6:ac:50:93:25:d0:ad:ae:50:6e:d6:39:
34:52:ac:00:c6:dc:2a:6d:73:1d:f0:29:65:79:d6:
6e:3f:93:67:68:fb:e8:bb:78:a7:ca:d8:fe:ed:7d:
e4:63:bb:9e:52:84:f0:f8:da:8d:cd:85:63:f1:c1:
37:ed:b5:50:00:be:3d:b0:d2:ac:bd:f8:b4:98:ab:
7e:e6:8e:5b:a4:1a:69:ed:0b:5d:b7:fd:03:c1:e1:
04:52:7b:d2:19:79:28:16:f8:67:8a:f6:ab:1b:93:
5e:05:33:55:47:b7:4e:6e:62:23:c8:5d:7b:90:a6:
e4:77:47:55:96:28:33:57:e0:60:a1:d3:e0:2f:89:
6a:12:ed:ee:f7:49:52:d8:03:5d:da:89:31:31:2f:
63:f1:a7:e0:c3:e6:a7:3b:a9:e1:c3:9a:21:e9:34:
56:c8:79:32:75:6b:74:03:7d:97:17:6c:28:a6:31:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:46:4E:AF:1D:DC:11:39:FE:53:91:E8:E3:9F:42:3C:B6:7E:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/153c3705-12c6-33e1-936c-7f62d3930fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0a:ae:a3:d8:33:d5:c1:8b:94:d0:5a:c9:70:2e:19:e7:fc:
76:2c:f0:d1:99:9a:41:a4:18:14:5b:6f:1e:cc:eb:85:21:b9:
ab:e8:c1:81:3e:be:25:f7:22:66:e7:08:a6:55:e0:0e:41:fc:
13:a7:1f:c8:29:16:15:ab:e5:62:b7:6a:47:a7:ac:c0:d2:c6:
ce:84:34:8a:38:a3:ab:9d:e9:c6:e4:d9:51:ed:6f:a0:08:a9:
dd:35:30:79:5d:8e:d7:d2:07:d7:39:35:cc:71:c3:a7:85:cc:
fa:f8:d9:63:e0:a3:94:db:ef:7d:72:bc:ff:76:6f:63:f0:82:
e8:30:15:fd:40:f1:38:e3:27:dc:8a:80:6d:d5:01:98:59:e4:
8c:71:1f:47:cf:7a:8b:b7:66:e2:76:c8:8e:36:09:e4:2b:39:
1b:b1:67:31:88:c2:de:7c:9f:d3:cf:8b:3b:f3:be:ef:91:13:
04:c4:c2:79:11:4d:c5:28:e3:bb:39:80:60:1f:7c:0d:55:42:
5c:df:fb:21:29:52:ed:69:0e:25:49:8a:79:f7:5e:0c:c8:08:
38:bd:31:9b:81:ca:2d:da:82:ab:fb:16:f2:3b:23:07:3f:5a:
e9:49:d6:5d:42:62:40:cf:f6:38:8c:68:49:44:db:8d:cc:c6:
30:00:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:22 2025 by rpki-client