Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa
File: 1be44621-9135-31a4-801e-906f3069ed5a.roa (raw, json)
Hash identifier: bvnNswZYFFhhT+AmvbFHuua3hwcY1O2LO7J7yAFQtQA=
Subject key identifier: 9C:88:AF:0B:29:70:52:58:D7:5F:29:C9:40:59:21:CC:C4:FF:D4:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AB0F2BA3BE4D5578B4980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 20940
IP address blocks: 173.223.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:b0:f2:ba:3b:e4:d5:57:8b:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=9c84fd2e-3836-4baa-818d-58ff377125d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:1f:4d:45:ef:a1:66:05:35:f4:da:54:d2:
0d:47:90:26:9b:82:0c:80:45:40:f9:51:b8:9d:96:
70:7e:c1:02:ab:b7:0d:16:c2:a6:84:7e:f8:7e:10:
26:ea:e3:11:37:c9:70:55:c6:53:a6:c1:c6:52:04:
2d:3f:c9:ec:c8:f7:08:4c:07:5e:87:0f:aa:17:4f:
ed:af:d7:68:76:49:22:31:a4:31:2c:12:e1:62:ea:
a0:b2:f4:cf:9d:16:a3:e5:b5:93:b9:34:d0:02:39:
c7:eb:bf:c3:69:c1:c3:ef:5f:27:72:10:cc:34:18:
d5:86:e2:dc:00:ab:58:9f:0b:f4:9c:aa:78:10:7b:
41:c5:de:5e:07:fe:ba:ce:3a:f6:e8:5d:81:6e:4a:
b8:90:9f:6a:e1:5c:00:a3:0f:2c:5b:35:b5:e4:80:
1e:12:8b:8f:b5:a5:92:49:d4:8a:2d:a5:84:40:25:
d5:58:b8:ec:31:7b:07:56:7a:ff:5c:00:7d:55:cc:
3d:1f:68:3c:4d:6b:26:8a:ed:bc:52:52:1f:14:eb:
39:b5:c4:6a:21:08:13:7e:51:eb:58:42:2c:2b:98:
aa:c1:c4:73:d3:d3:4c:9c:68:7c:0c:5a:b9:3f:6a:
e4:e0:d0:2c:77:68:32:6d:28:c3:89:27:11:00:9f:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:AF:0B:29:70:52:58:D7:5F:29:C9:40:59:21:CC:C4:FF:D4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:7f:a5:2b:0f:23:69:1f:96:bc:84:b6:9a:82:d5:e7:4d:f3:
7b:c6:93:51:7a:84:3c:42:50:5e:ca:55:b6:2e:0d:0c:40:ac:
57:d3:cb:cf:87:d5:dd:d2:93:c7:e0:d2:3f:97:5c:25:bf:fa:
f9:d6:95:c6:48:75:4b:4f:2e:53:0d:b9:10:73:18:ad:dc:ac:
39:48:e3:e3:61:e2:f6:13:51:05:1b:83:19:ed:e5:0a:53:3c:
a5:dc:6a:63:2d:75:22:1d:9e:5e:75:7f:bc:60:fb:98:90:5c:
5a:76:40:6b:0f:55:1e:64:f3:95:76:af:96:26:0c:fa:1f:8e:
b1:ef:42:90:be:1e:7d:ee:82:26:29:3c:b7:54:1a:a1:5e:03:
34:4e:a5:13:75:fa:ce:b7:f7:0d:92:a2:8f:be:82:f9:a5:02:
8f:42:12:de:4a:2a:68:06:c9:4a:57:ea:42:34:db:76:4a:ae:
71:46:44:9b:68:a7:a2:21:26:e6:82:5e:71:4e:f2:47:4a:e8:
b2:42:41:d6:84:04:5b:72:8f:d5:f3:d3:53:4a:96:05:93:30:
f0:8c:4b:c7:d1:6a:11:a8:d3:db:a1:a5:7b:a8:f8:f4:75:1f:
7c:01:1c:fa:fa:ba:ca:2f:a2:ca:e1:9f:9d:ce:b8:a1:e2:23:
b0:a0:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:44 2025 by rpki-client