Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa
File: 1e290c50-ef6d-3093-abfb-d989bd7eec95.roa (raw, json)
Hash identifier: NvPUdqauCmUguMFnjCzdcXb/BO/CI0TP7Vtzzolm2h8=
Subject key identifier: 98:9A:15:3F:E2:3B:D3:11:FF:94:25:6E:17:76:27:D7:CA:C6:B9:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584815A001ABC4A6E90831EAC100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:a0:01:ab:c4:a6:e9:08:31:ea:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=d08d4eba-e922-4849-a285-33d10943d255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:f3:4b:e8:31:95:d7:2a:82:51:75:f5:60:
24:ce:b9:53:8b:d6:7a:7c:79:d1:6c:72:ad:58:05:
53:7a:ed:d4:63:ef:49:ed:b4:ce:9c:6f:d6:18:2b:
e5:4a:09:fb:fc:e2:d2:23:d5:f2:57:0a:bf:4f:87:
71:bf:92:c2:1b:22:ce:8f:c3:b0:78:9b:07:5b:22:
75:6d:ca:d8:d0:48:15:40:20:44:95:01:2a:bb:ca:
b4:51:bf:e4:bd:0c:89:43:d0:03:26:0b:4a:16:80:
09:ad:a2:61:3d:7e:d3:1b:2b:8c:dd:a4:ed:c1:b8:
b8:4e:1b:be:70:5f:91:99:0c:97:f4:ac:fe:6e:7a:
fc:39:28:4d:b8:79:47:4a:5c:9b:c5:9d:2a:94:e7:
b7:37:52:61:07:3b:8f:e5:17:cd:b2:1c:cf:ac:d3:
5e:ca:47:62:f8:46:9e:6e:71:33:13:94:83:11:f3:
1d:7b:7a:d1:d1:19:4e:74:b1:2c:22:da:02:3d:11:
cc:8a:b6:f9:e5:b4:62:7e:a5:1c:0d:68:73:e1:6a:
38:d1:7b:16:88:4f:7f:bd:fe:d3:5a:62:4c:7f:78:
62:1a:3d:d2:58:c0:7b:ac:71:66:da:d7:18:a4:a2:
d9:3a:a9:dc:ee:16:3f:4a:82:70:5e:ad:ed:f9:d3:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:15:3F:E2:3B:D3:11:FF:94:25:6E:17:76:27:D7:CA:C6:B9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:47:8d:35:9b:5a:ca:6c:d0:01:53:a0:dc:bd:9b:24:c4:3b:
d0:be:f3:7f:b5:6f:36:33:43:5a:b2:1c:08:3c:cb:7a:6c:31:
7a:dd:6f:60:4d:e5:4e:b3:33:6e:de:f6:51:72:4a:75:e2:dd:
49:dd:8a:8b:06:0d:d8:d1:a4:99:0c:57:3f:59:a1:bb:01:e0:
dd:3c:64:75:e3:38:a7:be:b4:fd:3f:8a:6f:99:c7:91:7b:14:
05:3b:0a:86:0f:f1:61:f8:ae:21:c9:79:7f:2a:ca:1e:1d:2c:
13:aa:de:3a:82:96:96:05:87:30:63:7e:85:2f:1e:9e:2b:d8:
1b:48:16:09:7b:de:54:69:e3:64:00:45:87:f6:8c:ef:95:66:
cb:22:be:80:4f:a7:aa:9c:35:07:b6:61:c1:f8:b6:6e:38:74:
aa:b1:3b:8a:6e:15:f0:89:6c:95:af:61:ba:08:03:2a:2c:72:
30:43:e7:39:3c:28:cc:56:5d:77:fe:db:c8:66:1f:6b:54:b8:
ae:96:61:2b:fa:e3:03:30:9c:ae:78:f8:26:87:31:d9:25:34:
10:48:7d:56:14:12:80:15:c8:fe:15:5c:3f:2c:cb:56:0e:59:
c1:6c:9c:c1:d3:0e:70:ca:2d:c2:d6:a5:9e:fb:ae:87:d3:74:
79:39:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:11 2025 by rpki-client