Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/293aa6b5-0536-38aa-8d23-dd64499c43b0.roa
File: 293aa6b5-0536-38aa-8d23-dd64499c43b0.roa (raw, json)
Hash identifier: /oQPSxA06hsS+VGNIazV6BEQhbS8jDNL5i0JESFNR+c=
Subject key identifier: 02:38:36:40:3E:F9:CE:B2:12:E2:7E:71:8B:9E:B4:67:5B:D8:1B:D0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CE259DE8144FA893C0480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/293aa6b5-0536-38aa-8d23-dd64499c43b0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:e2:59:de:81:44:fa:89:3c:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1d6ccba5-f339-4ce3-aa5b-d1897e68102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:59:5f:45:6f:62:c0:97:91:3d:b2:b6:dc:
ee:06:dd:a1:cd:80:b6:66:86:50:d2:38:27:b4:6b:
ba:b4:44:a3:35:50:33:68:09:bd:e4:c3:c5:88:cb:
9b:df:d3:09:ff:1c:31:88:f6:d5:03:79:99:18:4b:
06:53:06:e6:11:df:53:4f:f1:4a:e1:62:18:ab:b0:
d1:36:9b:92:2e:07:df:56:eb:bd:e7:a4:b1:80:84:
8c:52:65:c5:74:4b:ed:a0:30:ac:c6:d6:68:55:b4:
97:8e:94:90:71:76:89:52:62:2b:5a:a2:7d:69:98:
92:25:42:6c:e3:41:f5:89:e9:d4:fb:b5:3c:76:dd:
22:c5:c8:34:bf:fc:4f:d6:88:66:aa:0a:18:b8:d9:
97:4d:79:d3:ae:21:37:cd:85:c6:28:01:10:4b:ab:
03:f9:c4:6d:50:ed:83:dc:cd:f9:cc:87:be:d5:85:
36:55:b5:e8:b6:56:3f:1c:e9:34:01:57:6b:94:63:
9d:4a:95:9e:e6:72:86:73:d4:14:b1:d5:34:eb:0f:
54:22:e4:5b:1c:b9:77:ea:f9:a3:16:a3:33:18:0b:
d6:54:c8:f1:ae:6e:70:79:c7:5c:ab:60:f7:de:c6:
f1:04:a7:cc:ed:4a:72:9d:cb:b2:c4:49:51:33:fc:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:36:40:3E:F9:CE:B2:12:E2:7E:71:8B:9E:B4:67:5B:D8:1B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/293aa6b5-0536-38aa-8d23-dd64499c43b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d9:73:a2:cc:5e:78:88:ab:5c:16:ae:f1:63:7f:0a:58:f7:
bf:a4:ed:b6:8c:43:92:b5:b5:1c:bf:6b:12:75:e6:97:af:93:
5f:a1:ce:28:82:e9:45:35:3d:fd:cd:1d:01:0d:f0:07:d5:b8:
6b:39:61:37:f2:3e:c7:61:a2:00:4d:42:e7:d9:20:8c:d2:d6:
0e:03:9b:ea:98:92:7b:96:5c:5c:13:be:4e:29:d7:d8:4d:9c:
84:a6:eb:c1:3b:35:87:c0:fa:3a:f3:fe:fd:29:c8:4f:bb:58:
d9:97:b4:d7:fb:e9:20:a9:8d:a8:5b:14:de:3e:91:3c:88:17:
98:88:90:13:20:13:27:cf:db:b2:f8:18:e4:81:7c:68:bc:83:
14:a3:d5:38:f6:82:17:a6:47:69:b6:18:5a:59:79:f3:54:be:
5b:53:ab:ff:aa:d4:a0:f5:3c:a9:d3:1d:75:7d:e1:76:bd:e3:
75:e9:3f:db:53:5d:bb:96:a4:ac:41:15:a2:75:f2:79:83:18:
52:63:65:ee:2a:3c:e3:b8:6c:35:36:65:42:ef:33:12:31:2e:
89:31:86:1a:d9:50:49:66:56:fc:56:d8:63:74:03:87:86:ad:
76:fb:ed:82:fd:8c:82:e3:ee:17:9f:94:cc:99:2d:f5:7e:aa:
25:26:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:36 2025 by rpki-client