Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
File: 29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa (raw, json)
Hash identifier: 4+Ml2rIhcpoOAjOGG4Ztp6Z7nxSr7STTgGb5Z44q5g4=
Subject key identifier: 18:22:F7:7A:82:5E:ED:CE:1D:93:CE:E0:6C:12:94:5A:B1:A9:B1:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51EA20B21B8F87420E9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1e:a2:0b:21:b8:f8:74:20:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=839a7edf-c0be-46a1-899b-6d1d3314c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:03:a9:9c:91:67:a3:90:c1:86:5a:20:59:25:
5e:7a:28:f1:19:a5:91:f9:48:b7:52:b2:97:e4:00:
ae:46:59:f5:31:2d:59:70:4a:0b:87:52:c9:8f:30:
e0:5b:78:f5:fd:84:da:c7:7b:01:39:dc:0d:42:5f:
dd:d3:67:6d:58:02:b1:e4:d2:d0:b0:ad:07:06:a3:
e4:6c:2a:7e:be:a1:8c:30:41:54:d5:13:20:68:01:
ef:c8:32:52:19:f7:15:a2:40:53:b7:ef:20:d0:ab:
f1:3c:4a:2c:02:5f:57:82:e1:f5:51:6e:89:c2:58:
70:ab:13:05:7e:6b:68:91:c8:7e:60:93:24:c0:76:
f4:c8:65:59:5d:06:40:3d:c5:5e:ae:f8:22:ca:4e:
4f:7d:0e:28:d5:d7:c9:a3:f4:d2:3d:f7:a1:9c:b0:
66:ee:1e:2c:a0:30:3e:34:14:99:65:b0:94:fd:98:
e7:7d:76:22:04:c1:c2:40:bb:42:37:77:1d:31:e6:
62:c3:40:b9:c2:6b:97:c1:8f:a3:07:07:3e:b7:25:
89:65:3b:6a:f1:3d:24:db:4e:03:39:93:57:0b:36:
55:db:b5:1f:08:7a:f4:5d:2a:f7:ca:5a:62:5d:2e:
17:ea:12:3c:09:8a:17:12:e8:0d:93:fc:26:6e:c9:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:F7:7A:82:5E:ED:CE:1D:93:CE:E0:6C:12:94:5A:B1:A9:B1:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fa00dd-a4c4-39a1-bbfa-c05e55cd9363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:2c:dd:9b:23:ca:f6:32:3a:ac:6c:fb:50:fe:9a:87:76:f5:
29:5b:f3:07:fb:55:8f:78:1e:44:cc:f7:e6:96:38:7a:8e:bf:
35:4d:4d:f4:50:36:c2:b1:8d:59:82:ad:5d:3a:2c:b7:f9:a9:
d9:26:1d:70:2f:8e:53:b2:30:96:81:55:99:b7:e3:7d:66:e8:
73:c2:4f:3d:69:08:67:d5:89:a7:db:d9:bd:12:11:39:53:64:
4c:85:ef:12:9c:aa:6f:03:5a:97:5d:6e:3b:c3:70:c6:cf:1c:
00:1c:fe:61:e0:22:84:05:f6:5f:fa:96:a6:cd:a9:1b:77:d6:
74:78:b7:65:43:92:f8:ba:e2:87:06:d1:2f:b5:0a:fc:4f:67:
53:6b:07:27:d8:87:9a:4a:8f:5a:a0:4c:f7:dd:aa:d7:67:aa:
ef:e4:ba:ce:c9:d1:ed:a0:ab:61:3f:cb:d7:c4:12:9c:a0:fa:
1d:f0:bb:74:60:6a:94:0e:44:99:f1:ee:79:f8:10:83:87:49:
ec:e0:28:1c:6c:35:8c:e7:77:86:87:c5:87:8e:fb:b8:ea:58:
15:74:55:d2:49:f9:a5:47:43:86:38:66:ea:9d:b4:4f:00:80:
d2:7e:f5:bd:93:91:be:20:c4:21:59:aa:ae:04:84:77:6c:ba:
da:1a:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:49:37 2025 by rpki-client