Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa
File: 2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa (raw, json)
Hash identifier: TGAGNCO9byNc9b/yozTbVkz6qiyKVO1peDBYY6762LQ=
Subject key identifier: DB:A5:0D:5F:36:E0:E4:09:95:84:5B:04:FF:7C:EE:88:1B:75:A6:A9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51EC659AD8E25217154C8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1e:c6:59:ad:8e:25:21:71:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=e7c42b17-1255-4fc6-9d0b-e75eb0184206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:15:5f:f3:62:69:47:02:e7:8b:f8:ae:65:
be:53:76:76:3f:ab:10:ff:b3:c2:94:6f:85:c2:c9:
ac:e5:ca:a0:b3:c6:cd:eb:ec:60:b3:55:e4:a1:19:
38:00:22:d4:d9:f4:e5:3f:b2:7b:c0:97:23:d7:54:
dd:3f:bb:5b:03:2d:d1:09:54:02:ec:8c:e4:d9:75:
f8:db:a5:ab:7f:97:60:94:8e:47:4f:54:33:c8:9a:
02:8a:8b:ab:14:94:58:16:1e:35:36:f9:0f:59:54:
22:ad:3c:7c:c7:1a:87:36:20:1e:13:c9:44:f9:23:
d9:0a:c8:f8:90:b3:bd:e4:a7:dd:b7:78:a7:e4:e5:
1e:4c:74:1a:aa:1b:48:09:d0:56:74:ee:c5:96:0f:
09:95:a5:45:4d:a2:84:3d:23:19:b3:8d:35:0e:44:
90:a7:15:8f:a5:1a:23:64:57:65:fd:9b:27:6a:20:
cc:b4:4d:16:57:87:8b:01:0a:63:15:84:98:8b:75:
97:85:36:30:77:91:57:52:40:44:6c:0b:86:49:2f:
a1:f5:9f:76:89:bb:e0:83:3f:d6:c3:80:eb:c4:58:
1f:80:80:00:38:91:23:00:b3:b0:88:e4:19:bc:6e:
07:25:f9:ba:54:ac:a2:9c:d7:88:17:85:fe:84:84:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:0D:5F:36:E0:E4:09:95:84:5B:04:FF:7C:EE:88:1B:75:A6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af2a641-ddd9-3092-8fbb-d9fa148e3020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8e:36:96:2c:80:02:2f:70:c5:9e:41:d6:03:2b:84:33:fe:
95:ab:92:de:ac:2a:43:63:85:dd:45:d9:52:e2:e3:96:10:50:
21:15:40:18:18:9c:b9:4f:1a:e1:e0:78:4e:fa:12:1c:f4:1b:
45:03:93:a3:1c:e1:3a:48:1d:1e:f0:d9:85:95:af:c9:a6:ac:
6d:4d:cf:e3:33:0b:cd:51:8f:1a:e2:c2:69:bc:08:ce:c0:5c:
8d:31:7b:4e:7d:a9:28:04:69:ed:4a:f2:1f:9c:02:ec:d0:bc:
9d:d0:25:43:27:74:73:24:46:91:6a:99:cc:0d:73:b1:90:86:
97:92:6f:5a:47:47:a4:10:77:7c:ac:61:dc:c6:52:0e:41:b3:
2c:0a:be:ac:1d:6d:cc:ac:5a:ad:86:2e:a4:1c:90:77:32:93:
6e:a9:f3:58:36:60:73:95:3e:49:fa:95:7b:21:fb:a3:9d:36:
c7:a5:50:75:f0:05:a0:28:f1:ed:d1:10:9c:06:6f:d7:cc:06:
8b:26:e6:f3:ef:b3:f2:ee:e1:ec:d2:12:01:70:1f:a9:de:41:
f2:80:28:0d:c2:dd:21:0b:cf:27:2a:47:44:c9:2e:ba:49:f6:
b2:60:c6:84:ae:6f:17:41:cc:c2:de:55:67:31:c4:4a:f0:e8:
04:ee:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:23 2025 by rpki-client