Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
File: 2afa0af0-d84f-3662-9436-b75c9503253d.roa (raw, json)
Hash identifier: 6SlDYOs06Vp8L85zFYpAT0QAs+vbY2B16He6a4ai0W4=
Subject key identifier: 53:16:7C:D5:FA:4A:42:34:F5:86:42:8C:D7:79:5F:C3:58:36:F4:1E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143A84CB628F84FA311FA940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:84:cb:62:8f:84:fa:31:1f:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2b9bdc69-8826-4b21-84e0-756201e84c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:96:05:79:6f:6a:08:23:b3:d9:48:a1:85:
c5:78:ed:a9:d7:9e:11:04:82:34:57:fe:e5:2d:ab:
fb:25:3a:0d:7a:67:57:cd:2b:09:dd:14:e1:fa:18:
d7:ee:89:74:80:c5:fb:b9:85:c7:21:42:97:b3:6c:
7c:7f:f8:c7:fd:b4:40:d5:cb:83:26:bb:53:de:62:
4b:16:fb:aa:d0:56:b0:ba:4e:3d:fd:bb:00:c7:24:
1a:9d:90:ad:1e:50:8b:10:76:80:0b:88:0e:ae:e5:
14:df:88:ca:27:dc:74:fd:82:25:c5:14:28:ff:04:
3f:f8:cc:b3:e8:9d:6b:b6:61:62:ce:53:be:23:dd:
13:93:67:f3:b6:98:64:1b:3a:79:16:fa:3e:e9:88:
8e:6d:7d:c2:2a:cd:32:3f:54:30:b0:be:b0:cc:0b:
9b:54:74:66:b4:ae:27:db:27:4a:31:d6:77:eb:57:
62:07:0e:d4:d0:d0:a1:96:35:d6:ea:54:7f:21:c8:
bf:df:40:3e:42:fa:4a:59:c6:d5:13:e2:52:3a:bf:
b3:4d:44:19:7a:9f:a0:ec:23:b7:f4:02:3b:65:c8:
62:a5:bc:7f:af:ff:f6:b9:77:b6:c6:3c:85:27:da:
26:0a:9d:0e:b7:b5:6b:a1:6d:09:f1:3b:a1:cc:04:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:7C:D5:FA:4A:42:34:F5:86:42:8C:D7:79:5F:C3:58:36:F4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:91:d1:75:4b:a2:58:cc:47:53:e4:6e:84:22:29:79:0a:f0:
d4:f6:bf:76:a0:05:18:d3:87:df:87:b8:90:1c:62:4b:18:9e:
a3:1f:c2:2a:06:9c:f4:ee:41:84:87:2d:32:e9:65:cc:15:6d:
e2:c5:85:ec:0d:dd:ab:17:65:b8:bb:3e:37:6b:ce:ee:54:06:
74:83:41:2f:b6:39:8b:d6:cc:5a:46:c4:45:97:f1:77:7c:bb:
a6:ef:fc:a1:8d:47:fa:bc:16:a7:d0:b0:2d:1c:30:bc:3c:2d:
a1:d7:c8:cf:bb:69:8c:2d:9f:a3:71:38:00:4f:20:a0:26:de:
3e:d5:5a:c9:1a:db:d9:64:b0:40:c1:a4:7d:f3:85:3a:88:97:
95:9e:83:28:1d:20:04:23:7a:fb:df:ff:39:11:c7:9b:aa:81:
9d:5f:09:4d:99:11:42:26:ed:8a:2e:4c:0e:61:73:85:81:b1:
f6:09:05:0b:01:ca:76:90:8d:d2:88:2b:ae:e3:ff:3c:d2:22:
20:59:c9:48:99:da:88:77:4a:86:ec:41:87:0c:4a:8c:6e:8a:
53:15:ad:83:85:89:f1:d1:82:78:77:d3:5c:52:bd:2b:ad:6a:
f8:91:69:41:f2:76:ff:ae:5d:b5:44:9c:91:6d:2b:21:ec:a8:
38:e1:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:11 2025 by rpki-client