Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa
File: 2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa (raw, json)
Hash identifier: CgPzXrcr59AVsenCpDqj/+Oi7ZTeVqG0t2lY76nlSvw=
Subject key identifier: AB:BA:46:C6:1A:4D:81:A7:02:42:C6:CE:D1:A1:01:1A:24:83:0C:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CDFB3200BBCE29AF77A5C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:df:b3:20:0b:bc:e2:9a:f7:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ed58aff5-cba4-47bd-9c0c-65676f8c6a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:b6:c3:c9:80:77:a1:4e:a8:f6:cc:11:dd:
9a:32:5c:ef:64:89:25:fb:66:4b:e7:e7:52:98:0f:
92:2c:2d:37:14:f2:8a:47:4e:90:e0:fa:01:c7:e9:
bc:58:ba:16:7d:b4:4b:c4:f7:7e:e0:36:2f:64:1a:
99:30:6c:38:bf:98:04:69:43:54:09:63:e8:ef:82:
dc:98:0a:79:07:b1:42:03:84:d8:3a:ac:18:5d:3b:
16:e9:6d:af:1f:c4:6d:bd:90:6d:75:e6:a4:04:e8:
79:34:40:15:6a:99:0f:e9:91:38:0f:17:b9:dc:e8:
18:e5:05:88:9b:bc:b3:18:ae:87:f1:92:a4:a4:0c:
ea:44:1d:8e:4e:c8:7f:cf:d7:1b:30:05:15:c5:45:
a3:34:a8:49:ba:a4:d0:b8:5e:14:0d:26:09:5b:66:
55:f7:53:9c:cc:29:38:95:71:c3:f5:de:92:f5:30:
09:90:c8:c6:8b:46:54:02:5a:e5:82:7a:a3:66:2d:
84:9b:fc:46:0d:19:66:cf:2a:6b:7c:6b:71:da:6d:
46:58:99:19:8c:a9:e8:89:9e:06:ef:cc:49:b5:47:
9d:04:cb:31:79:fc:42:04:af:23:dc:3d:d2:22:43:
24:09:f9:f1:64:c1:2c:c7:3c:07:60:ad:2e:35:72:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:46:C6:1A:4D:81:A7:02:42:C6:CE:D1:A1:01:1A:24:83:0C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d602e03-ebc6-3294-a16a-1bb8e42cc7b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:09:42:ea:69:5e:5c:f0:af:be:34:91:03:8e:60:17:7c:76:
96:36:63:87:81:01:ca:6d:99:14:90:20:99:2f:cf:4b:d5:2b:
13:e2:6c:c1:0e:32:11:2f:d0:eb:47:78:bd:3f:e2:0a:5d:61:
3f:e8:27:08:61:e0:ea:36:3d:88:da:29:7d:26:a8:09:71:b3:
4b:60:d8:b0:12:78:f8:a1:86:60:b6:5b:16:5a:7f:42:1c:61:
f2:af:36:d7:c5:a2:19:e9:91:b9:aa:ba:8d:95:19:d3:d2:60:
9f:31:7a:48:c5:14:c7:49:3d:28:f0:ff:80:f8:e6:17:63:bc:
8f:cf:d1:14:a2:43:09:fe:97:b3:1c:8e:6c:a3:c5:71:e7:8d:
93:22:36:d5:ca:4d:7d:e8:28:f5:7f:19:f5:05:c6:1a:e0:ea:
7e:43:91:4d:b3:c1:fd:8c:bf:70:39:47:a5:fa:7a:71:9c:dd:
c4:46:df:8d:36:ee:79:fb:4d:6a:f4:b4:a7:72:cd:fb:d6:3c:
7a:90:5a:b6:00:ad:86:38:e9:ed:03:34:bf:50:ab:05:18:74:
bd:f4:fe:73:87:17:fe:88:3f:66:74:06:dd:33:04:1e:3b:7c:
a5:b2:e6:4a:03:dd:28:08:0b:1f:62:9a:19:6f:2a:f4:2b:5d:
08:48:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:46 2025 by rpki-client