Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa
File: 310aa2b6-46c7-3c3f-be18-80729877d42a.roa (raw, json)
Hash identifier: 2IK63U+S29IsK9GksqHXdLVXBWzIBd1hhDHcsAiYX9k=
Subject key identifier: 37:AD:BB:E3:BF:3D:64:B6:12:36:24:27:32:14:F3:6E:46:28:92:1F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A68D48CB10F4023429040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:68:d4:8c:b1:0f:40:23:42:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=7a95464e-21d6-46c3-91a8-bdeb9995f5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:f6:ba:a5:4c:c3:f6:54:d2:8d:2c:b0:a3:
06:ed:ca:d4:dc:ba:8f:cb:d2:d7:d4:31:91:e4:9c:
e7:73:34:3f:ce:af:ce:f8:10:a2:42:95:a1:8e:35:
1a:fa:91:ff:1f:d4:5c:21:d3:34:ac:1c:82:24:54:
36:8f:90:fd:3e:d4:cf:1c:d0:6b:d3:66:4e:a4:68:
50:61:1f:b9:6e:87:0d:d9:f3:58:10:bf:6c:fa:8b:
77:2c:b1:06:eb:6e:a5:94:c0:a9:aa:7a:8c:5c:4b:
a9:ce:26:ec:3b:78:b1:3d:90:55:42:cd:2b:e8:84:
92:9d:db:8d:0a:83:cf:4c:06:6d:54:e1:64:c7:62:
43:05:21:8c:b4:9a:0f:26:49:4d:62:cc:cf:f0:1f:
3d:1a:d9:0e:2f:91:c8:72:8a:1a:d5:c8:36:56:c5:
13:a7:d5:89:ef:9b:70:8f:8d:1d:6e:b0:f5:ca:1c:
0a:4a:5a:67:7e:52:8a:03:cc:d2:a9:17:c0:db:e8:
4b:6f:20:10:c9:50:e5:22:01:6c:ad:bd:7e:89:ff:
9e:68:4d:1f:92:97:af:bf:ec:10:99:e3:c9:76:60:
c2:4a:84:49:7f:ff:ff:36:68:3b:9f:a1:ef:78:18:
6e:c6:b3:76:bd:9d:d7:91:60:c9:2b:ce:e8:26:35:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:BB:E3:BF:3D:64:B6:12:36:24:27:32:14:F3:6E:46:28:92:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e1:fb:02:30:8a:5d:9a:0f:6c:79:08:af:3d:b7:b6:fb:b7:
9e:d9:cb:77:13:d1:2a:8d:c6:a0:23:3a:8d:7a:57:4e:70:35:
b2:60:2e:e3:76:f9:cb:fe:d6:d1:89:9f:1d:19:ba:9d:6c:54:
06:0f:4c:39:70:81:61:74:e7:33:e6:d1:3e:ac:15:ea:1f:1c:
9e:65:a6:7e:d5:73:f0:21:35:ba:3f:60:3e:5f:1a:be:4c:12:
ff:39:32:1e:d6:54:b0:c9:79:bf:8c:3f:49:52:ce:54:31:b7:
37:ae:7f:fe:04:ea:21:45:9d:ea:04:ac:ca:39:55:4d:84:6b:
46:4d:37:d5:bd:1e:12:cd:a1:3c:78:cd:d0:92:fa:b1:5b:36:
bb:a9:d6:1f:12:6b:fe:42:d3:4e:27:39:21:78:d1:b2:bd:58:
21:5f:5a:cb:5a:3b:32:57:76:ae:e9:2d:af:08:f7:80:73:b9:
54:35:0f:fb:dc:e5:b2:83:f3:fd:01:f4:f2:8b:da:9b:b5:7b:
69:b4:39:2c:b4:f8:da:8c:5c:73:96:1f:f3:f6:f1:3f:f5:2b:
fc:c1:21:54:d8:23:48:32:85:0f:a1:77:65:52:a2:7e:ba:11:
37:eb:d8:b5:97:36:7b:4b:a5:e4:a2:2c:ba:18:53:c5:e3:fe:
bd:fd:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:55 2025 by rpki-client