Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa
File: 36c93e39-14b8-3624-91c9-ad64c899269f.roa (raw, json)
Hash identifier: v1lC2kXLa0pqKgkdjf3Fjwy5TVV2yNvw7w11RXrGs6A=
Subject key identifier: 26:9D:B6:75:1A:0D:32:1E:A7:4D:C2:E6:72:D8:B5:81:F4:1D:CD:C7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FC7F9B31EF1D69D863627C60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:9b:31:ef:1d:69:d8:63:62:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=dca13a55-2906-432c-95b5-5fc950b54387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:2a:18:c2:33:ee:94:09:87:f8:95:1c:b9:
90:4a:e8:a2:05:42:07:00:ad:cd:5f:db:49:02:72:
43:f3:62:56:80:e2:fd:3f:e6:82:83:e0:0c:8f:56:
f2:03:99:8d:30:6c:44:bf:9b:63:46:bf:ed:86:4c:
30:b1:ed:f7:bf:54:c8:48:c5:6e:5e:63:0a:eb:7c:
35:6b:d3:24:16:a6:09:4e:1e:ff:3d:cc:32:59:57:
7d:6a:c4:92:90:9b:67:ac:42:e9:8b:af:27:45:39:
da:56:b7:31:85:b5:f7:0e:62:53:fb:26:a0:c9:72:
d8:ba:35:57:30:4b:86:de:3b:f3:f8:db:f0:12:2a:
c5:48:ee:2a:04:49:f8:01:56:26:2f:c8:5f:f5:1a:
2f:0d:63:bb:c4:ee:66:be:76:df:9b:47:ed:34:6c:
67:5c:79:87:7f:64:f9:b8:dd:a5:bb:c0:37:38:ec:
4b:94:1d:11:f9:4a:9f:32:f9:a0:c3:2f:ce:0e:c7:
81:4a:ef:a7:e8:67:b3:87:0f:ba:83:cd:f1:40:be:
2d:ca:3e:72:a5:4d:6b:11:21:5b:8f:9d:a5:f7:87:
28:78:10:66:9f:05:f3:bd:83:94:65:06:41:83:a9:
20:f9:b4:68:20:09:66:fe:52:13:18:33:cd:c2:96:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:B6:75:1A:0D:32:1E:A7:4D:C2:E6:72:D8:B5:81:F4:1D:CD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:e2:e6:93:73:17:03:c0:b3:13:5f:a5:46:bf:58:f8:7a:cf:
08:b5:21:9c:e5:94:62:b6:67:1b:20:6e:06:0a:f6:30:28:dd:
fb:7d:ef:4d:c9:0d:dc:4c:c8:6d:be:07:aa:79:d1:68:90:b0:
2f:51:e1:95:35:c2:06:68:df:98:6a:31:42:1e:a1:16:db:15:
4c:ea:91:1d:7c:a3:7d:44:f9:b6:e3:95:52:37:d1:8d:c8:7e:
08:4b:57:df:77:b3:03:92:5e:25:8f:be:b0:cf:1c:3e:5d:b1:
21:fd:eb:09:52:aa:ca:97:d3:3c:d7:d4:1d:67:98:e2:59:46:
3b:72:86:df:ef:60:75:f5:84:87:36:c8:58:74:58:46:90:73:
e5:35:57:e6:e8:f0:f9:62:4e:64:07:0f:8a:a8:73:10:6d:c8:
c8:a8:dc:22:2c:25:ae:81:64:16:8b:e3:2c:76:a8:ae:94:1b:
a8:16:24:d5:07:ef:e0:3e:ae:27:6f:ef:7e:94:21:5d:66:ba:
5d:93:cc:50:fd:21:5e:87:34:0c:c5:bb:56:ed:18:e1:dd:d5:
81:fc:ce:de:05:4a:51:03:db:95:b6:b1:a7:46:26:60:38:9d:
61:e0:4c:11:6c:e6:96:02:7d:94:22:9f:47:e3:bf:68:b6:96:
dd:91:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:12:08 2025 by rpki-client