Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa
File: 396448c4-ef70-362b-8801-46eb4b67c187.roa (raw, json)
Hash identifier: iCWiPDdavuyaNFkwVT1zThpZloJw/Z8qeioJPftNQEM=
Subject key identifier: F7:A6:AD:77:11:FF:6F:21:D7:31:35:09:E1:41:9F:82:BF:5C:4D:17
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B707FCC9611B28DC14980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:70:7f:cc:96:11:b2:8d:c1:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=1f4189e9-2fdf-440c-b399-6e0b2320f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:04:ac:1c:13:fe:2f:2f:24:ae:d4:f4:68:
88:a0:b9:cb:f4:99:5c:60:60:dc:c9:20:0f:9c:c5:
c5:6e:3e:0d:22:4c:96:f4:d0:4c:7e:b5:69:7d:2f:
5d:18:c3:23:dc:53:d9:28:b0:c8:fb:db:0c:60:b4:
03:b3:33:d1:88:c2:a6:41:34:d7:af:f3:fe:61:6b:
77:fb:bf:62:9a:df:af:57:72:dd:db:9a:ba:00:03:
37:65:bc:32:63:7e:0e:12:dc:6a:87:98:88:31:b0:
f2:48:52:79:ca:d2:f4:5c:6d:5d:d1:9a:0e:5c:f0:
7d:da:11:02:b2:0f:8b:2a:a0:71:8e:75:0e:d4:f8:
a5:88:0d:ae:69:67:0f:b3:1c:11:a2:f6:2e:8f:28:
8d:91:12:44:2e:0d:18:14:3e:db:c8:d3:44:ce:8d:
90:30:a9:77:ff:d0:78:02:77:bb:f6:93:d8:80:8a:
b9:1f:9e:81:dd:ff:59:3e:1e:fd:16:17:e7:6a:30:
d6:18:e4:36:f2:c9:81:1b:e3:1c:99:3d:22:b2:c4:
f5:6c:a9:50:b6:5f:a5:bb:a6:d5:c4:24:cc:de:39:
c5:66:69:b8:71:79:d3:18:0e:60:e7:19:49:a7:5c:
ec:c5:d3:49:6c:c5:7b:b8:ca:3c:d5:1a:33:c7:ef:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:AD:77:11:FF:6F:21:D7:31:35:09:E1:41:9F:82:BF:5C:4D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:fc:a4:ca:98:15:a9:e6:e7:69:b9:18:eb:a6:86:e1:d2:8b:
8f:74:34:62:e3:95:a5:73:5e:88:1f:b5:58:d6:fd:e0:59:eb:
78:85:64:5e:f2:bf:36:ad:20:4c:86:be:68:be:27:92:7e:48:
54:ea:99:4a:4a:b2:93:dc:67:48:b3:bd:b3:34:28:fb:e9:d2:
09:b6:06:9e:7a:3a:7a:10:53:0f:e7:81:4b:e9:1d:82:b2:51:
86:7a:03:ff:88:36:0a:d5:5a:34:5c:a8:8a:56:63:61:67:f5:
7c:df:08:33:5a:61:6b:3f:59:af:36:f0:fa:e1:6d:10:9c:cd:
97:d4:7a:e8:71:0e:bd:67:d2:96:8b:e6:d8:7c:5a:31:53:c1:
67:3d:95:e2:f4:bd:a5:de:12:b2:d5:5c:c8:6e:b9:10:fd:f4:
2e:fd:b7:6c:ff:66:4e:a8:45:82:33:b4:77:4b:85:62:08:14:
a8:e9:f2:ba:de:79:5f:7f:9c:ce:db:e7:87:0c:d0:79:b9:fa:
f2:7f:7b:5d:d7:e3:04:36:7a:78:f4:af:47:ee:55:61:ac:48:
5d:92:1a:a1:fe:10:db:08:8d:eb:c0:e0:82:aa:ab:51:fa:c7:
45:2c:70:a7:a8:0e:7c:5e:8e:f4:24:fa:e5:a3:5b:c3:8f:91:
49:27:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:56:40 2025 by rpki-client