Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
File: 3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa (raw, json)
Hash identifier: D1UzmsHqUU2Em+7CjahJnMw6yRFdqCa9ZoOSUNetGFk=
Subject key identifier: 6B:D6:9A:AA:26:FB:AC:EC:09:53:28:B2:47:18:62:D1:94:E2:1C:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B6FD852E5456FD35B7E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6f:d8:52:e5:45:6f:d3:5b:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=9e989c6c-1a85-4d4f-a6d7-df855b792d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:41:a9:50:b7:3d:f0:f0:a5:13:91:eb:7f:
0e:6c:62:a2:d3:61:f5:ea:ba:cc:ff:5a:d5:93:a4:
20:1f:71:26:0a:19:9b:18:06:e6:9e:6e:05:0c:c2:
e4:22:c8:26:58:57:b6:a3:3e:b1:2f:c4:fe:18:0b:
27:ba:e9:03:fc:af:49:1b:21:8d:e4:fc:b3:ea:e2:
a3:b8:35:5e:2f:a1:01:ea:6f:22:8a:33:76:ec:b3:
01:74:4c:46:06:47:db:1a:fc:64:43:2f:35:63:f3:
5e:9a:fc:a2:70:85:06:f0:cd:a1:f0:61:4b:f1:41:
fe:d0:ed:81:54:a6:6b:60:38:fc:19:f1:19:89:f5:
1d:72:4f:9c:d5:47:26:dd:85:ca:f1:33:27:ba:bd:
c8:a3:ee:9c:97:ff:58:dd:1c:ff:07:1a:83:23:49:
f4:92:c3:bc:a0:cc:11:32:41:7d:48:03:fa:ea:c9:
b8:40:1a:e4:8e:7e:36:a3:47:c2:f3:75:65:4b:06:
99:67:62:6f:2f:30:a9:82:6c:c8:a8:a6:62:d1:bb:
a9:80:8c:0a:0e:c9:c3:52:57:97:16:a4:75:ca:2d:
56:d3:a3:c4:74:56:fc:10:ab:a9:68:d1:bb:ee:11:
6d:ac:e9:dc:d1:0a:f9:d0:c9:2c:1f:fd:78:37:fc:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:9A:AA:26:FB:AC:EC:09:53:28:B2:47:18:62:D1:94:E2:1C:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:27:a5:4d:09:ea:d8:36:e3:b5:47:7b:09:ab:61:47:e0:b2:
91:42:5a:d1:5d:30:0d:c8:cd:65:01:0e:37:45:1a:e6:69:d0:
be:e3:90:ae:a3:5a:dc:e3:37:2f:db:18:14:cd:a7:2e:25:a6:
b5:19:c2:cc:d7:3b:53:f0:66:d0:1a:61:42:22:3f:1c:09:3a:
e9:6b:58:32:e7:b3:09:3f:8f:ee:1c:05:c6:fb:82:dc:58:54:
c7:36:45:0f:b0:1f:6f:4f:ee:88:0c:a3:1e:b9:11:f4:9d:ce:
d9:d9:18:a3:6f:c0:67:6c:6c:73:59:b0:bc:9a:34:43:07:d8:
d6:b6:de:14:71:64:dd:38:5a:39:b2:ea:66:a4:9a:db:a5:8c:
5d:5b:3f:5f:e2:51:15:90:15:84:2e:17:e0:f9:96:bf:82:32:
bb:8b:17:65:b8:86:fc:d1:e1:19:e3:3d:77:1e:a8:79:c6:e6:
3a:d7:86:7d:3a:cd:bd:d8:7f:56:7c:ad:a7:b6:7e:85:82:28:
c0:b0:05:a4:54:1f:8e:6f:63:7f:b7:99:f0:dd:30:a4:53:c6:
ef:0d:6d:90:4f:75:df:11:c9:26:03:b6:49:78:27:58:a7:80:
0c:2f:aa:f2:b8:0e:49:dd:d9:5e:5e:1d:31:bd:44:3b:c2:78:
c4:43:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:21 2025 by rpki-client