Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3be053fc-3e04-3b4c-a1e8-f05405471606.roa
File: 3be053fc-3e04-3b4c-a1e8-f05405471606.roa (raw, json)
Hash identifier: SRW4cDlIhgZD7iuUhiiNb4XH7Q/prc8LGCFEJb0mbhs=
Subject key identifier: 63:AD:2B:04:83:15:BF:C0:CC:D4:81:03:8D:FE:85:7A:90:03:6D:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51F32CBE6D54DF5DBFE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3be053fc-3e04-3b4c-a1e8-f05405471606.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1f:32:cb:e6:d5:4d:f5:db:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=6d4a8074-a218-4428-84aa-71bf30cc8e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:00:1b:5b:32:62:b9:d5:50:4d:32:16:d4:
30:7b:30:a6:f8:62:27:bf:56:8a:0f:8e:1d:0b:4b:
4c:05:86:bb:9a:17:76:1c:52:8f:62:bb:4a:f0:43:
01:00:25:d3:83:c7:d4:ad:e1:2d:cc:a6:be:be:e8:
ff:3b:fc:02:53:da:94:15:e9:bf:4e:ba:f3:1a:97:
0b:c9:95:68:1e:66:61:6e:17:c0:4a:10:78:33:f5:
31:81:0b:96:81:e0:85:95:90:e7:b2:b7:79:f9:d1:
d6:90:6c:f0:68:0f:74:4b:f3:73:87:57:be:78:81:
e2:40:3d:d1:97:a1:92:80:31:01:c2:21:ae:be:df:
6b:c7:00:98:2b:a9:b4:99:c0:2f:1e:fb:b2:ac:f0:
9b:a3:61:92:de:9f:6d:8c:56:8a:37:2f:9c:8e:2b:
b9:51:61:42:11:be:b1:24:6f:e2:f5:cc:5b:57:f7:
7f:f2:cc:9d:b7:6f:92:b2:ea:93:1f:f3:b9:0f:6c:
e4:b4:85:7c:ef:a9:9e:ea:2c:d8:b3:87:b5:6a:99:
d3:3f:9a:ac:3b:72:37:23:81:01:e7:f7:60:01:a1:
30:36:01:db:c5:9d:f6:ac:cb:59:e5:e6:79:c0:7e:
1c:39:9a:b3:91:06:d6:58:7a:53:9e:59:fd:92:dd:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:2B:04:83:15:BF:C0:CC:D4:81:03:8D:FE:85:7A:90:03:6D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3be053fc-3e04-3b4c-a1e8-f05405471606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4c:8b:e9:8a:0d:06:0a:60:e4:88:3a:19:12:cb:06:95:2c:
92:42:b1:0a:19:29:50:04:ed:9b:30:73:12:41:ab:ff:51:2d:
ba:01:30:89:86:ee:c7:63:6d:7e:eb:54:e6:17:59:3a:96:98:
71:94:01:8f:b0:7a:8f:c5:de:87:42:a7:b0:db:13:ed:a1:27:
70:fa:5f:a5:70:f8:78:8d:ed:e5:99:dd:fe:a8:18:1a:a4:80:
9b:7a:46:22:aa:41:4c:81:8f:fa:b9:9b:61:9f:50:7d:c4:1e:
9e:f9:eb:28:b1:9f:54:05:48:78:6e:bd:8d:b5:ba:84:82:7f:
33:29:fd:84:5f:c8:04:ae:eb:2c:cc:58:68:11:ae:e9:fc:5f:
8d:cd:e3:1d:80:0e:a9:48:76:55:3e:54:1a:ec:bf:66:2d:37:
5b:a2:7d:94:4c:c7:6a:aa:c1:83:4a:bf:31:72:f0:9f:79:ce:
f6:f3:b1:dd:68:65:eb:23:76:b8:26:3a:75:32:b5:ba:c3:ad:
cd:18:a6:4c:bb:a7:3c:1f:66:a5:79:17:41:d6:bb:e9:ac:22:
b5:75:ca:3f:66:06:ae:a7:ca:bb:18:f3:30:36:20:30:cb:3d:
d8:d7:e3:b7:87:3e:c4:c1:c8:66:18:92:65:43:56:a3:d7:f7:
99:8b:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:21 2025 by rpki-client