Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfcc967-358b-33bb-8ef7-b8a52bdecd2f.roa
File: 3dfcc967-358b-33bb-8ef7-b8a52bdecd2f.roa (raw, json)
Hash identifier: 5RWVqtP3GRvq9KYl81vNdTr0VD6xxHXBs2W+zWxRq4Q=
Subject key identifier: DC:87:02:3C:57:4E:B3:71:2F:68:CC:A2:BA:F4:C5:4A:D9:55:C2:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A98601F3E5F4CB36B1900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfcc967-358b-33bb-8ef7-b8a52bdecd2f.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.224.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:98:60:1f:3e:5f:4c:b3:6b:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=ab15dc8e-e15c-4555-b789-4cecd58fd551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:2d:57:62:47:d4:8b:11:f2:80:1a:9e:d1:
2d:3c:d6:10:da:05:61:59:6f:9d:75:7e:09:9d:1a:
03:9e:25:b5:ba:67:fc:f7:9e:0a:69:73:3a:d4:7f:
67:26:0a:62:31:14:10:b3:2b:ba:ca:73:f9:c6:80:
bc:86:7e:41:cc:4e:0a:e6:de:b4:b6:af:5c:02:31:
30:c5:f2:c3:a4:86:f1:c9:af:d1:b1:18:30:55:6f:
1f:ce:7a:05:25:8e:7e:40:3c:4a:d0:a8:4d:a5:1b:
9c:3e:f8:9f:2b:68:da:6a:0d:6f:76:b4:fe:5b:d4:
13:61:75:73:1d:7b:3b:22:d1:0e:42:ce:76:49:dd:
d8:76:70:39:b4:c1:cf:d6:fb:07:0a:76:ac:25:01:
4d:d7:ee:8a:8e:c4:97:e6:9c:9c:50:5f:bd:61:07:
83:42:f7:04:b8:bc:db:d6:66:dc:61:39:7e:5a:06:
94:27:ae:80:a3:e8:5d:43:c9:2a:fe:69:65:f6:ea:
4a:cf:f4:3d:13:f2:69:f0:3b:82:27:a3:3c:5b:28:
9f:a8:8f:2a:40:d9:9a:c9:89:e0:9c:fd:64:c5:30:
8b:89:14:1d:a4:9e:19:c2:90:d0:27:cc:e8:d6:f5:
a5:af:c9:54:63:65:d7:39:dc:67:13:86:03:ed:37:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:02:3C:57:4E:B3:71:2F:68:CC:A2:BA:F4:C5:4A:D9:55:C2:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfcc967-358b-33bb-8ef7-b8a52bdecd2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:8a:d6:df:33:7e:d1:f5:ce:d7:a7:5b:20:29:56:ab:94:8d:
e5:79:b3:3a:c5:17:23:e7:75:97:d4:75:af:35:fd:66:1e:e5:
d6:4f:df:59:d3:b5:5b:42:fc:6b:26:90:d5:45:30:64:5b:e6:
56:6e:b8:10:6d:ba:41:df:9d:58:c0:4e:97:45:17:d6:47:16:
33:1a:ea:b2:3c:26:d1:b1:9d:ef:13:6b:93:09:ba:a8:7b:c0:
f0:74:02:b4:33:b7:d0:ed:e1:06:2f:c5:21:a2:32:de:ff:7f:
89:e0:be:be:e7:7c:ad:ef:70:5e:78:97:26:be:68:87:6d:4d:
56:ff:51:14:24:3f:48:6f:e7:74:35:3f:1e:69:24:45:a1:be:
1d:4b:99:5c:37:a1:1a:1e:19:e3:ef:a9:79:0c:28:12:63:cf:
b9:6b:48:f4:7c:0e:6a:08:00:ca:6b:a9:4b:7e:fb:cb:1b:73:
40:c5:0d:5a:dd:ca:79:bf:b6:08:9b:dc:7b:d1:7e:1e:bf:ec:
79:b0:c0:5c:9a:a2:63:42:69:4b:8d:1b:a9:15:3f:01:c3:7e:
2a:72:29:78:9e:a3:0e:e4:e4:9b:3f:50:14:27:23:c6:aa:c9:
19:57:32:1b:fc:26:9a:ec:f8:67:cf:11:6b:78:98:7c:92:2f:
1c:80:79:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:13 2025 by rpki-client