Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa
File: 3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa (raw, json)
Hash identifier: FaioZZDtgcuSnlxEW9Nz6bKBivbK+FyMnZ7kA342cD4=
Subject key identifier: 16:A7:81:23:74:C1:37:99:F3:A6:CD:5C:CA:A5:09:54:DA:88:9C:3C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480215102435312FEA56CD0130
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:10:24:35:31:2f:ea:56:cd:01:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=b32b3278-6b9e-4fa7-8827-592f1d944ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:57:f6:d2:c1:1f:e0:f2:6c:92:6b:da:cc:
e1:7a:55:4a:30:e7:a1:f6:e8:94:8b:96:19:98:53:
5e:e7:46:e4:f1:e7:eb:36:f3:28:7f:d8:72:b0:a4:
dd:b1:6f:0b:35:36:80:b7:24:6e:d6:d6:33:04:c7:
c3:9d:7c:93:ed:d5:61:c9:06:c1:a1:89:1c:9a:96:
54:33:a1:0f:09:4a:f1:15:3a:5c:d1:fe:b0:29:dd:
1b:53:de:cf:ef:b5:b1:6e:5e:ab:15:60:b2:51:94:
b4:ea:b1:4d:28:3e:6e:49:86:12:50:ae:80:f2:26:
d2:23:cb:08:ed:2d:34:cd:f2:32:98:54:81:a8:5c:
23:35:fb:98:3d:cb:5c:58:18:99:3f:a0:f0:46:45:
c7:ef:4d:80:b2:4c:b6:c2:86:6f:f1:d9:82:54:2b:
54:52:11:18:48:b8:5f:a7:8b:a7:fa:e8:a6:f7:46:
34:e5:ec:ec:61:d7:65:6c:23:c7:b4:de:40:c5:f3:
4c:a5:07:a6:6d:af:34:dd:f9:c1:17:2f:2b:c0:42:
36:2d:40:0b:4a:c2:78:71:e4:8b:6c:22:9c:8a:f8:
b3:8d:c4:52:f0:8e:51:96:64:f2:70:b3:69:90:f2:
8b:d5:2b:b5:5b:38:6b:c2:81:28:d1:6e:6e:bd:16:
3f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:81:23:74:C1:37:99:F3:A6:CD:5C:CA:A5:09:54:DA:88:9C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:73:75:ef:cb:84:f6:cb:ab:db:ba:7c:aa:cf:d1:7e:57:bb:
0a:d3:35:54:e2:9d:2f:08:21:6e:9e:70:01:8c:b7:51:db:fa:
23:b3:95:04:43:9b:14:84:55:24:09:51:4b:ba:c2:5d:f1:cf:
d9:21:5a:f4:ef:a5:3c:18:fe:bb:30:4e:c4:b5:4a:c1:de:86:
8c:eb:88:36:d3:22:42:00:d8:09:88:21:4f:dd:a9:4e:a5:a6:
84:9c:1c:6b:7c:39:da:00:12:17:43:d5:ba:42:f0:5a:9d:37:
5f:75:66:9b:23:38:b3:8a:47:a1:51:85:73:a0:a4:5c:d5:95:
0f:b5:a2:b2:6e:9d:b0:ed:6a:23:b3:66:22:39:5d:b9:e5:97:
ed:4a:c4:40:85:44:08:73:fe:cf:23:5c:a1:76:ba:ae:87:0d:
8d:a1:cb:47:f8:6c:3b:e5:f8:2a:25:83:8e:89:17:6c:42:c7:
21:8a:44:57:9b:21:4e:0c:47:dd:f0:4e:3d:c7:dd:95:20:10:
ee:57:96:c4:f1:f5:10:98:82:ff:d3:d9:5f:36:61:8f:05:35:
0c:e9:ac:ae:fa:b7:06:4a:98:99:9e:84:3b:c0:9e:c9:15:89:
40:c0:e9:4b:f9:15:77:f7:09:18:ef:6d:8e:35:09:e5:0d:3f:
78:bc:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:47 2025 by rpki-client