Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa
File: 3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa (raw, json)
Hash identifier: AcXXFGnLIHhOqlr92KSumcfH/tWypLmidyZKUs0if3s=
Subject key identifier: D1:11:D8:24:A1:15:8F:FC:2A:3F:95:CA:DA:30:28:B3:3E:36:64:15
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9C36F80F631DC8C42780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:36:f8:0f:63:1d:c8:c4:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=69adf209-dd78-473f-bbb3-17331ec82706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:13:b9:8d:53:7d:29:aa:a9:cd:b7:9e:0a:
35:f6:f9:10:9a:19:7b:04:45:08:6e:2e:d2:89:26:
76:40:e3:c3:08:55:fb:9b:f0:a4:fd:7f:f5:3b:5a:
f3:b8:0b:73:52:33:df:91:5d:8f:05:fb:68:27:64:
0c:6f:09:2a:9b:aa:d5:d6:e4:cd:cf:eb:e2:61:d1:
87:66:9f:76:e8:61:2b:b3:d9:17:b9:ac:ad:e8:e4:
b5:d0:7a:78:79:d5:34:0e:38:23:15:43:36:29:19:
c5:be:cc:3c:da:42:9a:62:b8:f3:9f:75:c6:d2:35:
86:05:73:c5:dc:8c:da:03:53:a2:cb:1a:fc:d9:61:
49:39:1d:19:c5:c2:c4:99:a0:ca:74:4d:37:3f:42:
4c:f5:08:aa:e0:c8:36:33:63:77:a0:95:b0:31:70:
98:82:9e:11:af:e3:87:e8:39:52:02:9e:ba:dc:74:
0b:3d:98:a5:a9:09:b7:bd:11:ca:db:5c:fb:77:1e:
3d:cf:14:96:b0:d2:85:29:96:6d:db:44:67:8f:66:
7f:77:38:89:1d:96:e9:56:11:3a:f8:1f:99:1d:29:
1c:0f:d4:d7:4a:e4:cc:48:db:38:f6:5c:8d:6f:4f:
14:90:77:ab:e5:a5:88:0d:5e:8f:95:67:4a:56:e1:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:D8:24:A1:15:8F:FC:2A:3F:95:CA:DA:30:28:B3:3E:36:64:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9e:01:dc:be:3e:55:10:a1:a3:6a:e6:29:71:41:5b:f4:90:
f1:31:8b:b7:f0:81:bc:56:64:99:80:55:cc:86:60:60:ae:14:
61:47:22:ae:f3:d9:97:04:91:d1:02:e8:9f:65:a9:e5:5d:b4:
cc:6b:b9:31:24:a3:f3:e4:e5:18:53:cf:e8:e0:ca:8d:60:df:
c2:7d:fd:86:3e:f8:77:3b:f8:b9:2c:0f:6c:55:74:ab:9b:a4:
4c:ed:e6:da:65:61:05:e3:b1:6a:53:e8:4b:c0:00:db:80:e6:
4e:62:1a:01:28:5c:bf:19:27:37:fc:b0:ce:17:cd:21:13:79:
d4:e2:8f:e4:17:0a:4f:b1:a6:6b:78:6a:ac:e0:87:08:0f:16:
31:11:b3:1a:e8:94:1c:da:8c:9e:03:f7:4a:01:2f:c5:42:76:
c3:db:da:c5:0d:a3:07:ac:b2:ef:b8:3b:ec:84:10:56:17:4f:
70:c3:b9:40:77:17:09:c4:2e:d3:8d:8f:34:19:ae:77:db:53:
6a:03:44:b2:49:7e:77:0a:8d:ef:e4:ea:60:17:2a:33:82:87:
ea:74:d9:79:c5:b0:42:10:5c:65:3a:1a:3c:9b:01:3d:10:dc:
ba:a5:93:b5:29:4b:c1:65:0c:6c:08:c4:92:64:7d:fa:96:e1:
ec:87:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:37 2025 by rpki-client