Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4276e43a-6689-31f0-a1ce-d465f13c1442.roa
File: 4276e43a-6689-31f0-a1ce-d465f13c1442.roa (raw, json)
Hash identifier: dVU4/SPSdRjUZmJi3dvWBqBz73jh3IrZEsT7s+YSOck=
Subject key identifier: CF:6C:78:45:20:56:D8:44:9F:9D:94:DF:66:1B:77:0D:84:BF:DD:47
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E026F8AE181FBE3B30ED00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4276e43a-6689-31f0-a1ce-d465f13c1442.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 31984
IP address blocks: 173.222.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:26:f8:ae:18:1f:be:3b:30:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=315bdde6-bfdc-4808-ba65-9a6c74fdfae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:78:b1:a8:9e:f5:88:21:c6:a8:af:66:b7:
32:b8:2a:7e:1c:ea:24:55:64:48:30:69:9d:dd:22:
95:80:5e:1b:13:c7:f9:34:f5:bf:c6:d7:ac:57:ca:
90:7c:3c:1d:eb:ed:a3:cd:33:d3:0c:25:b9:02:ac:
ef:ad:69:31:55:d6:5c:25:34:24:a0:61:dc:75:30:
ef:30:90:78:42:e9:f2:28:d2:b3:d8:83:bb:bd:e2:
49:ff:8c:70:9d:7b:81:3c:44:dd:11:84:10:db:14:
ea:f6:6b:b8:34:f9:66:66:17:47:54:6c:cf:a2:72:
c6:fd:4f:69:b0:cf:01:e4:e4:2c:90:4e:b2:e8:75:
e3:a3:be:4d:48:58:49:24:72:1e:59:bb:f5:28:8c:
32:59:18:3a:8e:15:87:06:58:3d:e3:b6:fb:76:c5:
37:28:7d:4b:7f:b1:81:34:df:62:86:fe:78:9b:44:
2b:78:a5:65:63:51:73:b2:a2:80:b9:3d:e2:dc:31:
45:a3:18:04:79:0a:cb:96:34:33:74:9b:66:81:8b:
44:4c:55:6b:16:47:2f:88:d0:02:76:ae:24:00:00:
41:48:18:1a:a3:22:80:60:49:47:b7:e0:85:46:51:
ff:82:08:d1:e0:81:fe:57:c4:34:7e:c7:8e:27:1a:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:78:45:20:56:D8:44:9F:9D:94:DF:66:1B:77:0D:84:BF:DD:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4276e43a-6689-31f0-a1ce-d465f13c1442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:8a:df:09:e1:0d:7a:49:cd:41:4b:46:d5:b0:3f:2d:29:81:
ff:38:e0:38:f9:be:9d:20:0c:73:b2:5c:28:84:72:9e:ac:dc:
a1:ba:b5:f6:6d:54:fb:5b:df:12:47:0a:ea:8c:2b:9c:04:6e:
50:27:05:cd:4b:5a:89:fe:12:cd:ae:70:a3:e3:d3:98:31:39:
03:67:b7:93:7a:e4:40:e3:8e:a2:4c:c5:93:96:af:2d:46:89:
37:0a:f3:89:cb:15:c7:ac:20:bb:2e:ba:34:02:72:83:f1:85:
9c:63:8d:b2:00:cd:e4:80:7a:1b:52:98:bd:96:0d:2b:cb:ab:
c9:20:b4:44:31:6f:1c:cb:93:93:39:4a:84:81:a3:95:bd:ee:
dc:90:08:b7:ee:05:98:7b:98:60:2d:b2:92:85:bc:f9:e4:93:
91:2a:76:43:b2:ee:4c:d8:f8:62:eb:1a:f9:78:c1:82:07:0b:
31:c5:31:b8:d8:cf:ea:1b:72:90:93:0d:54:2a:2c:f7:03:8e:
bd:9a:2f:18:e3:03:f8:ee:67:46:44:1e:d1:c4:21:50:7b:8b:
04:08:ea:89:0d:bc:8f:c8:ed:ee:57:5e:26:19:80:0b:35:05:
64:bc:3b:00:e7:df:64:81:72:b1:b5:87:d8:bd:c6:3e:6d:a6:
d7:09:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:45 2025 by rpki-client