Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa
File: 455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa (raw, json)
Hash identifier: pUDgH15v1JhsS0uBs3qydOqyghJh/HJ7EBE4BS5KDgw=
Subject key identifier: 54:0A:8F:7B:18:AC:26:8F:5B:E0:7D:1C:29:BB:25:A6:C6:11:60:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487755DD856F20FFF35D9E7B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 63949
IP address blocks: 172.233.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:dd:85:6f:20:ff:f3:5d:9e:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=3edf096f-db87-43a0-859b-c6fd637d59b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:d8:48:00:4b:41:09:90:5c:d1:80:67:bd:
ab:9c:0e:b1:c0:53:8f:de:8e:2f:8d:b9:49:32:14:
ce:cf:25:1d:c4:ec:63:e6:ea:09:5f:5e:ed:d8:13:
64:40:a8:f3:8a:16:6e:64:4f:e5:ab:95:7e:c7:ba:
6a:15:c2:fd:a4:81:e2:73:09:8e:cf:1f:ec:41:04:
a7:a5:6d:9a:35:05:a0:2e:cb:e0:70:33:5e:c5:ba:
fb:02:40:e1:4f:e6:ce:ee:e4:cf:c3:17:53:5b:da:
ee:9c:47:bb:88:de:cc:c4:27:52:61:ca:0c:f4:aa:
1d:e5:97:06:36:86:8c:ec:82:c7:48:0a:db:3f:a1:
f5:91:c6:46:2e:7f:f3:cb:e2:fc:b3:8d:9d:b7:9e:
de:33:fb:34:ac:0e:6f:3c:ec:94:cc:24:c0:fc:c6:
b1:1c:df:f0:3e:24:95:35:fa:1e:33:8a:75:df:ac:
db:87:d8:5c:20:dd:1b:92:55:eb:39:d3:94:c6:85:
00:40:1d:f6:b1:0e:d1:3e:1a:39:8d:43:95:91:11:
85:1b:73:96:5a:3d:26:92:28:51:1e:7d:29:97:e8:
f7:a6:8d:5e:bb:f3:f2:b4:bc:97:f1:f6:47:73:f0:
ab:70:89:9c:0c:f0:d7:3b:fa:3d:b8:6f:0e:b9:33:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:8F:7B:18:AC:26:8F:5B:E0:7D:1C:29:BB:25:A6:C6:11:60:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/455e05c3-1c6e-3797-a5b8-7cec6b18b717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.233.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:0c:d4:be:ce:0d:bd:7d:3d:ea:72:81:b0:6a:0a:30:7b:d0:
c1:b3:65:d3:2d:5b:70:99:bd:66:00:6d:4c:cc:20:e2:53:f1:
ee:9f:b3:76:42:0a:31:89:08:ea:c6:6b:d5:3b:3d:b7:28:c0:
49:62:99:81:0a:b0:35:ac:c8:81:ca:40:12:ad:cd:42:31:03:
ff:47:72:08:8b:5a:a8:a9:a2:c7:09:c1:be:98:31:4f:20:8b:
9c:49:e7:18:94:c8:06:14:95:1f:5e:86:ea:03:2a:8b:66:df:
00:7f:e6:2f:81:78:db:59:c9:00:d3:59:f9:4f:5e:70:59:5c:
62:47:60:ac:4d:d9:01:cd:03:df:e1:d2:a4:39:c7:dc:3a:80:
d0:25:54:5f:1c:8b:8f:37:f3:5b:ac:c7:86:5e:03:9d:f3:be:
0b:57:11:9d:9b:bc:da:9d:48:1e:e5:04:c5:51:07:c8:4a:e9:
ff:30:fe:a8:8e:60:e2:c3:dd:e4:3f:74:8d:85:42:90:5f:84:
ce:b2:d5:a9:ba:71:c5:59:d0:c8:a3:43:66:d2:4c:c0:4d:66:
e6:42:7b:93:5c:62:bd:f0:de:9d:4b:71:6e:33:a0:e2:70:27:
3b:70:17:0f:6c:d0:0f:64:0f:95:bf:08:3d:3c:5e:83:7f:1c:
ca:31:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:31 2025 by rpki-client