Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ce0059-f6c5-3410-af44-95bf9fd89f72.roa
File: 45ce0059-f6c5-3410-af44-95bf9fd89f72.roa (raw, json)
Hash identifier: 2JkLW2F6PZCS4feNi0nLiIG+TZPdxFQuBLcPdbYDNEg=
Subject key identifier: 5C:96:4C:17:2F:96:54:C4:65:77:95:86:29:C9:F3:BD:34:DC:FA:2A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584815A00250938B8C9719D1A600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ce0059-f6c5-3410-af44-95bf9fd89f72.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:a0:02:50:93:8b:8c:97:19:d1:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=27609532-1101-4d5c-a0d2-8ec910b6f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:f5:b7:d5:6c:7a:39:aa:c7:1b:0d:b3:6a:
7c:4f:3d:be:95:61:c4:e9:29:02:dc:14:60:06:79:
8d:4e:83:67:32:7a:a7:72:70:49:a9:44:03:32:fe:
a2:6b:a5:a1:ca:14:10:fc:c7:57:17:27:0d:f4:b4:
b8:ad:4c:ba:bb:7f:ad:23:01:29:b5:76:a3:73:8f:
d1:c8:1e:fa:3f:ab:d5:d2:ee:18:74:05:82:89:6b:
04:39:a2:1b:ab:32:33:6a:ad:c7:61:39:ab:63:28:
e0:f7:f5:fa:e2:68:c4:ae:7a:61:9c:08:fd:3b:1f:
56:c7:20:1a:a5:6d:b9:bf:e6:ab:bc:14:4d:89:fb:
91:47:ea:6f:f3:c6:92:c2:87:76:2b:5d:3b:b3:00:
4a:17:5d:44:ca:00:77:ab:37:25:c8:a8:63:3d:fe:
c7:33:ee:00:c1:76:81:7b:f5:70:7a:d5:11:53:bc:
a5:a1:97:f3:8e:ab:a8:3e:4b:62:3f:30:f2:1a:76:
05:6d:fa:7a:53:c1:60:9b:6a:5a:b5:3d:8c:19:86:
b2:9d:db:c8:86:69:03:a0:96:cc:93:25:6b:49:c0:
13:fe:2d:37:36:87:a0:61:72:a3:09:9f:a2:8b:a8:
77:34:84:42:fc:49:29:34:bf:17:c9:a3:ba:37:6f:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:4C:17:2F:96:54:C4:65:77:95:86:29:C9:F3:BD:34:DC:FA:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45ce0059-f6c5-3410-af44-95bf9fd89f72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:e8:0f:50:ed:3f:30:fd:e1:61:ef:57:2f:ee:b0:b6:de:f2:
d0:aa:3c:69:5a:b9:8b:d8:8b:77:7e:c2:12:45:b7:d3:2a:95:
af:bd:bb:f9:36:0b:eb:e9:67:d0:b8:da:a3:8a:b5:c0:20:06:
5a:d6:af:f9:9e:30:9a:f9:14:0e:99:a1:fa:71:b9:e1:90:98:
bf:3c:14:18:8a:bb:7d:31:87:21:d8:7d:f5:a1:39:50:f9:4a:
b8:cb:d2:9a:69:28:38:03:f4:c0:a2:bf:35:86:8b:d6:e1:9d:
ab:29:c8:e5:c4:e6:72:3c:f1:88:2e:a3:eb:d3:ed:31:4b:2d:
30:be:87:db:37:bf:0f:e9:ca:ec:57:8a:48:ad:24:86:02:8c:
a3:39:89:29:90:21:7f:69:d4:24:fa:92:00:d3:67:a0:b8:59:
ee:85:a4:0b:9a:a3:54:9a:40:06:26:30:38:b3:b4:4d:ea:d5:
e2:93:72:84:3e:cc:26:c7:59:45:9a:42:a9:c9:7d:ff:3f:ef:
f7:90:cb:83:51:40:8f:f7:f2:a3:5a:82:93:f7:c7:a3:81:fe:
b6:c6:29:37:b8:98:50:46:cc:69:4c:04:31:ad:06:ab:c9:ce:
de:45:d9:eb:65:0b:2d:59:db:59:b4:5f:d8:37:91:7d:b3:09:
a4:74:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:46 2025 by rpki-client