Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46bbd9d0-7710-3ee8-b8ef-f5bd05f51e06.roa
File: 46bbd9d0-7710-3ee8-b8ef-f5bd05f51e06.roa (raw, json)
Hash identifier: Gpr+l7MRiBETyUfpK/Lav5C4avOKP+5E8u3pWRDgHW8=
Subject key identifier: F7:A9:3C:CF:C8:A9:79:47:4E:94:8B:24:C6:C0:62:D4:4F:D9:20:68
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CDE9BF48657B39DB54A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46bbd9d0-7710-3ee8-b8ef-f5bd05f51e06.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:de:9b:f4:86:57:b3:9d:b5:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8b0fa1cf-f7c0-4152-8467-8e656228eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:cd:62:5a:ea:08:1c:3d:41:e8:8d:4a:40:
90:0b:b4:49:d9:71:0c:8b:f9:b2:37:c5:96:39:15:
18:a3:78:f6:c9:72:38:ac:81:34:b7:bd:18:0c:f0:
6c:a9:72:06:ae:7c:c5:b6:b5:0d:b4:57:58:6b:4a:
eb:a7:b3:0d:23:d6:27:bc:9e:99:c4:ac:0b:6d:dd:
4a:4d:f0:97:3a:be:73:c7:43:6c:81:e2:ae:ab:ba:
e4:43:81:7b:32:dc:c1:56:6f:fc:74:28:61:da:12:
6e:43:c8:35:fe:f6:71:4f:76:49:f6:9f:84:68:5a:
c1:06:f5:1e:72:f0:b5:20:70:b5:6f:62:cc:33:fe:
fa:c0:30:25:d3:a6:12:f8:67:28:0a:c3:1e:1b:10:
2e:fe:1d:e0:8e:7f:76:ad:81:5f:c1:46:64:82:58:
be:b5:60:bb:63:99:5f:69:59:3b:ef:4b:b2:aa:71:
a7:9e:75:84:a1:e3:c1:3b:a7:0d:90:ce:b0:1c:80:
a5:b3:88:c7:76:52:be:04:38:37:ad:d5:fd:7f:51:
ad:3a:0b:7e:6a:c0:23:46:7c:d3:8f:fe:67:18:bb:
fa:16:46:e9:16:30:c1:8f:02:f7:29:6d:52:1c:11:
9d:fa:73:3d:07:37:ea:10:43:83:ad:8a:6a:a6:00:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:3C:CF:C8:A9:79:47:4E:94:8B:24:C6:C0:62:D4:4F:D9:20:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46bbd9d0-7710-3ee8-b8ef-f5bd05f51e06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ec:00:c8:65:64:22:11:05:ea:85:33:14:1f:83:4d:c6:b1:
06:36:0b:5c:96:3b:01:b6:d0:47:ee:fc:14:f2:a3:45:c8:96:
b5:c0:e0:03:81:73:40:74:5b:5e:0c:76:6d:79:48:30:f7:2c:
73:ff:92:07:d7:2f:2d:36:d2:54:31:65:e5:96:7f:3f:ca:46:
64:5e:38:e9:84:5a:21:80:99:46:cc:2f:1b:7e:bd:76:c1:35:
88:23:d3:ff:aa:d1:e6:4c:90:bd:ee:4b:1c:61:8c:d5:b3:53:
82:4f:33:78:04:6d:ce:88:74:fa:c9:c8:5f:34:1d:c5:9e:5b:
1f:5b:7c:2c:83:43:32:be:53:a6:ef:5f:ae:f1:fd:01:21:a9:
ca:70:6e:b0:34:64:c8:25:86:c4:bf:0d:89:a2:8f:b0:dc:cd:
d8:80:89:bd:bd:fd:62:b4:fe:3d:4f:9f:a1:33:10:5f:5e:46:
e9:6a:c5:9c:dd:fc:d8:dc:ad:11:31:d5:14:1f:5d:aa:01:c3:
0c:0e:b2:82:e2:be:8d:ae:f5:0b:ae:fb:1e:4f:f2:1b:43:16:
35:f7:f5:b2:ec:ba:e7:e8:77:d3:66:59:d3:b5:8f:a1:87:98:
be:76:d4:10:4f:19:ea:36:6e:95:f0:7f:30:7d:cd:b0:bf:48:
1e:a3:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:09 2025 by rpki-client