Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa
File: 4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa (raw, json)
Hash identifier: lm1OAykkdhI6amguheceYlqbR2nB0gqvJlf7NdFjRqE=
Subject key identifier: 1D:B3:13:DE:24:42:88:FF:AD:44:A1:55:32:39:08:4A:E9:5E:C2:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9C1CEEA4B408716BE900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:1c:ee:a4:b4:08:71:6b:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=960ab94c-c3c9-42ca-84fc-8def82663ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:8a:6d:20:e9:d1:4b:d8:23:b7:f8:5d:89:
d5:e7:a5:65:78:8d:72:7e:5c:12:f5:68:54:63:3a:
ae:f9:89:5a:6b:86:00:99:a9:37:24:85:8e:b7:1d:
58:bb:e6:f5:17:71:74:42:b5:42:cb:7f:62:01:98:
69:19:69:b0:fb:9b:e7:f5:af:d0:72:32:ec:3e:f3:
ae:53:36:05:76:ce:b3:ac:a6:56:0c:d6:a8:b4:71:
78:9a:6c:b6:4a:45:c5:8f:7e:15:34:95:c8:d1:bd:
20:c7:2f:8b:b0:30:53:02:af:f3:70:13:bf:ab:ad:
75:00:7b:6b:77:6b:01:4c:11:41:6b:32:07:9b:30:
50:44:9f:d9:17:3f:89:f0:7f:37:d9:0c:59:b3:a2:
19:8d:0b:d6:07:7e:91:a5:60:b4:10:89:1c:51:e0:
db:02:44:97:3c:51:01:65:48:a4:41:d0:57:68:fa:
1d:8a:4a:7f:af:af:b0:d0:aa:c3:ff:45:4d:5d:9e:
2d:04:7a:be:a0:6a:da:fd:a5:e1:77:b5:ca:70:aa:
c8:50:6f:a0:48:67:3e:b5:25:4f:87:05:3e:c4:a6:
63:8c:13:9f:f3:7f:dd:f6:8b:28:97:86:dd:e4:68:
d7:a7:2d:5e:30:ab:df:8c:e9:4e:44:4d:73:0e:0a:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:13:DE:24:42:88:FF:AD:44:A1:55:32:39:08:4A:E9:5E:C2:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ee:54:2c:bd:4b:43:94:ef:c7:c1:cc:96:3a:e0:09:6b:36:
d3:ad:c4:84:50:f3:88:aa:00:90:45:02:4c:35:f9:5b:84:bb:
12:6f:52:f3:d9:6d:14:69:76:f5:c7:87:dd:4d:8b:b9:97:fe:
55:e3:9a:58:e9:a1:5b:ce:bf:e0:0b:46:b7:9b:41:04:04:4d:
71:0f:cf:ee:cf:a2:d7:8f:6c:90:1f:dc:91:ea:1f:1b:ab:1b:
45:46:aa:c3:cb:70:6d:d6:4b:82:52:3f:4c:6b:ad:00:51:ce:
cf:e2:68:cd:57:cd:f5:94:7d:3a:3a:8d:2c:c5:95:e3:05:75:
37:11:c9:c3:6c:d5:8b:02:82:75:c7:b5:be:26:62:49:6a:34:
d0:44:31:85:e1:a6:d2:fb:31:96:26:82:24:4d:d6:2d:2b:9b:
cf:15:60:dd:7d:ac:66:f5:9d:2d:dc:c7:cc:1a:89:a9:5e:b9:
c9:77:33:6e:38:3c:24:0a:75:07:c9:93:ce:56:88:75:7d:8e:
c0:ea:2b:b7:53:ac:3c:40:13:60:6b:60:ac:a5:59:06:92:40:
30:88:a8:26:8f:de:00:7a:c1:d6:88:70:37:8c:6d:4c:29:a5:
b7:1e:0f:86:70:85:6b:db:6b:50:b1:07:1b:d4:8b:96:2a:df:
43:bb:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:08 2025 by rpki-client