Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
File: 4b814478-696b-3695-a4b5-c0625b9e552b.roa (raw, json)
Hash identifier: U8rd2t+OqB2FLRYjFyV6+1p4YAqqSLBqUcR2cMCx3UU=
Subject key identifier: 4C:EF:50:58:B4:85:06:95:0D:08:08:8C:26:0B:BC:AE:39:A1:81:FB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FC7F9BA0905B8E0785DD2D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:9b:a0:90:5b:8e:07:85:dd:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=04065835-9124-4baa-994f-3fe1be833d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:92:72:7d:ca:70:1f:06:b6:0e:42:5e:9a:00:
e5:46:5d:fb:b3:70:be:55:4e:22:f7:74:46:dc:57:
e3:ff:98:91:0d:4d:43:64:41:3c:c1:ab:b2:cb:0b:
ac:2e:1b:08:e4:bc:e8:22:df:46:29:da:15:b2:b5:
9e:2c:f6:5c:aa:31:3d:cb:21:51:3c:82:a3:fa:ce:
a4:6b:2c:f2:9e:da:8f:be:5a:d7:7c:df:74:b5:06:
f7:b8:56:6f:09:b8:35:c8:cc:b3:3b:cc:24:ce:79:
1c:fa:2f:94:65:79:bb:e6:6f:d9:17:f4:d4:73:a8:
8c:fe:ad:22:ad:4d:4e:d1:67:08:ce:9b:4b:c9:80:
4a:77:37:59:32:01:a6:41:ef:ca:fa:6f:b0:e7:17:
b5:ea:5d:9d:d2:81:f6:f1:19:7b:3e:02:31:eb:56:
80:a2:27:cb:05:19:50:b8:ef:f1:2b:db:0d:6b:d4:
37:c5:52:e5:14:40:39:bc:71:a8:e2:d2:b7:3c:56:
da:db:bd:50:23:1b:31:36:1b:73:1b:f5:a7:8f:ed:
59:69:c6:90:0c:a9:c8:92:64:7b:66:a6:bc:01:8b:
cb:9a:10:80:b2:69:dd:05:4b:2c:3c:62:aa:15:2b:
55:d4:1f:2f:22:ac:8b:ad:00:af:95:26:6c:66:ea:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:50:58:B4:85:06:95:0D:08:08:8C:26:0B:BC:AE:39:A1:81:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:91:25:30:b1:f2:62:5e:b1:43:51:79:61:e7:1d:ea:1b:83:
f8:58:8c:d3:9e:5a:0b:81:97:a1:3f:d0:80:4f:3a:03:15:3a:
45:96:72:de:74:eb:d6:d9:90:f4:bc:9b:23:ca:2d:26:23:fb:
a7:cb:d1:9a:a2:73:d3:15:58:92:2a:17:d4:b4:ea:81:86:ba:
3c:d1:8a:5c:96:55:be:31:1d:d9:d8:70:5a:78:8e:a9:0e:9d:
76:b6:32:62:d0:5f:24:e6:34:b7:ea:b8:67:35:11:9f:64:2a:
14:4a:d8:bc:58:c1:ed:c9:0a:40:1f:d7:78:1a:22:65:6d:b2:
e1:69:0e:c3:fa:77:2e:97:bc:1b:b9:72:68:5c:7f:24:a3:01:
1f:f0:8f:54:a9:f6:dd:17:94:ff:d3:66:46:f1:19:e3:4b:e5:
2c:a9:fd:36:c2:46:cc:ea:f6:8c:bd:0f:cd:ce:23:7e:4f:f9:
0d:14:d3:c2:ae:c5:9f:ad:2d:29:da:70:64:84:ad:d9:f2:99:
7e:50:30:93:77:d3:e0:62:99:eb:01:23:20:0e:6f:23:07:a1:
a3:1b:b2:6d:9b:2c:88:10:33:83:8b:9f:eb:e1:09:08:f6:6e:
38:71:82:06:9e:77:f1:f8:2a:62:b3:b5:8c:d6:3a:6a:f6:d8:
03:4b:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:38 2025 by rpki-client