Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa
File: 4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa (raw, json)
Hash identifier: R2uPmxL9Ii+atbfubcGs/uqqQoyM4K5ZIv6P6UxJa4k=
Subject key identifier: 4D:BF:F0:B5:C9:4A:27:0F:23:0D:B2:BD:83:DD:7F:F6:82:FD:13:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A972F79E83ABB9240B000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.226.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:97:2f:79:e8:3a:bb:92:40:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=9b5c2798-0fed-41db-8b03-597c8db561cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:ca:05:34:6f:8d:51:1a:67:53:d1:d2:c0:
c7:77:74:21:1d:eb:27:90:4a:02:a2:01:85:8b:6a:
11:6e:a0:e2:eb:7f:ff:19:4d:53:a1:e9:92:5b:7f:
c6:1b:0f:8a:b2:ce:8e:9f:b0:1f:77:4b:6f:87:8e:
44:49:29:a6:03:d8:45:34:a8:ac:4f:63:e1:78:fc:
ed:ee:f0:44:22:28:ab:66:42:e3:f8:11:5d:a1:55:
bc:d8:33:00:19:ed:6e:6e:b0:a6:a0:71:ac:3f:1e:
6f:e4:2b:e3:be:7c:87:50:ab:a6:92:b9:68:df:bd:
2d:b6:b7:07:94:ef:79:6f:51:17:29:88:8e:5a:f3:
99:9f:e1:e9:6b:8c:97:1e:bd:17:8d:3a:5a:90:c1:
ce:99:22:39:b6:14:0d:69:83:7c:fc:06:ed:c2:2d:
7a:13:35:bc:a5:e0:2d:5a:b8:05:ef:f1:f7:07:4c:
e9:a9:80:a5:f8:2f:38:57:a6:62:21:e7:ac:3f:b2:
53:8f:62:0f:23:d3:44:61:4b:7f:ad:a4:d8:e0:93:
aa:4a:b7:a7:f5:db:2b:41:7d:f1:de:b4:ce:34:a9:
a8:ad:ec:e9:1e:7c:30:c4:97:f4:ef:79:7c:44:c8:
55:47:42:89:c7:15:65:4c:b5:f5:60:8c:e6:db:d2:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BF:F0:B5:C9:4A:27:0F:23:0D:B2:BD:83:DD:7F:F6:82:FD:13:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4fe6864e-9edb-3792-a45f-b8bc3491cf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e0:d1:00:3a:0f:5c:ac:c9:0d:6c:07:e6:0d:d3:ea:c8:b5:
f5:a2:b4:ac:72:28:5b:21:23:ed:b7:57:88:a7:e4:78:2f:86:
22:7a:1b:19:d3:cc:3f:ca:b2:53:5b:2a:7a:cc:93:5c:f4:2b:
38:42:df:ef:ef:43:0d:c9:f4:d4:ab:16:51:29:d0:fd:8f:40:
60:d4:f7:46:86:e4:84:73:9b:a6:56:91:f3:83:02:45:f9:ba:
b7:13:c5:0e:63:26:b4:1c:e3:d8:7f:16:21:37:3b:1f:b2:61:
c2:c0:96:28:8e:6b:16:f3:0c:9f:8e:5c:9c:ed:0a:ab:9b:31:
51:7f:ff:ac:21:5a:49:29:05:67:77:4c:f7:b0:02:a4:d3:ba:
40:4d:79:25:a4:cc:71:e2:52:f0:35:c4:fc:e8:41:78:ca:86:
89:92:9d:59:3c:f1:8c:9a:9d:f7:64:e5:4b:a3:16:fc:1e:24:
91:c7:7c:ec:1e:9f:af:24:dd:96:0b:2c:2d:8d:08:2b:4e:3d:
05:5f:bd:1c:c3:57:89:ba:fe:cb:68:c9:cc:7c:b0:c9:ee:53:
7c:13:8f:cf:69:5d:7a:32:c1:a6:31:a0:1d:91:33:14:1b:7e:
31:ba:30:ab:38:8d:ff:0d:ae:cd:28:38:73:e1:67:aa:33:11:
16:fe:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:25 2025 by rpki-client