Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5479e71a-e79a-3b9c-91e5-9f286d9cea72.roa
File: 5479e71a-e79a-3b9c-91e5-9f286d9cea72.roa (raw, json)
Hash identifier: nbzFyJ9T3yZB+t91KGU8AQrFJC1pcwC+GG7c2ah4Erk=
Subject key identifier: 29:4E:2F:62:F5:0A:90:A1:BF:26:C9:49:14:E8:D2:51:B4:AC:80:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51C8AF9FB1BF75DC7D590
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5479e71a-e79a-3b9c-91e5-9f286d9cea72.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1c:8a:f9:fb:1b:f7:5d:c7:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=50e7ceb5-cf47-42be-a8af-fd363a8a59cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:11:3e:0f:b9:3b:49:e9:52:35:0a:40:60:
50:27:45:77:4c:7c:1f:9e:61:84:83:f1:5d:61:65:
ba:a9:2f:19:d3:b9:0c:8a:8a:de:cb:f7:45:bf:b5:
22:d0:eb:a2:1b:f0:0b:db:77:01:08:ca:5c:a3:5c:
7d:74:f1:39:5f:f8:e8:d9:02:bf:77:13:4e:fa:e5:
80:74:f6:f9:d2:2f:16:12:f7:b4:8d:b9:46:8d:8f:
b9:9f:ae:8b:90:d7:48:02:da:76:84:c2:f0:ae:f2:
b3:f7:70:5e:03:69:49:3b:f2:83:b5:7f:46:3f:27:
48:0a:1c:35:ec:5d:20:95:7a:b4:71:33:5e:52:bb:
5b:28:60:e0:90:da:38:06:eb:81:c5:bc:7b:b1:01:
84:a6:9f:75:c1:16:08:41:aa:65:9f:39:3d:b6:1e:
6b:06:46:64:90:ff:19:0f:90:f5:41:6d:69:a1:10:
47:c6:85:7d:64:30:40:cd:b1:f7:14:0d:58:35:00:
4c:6f:25:60:c3:59:e7:73:b7:07:c6:ed:f5:5c:2b:
a3:1c:77:68:af:4d:f3:00:1f:79:90:bb:ac:80:c7:
42:7a:00:85:3b:ed:6f:a0:9e:a9:fa:a2:f4:3f:9e:
5d:bd:c0:97:eb:a9:a0:25:24:28:f5:69:84:af:aa:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:2F:62:F5:0A:90:A1:BF:26:C9:49:14:E8:D2:51:B4:AC:80:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5479e71a-e79a-3b9c-91e5-9f286d9cea72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:0a:2e:a6:bb:5c:41:04:55:b2:62:71:38:4a:47:5e:a7:46:
dc:8c:37:48:cf:23:16:f4:76:0d:35:40:e8:52:fe:3f:dd:ec:
c3:cf:dd:97:95:4c:2d:74:fe:91:63:02:78:9b:fe:7e:9f:e8:
24:5f:ec:1d:db:90:6f:6e:df:e5:b0:81:a8:15:09:a5:9a:6b:
92:f8:b1:ad:06:fa:7f:10:0e:23:d8:16:36:ad:ce:96:ac:7e:
26:eb:b3:09:fb:ef:2d:d3:41:e9:ac:bf:aa:b8:60:f1:07:72:
b2:28:ae:c4:db:7f:71:e7:d4:2d:e3:75:21:a3:99:dc:98:10:
b3:5f:b6:55:8f:a7:6a:03:67:0a:0c:55:ee:0b:3d:5a:9f:6f:
17:20:e8:c7:45:8d:a9:f3:8a:a4:b4:26:e5:11:5d:bf:ea:a7:
ca:1e:a7:49:26:12:65:ba:ee:9c:30:f9:68:75:68:27:ec:77:
02:c9:2f:2c:23:87:1a:d9:69:5e:d9:11:b2:27:dc:42:27:aa:
46:f3:2d:ee:cb:be:a2:08:87:a7:b0:ae:08:64:b9:31:b3:90:
8a:e2:3a:7f:f8:4a:a8:e3:b3:61:9d:06:4f:37:6e:8c:bc:6e:
b0:38:a1:1f:d0:43:13:52:e1:2a:9c:31:6a:52:9d:08:90:aa:
e2:67:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:23 2025 by rpki-client