Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/569662a2-2345-3045-acf5-dd21e8dfaf18.roa
File: 569662a2-2345-3045-acf5-dd21e8dfaf18.roa (raw, json)
Hash identifier: OmDnnBgdwfW7BKcLU2r1RHiXHdaDfEGDWU9+yKLcVg8=
Subject key identifier: F5:D3:28:49:2D:8D:2C:F8:42:67:22:A4:E9:AD:1E:42:99:8D:FD:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFF13ADC1EFDBFD4D9380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/569662a2-2345-3045-acf5-dd21e8dfaf18.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ff:13:ad:c1:ef:db:fd:4d:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=95cabd57-7404-4819-a0e3-21528df2b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d9:cf:b7:b3:d0:78:6b:8a:af:bd:c5:b6:fb:
56:71:14:22:6b:5f:0d:84:ea:06:e9:a0:70:4a:a6:
61:77:c8:0b:c7:5a:84:69:96:bf:b3:41:b1:d3:7c:
96:90:d0:2b:41:f5:2a:3c:12:a5:c8:e7:95:09:51:
90:75:f6:11:d4:a0:25:1f:92:81:c5:de:0b:b7:06:
06:16:44:96:dd:4f:57:fa:95:40:8a:6c:ad:c1:c4:
e1:09:cb:e8:2f:74:2c:83:05:40:f7:51:bf:ce:0b:
02:ce:21:6f:8f:84:39:02:45:6b:0d:96:5f:ea:62:
4d:a3:ad:0a:14:33:d5:03:58:cf:d1:e3:3f:e2:7f:
2e:0a:c6:44:16:01:1c:cb:ef:9d:70:7d:e1:11:c6:
a1:c7:f8:3e:96:f0:d9:a0:f8:fa:51:fb:1a:bd:f8:
f8:e6:11:3f:dd:32:9e:dd:39:ab:6e:e4:30:19:10:
46:67:71:7d:ce:da:35:38:e6:64:e9:07:43:49:24:
f3:80:9b:e1:77:88:b6:5d:5f:7b:e3:d6:f0:94:3f:
1d:51:5e:6f:31:21:b9:1b:16:83:69:3c:10:4c:df:
42:a9:67:64:e1:45:f2:5e:c2:09:a0:d7:79:90:7b:
4e:43:4b:ea:eb:a4:bc:ec:43:43:3c:18:87:24:4d:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:28:49:2D:8D:2C:F8:42:67:22:A4:E9:AD:1E:42:99:8D:FD:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/569662a2-2345-3045-acf5-dd21e8dfaf18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:da:cb:d0:92:ac:85:79:f6:56:12:68:27:3c:24:0f:6d:d1:
9d:81:6c:21:2d:74:b2:ea:d6:fc:ff:16:e9:91:78:10:f1:83:
88:ae:70:28:1d:3b:8a:b9:0d:ef:b5:bc:07:c5:9a:d2:49:bc:
b1:8f:34:50:b9:1a:ac:ea:08:ee:20:4c:ac:47:10:43:7e:5b:
3d:0a:57:b6:fa:4a:6a:5f:15:56:d9:b9:86:3e:9b:ac:b3:b6:
6e:f4:8b:d9:dd:a9:e0:fd:3d:e7:23:c4:81:5f:02:48:62:c6:
5a:b0:2e:aa:01:9f:89:f0:cb:b2:62:79:88:16:3c:d8:38:50:
21:8c:c4:62:9a:5a:ad:b1:56:19:2e:dc:53:2c:98:3a:a2:d3:
f4:c6:3f:72:87:f7:b2:a8:ca:81:3e:df:ad:69:5f:10:1c:ff:
53:c4:6a:3b:fa:58:a6:0d:1a:69:a3:10:cc:a6:c4:78:7e:b9:
ff:e5:d8:63:56:b2:ca:86:82:4f:4e:dc:f6:b6:66:44:10:78:
21:33:44:fa:9c:96:ad:b1:6e:f8:3f:c2:1d:ad:b1:a9:3b:9f:
87:b7:bc:56:4c:8d:ac:c0:8f:2c:bb:b8:48:fc:c9:0e:7e:f7:
05:44:01:ae:17:d5:f8:ef:ba:45:6d:73:e9:87:56:df:74:67:
20:9f:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:43 2025 by rpki-client