Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57048567-7bb9-3637-8f4b-609ea9c1c473.roa
File: 57048567-7bb9-3637-8f4b-609ea9c1c473.roa (raw, json)
Hash identifier: BMES2a08dGRbZJpn9gtp99kjDVVZdyVab6yAWo9vhYk=
Subject key identifier: 85:A3:08:B0:6F:68:D6:98:B4:E5:54:BD:4B:73:F3:42:1A:D5:05:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51FA1F1535793FD180B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57048567-7bb9-3637-8f4b-609ea9c1c473.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1f:a1:f1:53:57:93:fd:18:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=f1ab94a3-5523-4d29-92d4-a91de957d8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:d9:b3:ba:a0:41:e7:0c:b5:5f:37:5d:0f:
a7:93:e0:99:08:f4:ca:84:a4:f9:63:1d:e6:a8:38:
10:c1:8d:4e:f4:58:7d:50:7d:33:26:2e:96:52:2a:
0c:e5:a8:45:31:a6:b1:2e:5b:e2:d4:32:cd:c1:1b:
34:91:32:a2:81:46:27:d4:f0:6d:85:44:32:b5:14:
ee:b0:08:01:49:1a:0f:29:0b:e7:2a:04:0c:e3:c7:
5e:5e:92:4f:06:4c:09:e1:f0:aa:11:fa:e7:28:fb:
f0:20:03:86:34:ad:a4:a7:8e:f4:2b:72:33:f0:3f:
48:d6:c8:2b:9d:88:30:11:4b:51:a5:ae:1f:5a:cf:
ec:53:95:c7:38:d6:6f:46:a3:c7:bd:6a:3b:a8:fc:
a6:c6:95:7d:2b:c7:51:ef:2b:1a:0b:3c:e0:8a:16:
24:71:5b:55:ee:67:79:cf:a6:84:b1:02:40:15:92:
e3:3e:cd:35:d5:2b:6f:50:24:2b:5e:dc:19:54:1c:
2e:9d:60:1e:c3:4a:f8:d2:a9:c3:a1:43:bc:62:2a:
3a:4f:2d:9f:48:c1:2c:39:ae:b6:4b:42:bc:d2:71:
b5:6e:71:51:32:70:68:2c:cf:c4:dd:34:f1:5b:a6:
da:09:41:e9:19:c0:55:40:43:6e:18:e3:29:1d:8a:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:08:B0:6F:68:D6:98:B4:E5:54:BD:4B:73:F3:42:1A:D5:05:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57048567-7bb9-3637-8f4b-609ea9c1c473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:bc:03:87:c9:e5:29:ad:94:a9:37:68:f8:00:0c:c3:33:24:
00:37:aa:48:b7:ca:f4:81:b0:36:74:79:4c:36:1d:25:b6:f7:
0a:c8:5e:dd:70:77:68:c8:73:86:e3:ac:c5:e0:b7:30:83:61:
7e:ee:10:0d:b3:47:89:73:dd:d4:ea:33:9b:21:b2:50:48:f5:
d0:e1:f2:1d:5b:ef:66:7c:90:50:7e:6f:b0:1b:d7:b1:72:75:
2f:59:67:a1:89:48:38:c7:aa:21:ed:dc:99:54:8a:aa:b0:68:
24:ee:3f:11:e8:f3:e8:29:27:ce:87:c5:97:8c:8f:5d:53:87:
c3:53:13:85:6c:03:d8:c8:94:c4:07:c6:77:73:03:c6:ee:63:
11:55:c6:33:03:56:c3:52:72:fd:07:e6:f6:dd:d3:47:0d:67:
24:ac:8e:5b:8e:10:a5:de:72:8f:72:6d:e0:4d:a2:2e:dc:fa:
58:06:f7:0c:63:58:bd:8c:fd:89:30:cc:a0:c5:f1:0a:7e:7d:
4d:23:f1:71:d5:f7:c6:d2:07:0d:75:31:fb:f6:16:be:97:2d:
3d:7a:cc:bd:e4:94:80:ca:79:2e:54:c6:b9:dc:99:6e:5f:3c:
0d:92:66:7f:0a:d6:19:16:53:a0:61:46:a5:e0:0a:ac:79:4d:
dc:cf:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:59 2025 by rpki-client