Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58856232-ae58-3b9d-b393-5b8206c8e329.roa
File: 58856232-ae58-3b9d-b393-5b8206c8e329.roa (raw, json)
Hash identifier: MhLQipClXELZo4lqFxwY09Xw0geDjBnBMkfP0/cal5A=
Subject key identifier: BD:C3:01:0E:73:B6:35:27:FE:D4:39:4E:13:89:72:7D:F9:8A:D9:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AAE5534B55E8F9E680E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58856232-ae58-3b9d-b393-5b8206c8e329.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 16625
IP address blocks: 173.222.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:ae:55:34:b5:5e:8f:9e:68:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=514186b9-74e9-4d2b-913e-1d1de22ffde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fb:3f:8f:c8:17:93:a4:1d:18:7c:5c:a4:71:
6c:2c:58:f6:8b:11:60:aa:de:81:c7:48:ca:cc:1e:
c2:eb:4f:87:ae:19:b9:a1:82:81:fd:e8:96:e6:64:
74:98:df:21:3a:c2:24:99:84:d9:bd:ff:88:b9:2b:
d5:15:e4:24:1d:0c:d8:a5:1a:1c:c3:b4:12:68:59:
30:66:94:d2:d5:0a:02:64:a3:a1:b5:e2:30:6d:38:
40:8f:96:6f:e4:99:07:6d:5a:5b:95:1e:b1:c5:29:
74:b6:4d:75:b2:98:45:0e:c2:3d:f0:90:3c:87:df:
83:5b:1e:a9:9f:71:cd:4d:37:b9:77:53:c7:fd:90:
af:fa:e1:df:16:ce:59:43:00:2d:5c:39:61:d0:da:
90:76:44:7f:6d:18:f0:6f:25:23:28:c6:34:7f:3c:
1a:b1:a4:25:5d:f1:c1:60:30:2b:82:49:ab:f5:3a:
fd:9e:36:a1:88:d2:0c:e6:de:18:28:a8:0b:8b:4d:
a8:57:76:d2:13:35:0e:b4:dd:5e:2d:31:60:f2:bd:
3c:80:55:bc:15:bc:58:e9:8b:9f:33:92:e7:af:55:
44:5f:6a:5b:32:b5:5b:2c:b4:c5:a4:dd:9b:70:29:
01:91:fd:b3:28:9b:5f:69:8c:00:6a:04:f4:d1:10:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:01:0E:73:B6:35:27:FE:D4:39:4E:13:89:72:7D:F9:8A:D9:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58856232-ae58-3b9d-b393-5b8206c8e329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:10:41:db:dd:31:9f:d6:c4:1e:0f:00:c3:39:c1:b6:a3:a7:
8d:7e:fe:dc:8f:7d:bd:cf:b4:22:38:5a:58:d0:43:fc:fe:1c:
35:e0:95:48:46:96:74:57:e7:33:cc:58:18:1a:58:84:3f:23:
22:ea:88:2a:e7:87:20:14:f2:22:e5:f2:7d:88:39:c3:6c:9f:
29:fa:ec:21:1d:8e:59:b0:35:53:ea:eb:56:3a:ca:df:fc:4d:
bb:fb:e5:7d:83:c4:88:4d:63:a1:17:ca:82:41:38:1f:e1:c0:
e4:17:c7:88:3c:fc:92:78:a6:2a:9d:a5:5a:5a:09:11:0e:dc:
75:c9:f9:e8:c3:18:f3:48:1f:09:3c:6e:3f:08:3b:87:63:a6:
03:f6:b6:17:24:e0:6f:26:34:ee:05:9d:bd:aa:76:ad:f0:12:
9c:73:51:00:07:1e:9e:95:01:dc:77:13:22:11:02:0f:fd:9e:
97:18:32:27:9f:e5:57:62:8e:9e:12:6d:ee:9b:c1:ce:03:b4:
03:b0:56:87:8d:8e:9c:69:ee:79:67:84:2f:18:c1:11:40:73:
54:6c:2c:78:af:29:c6:af:45:ff:9e:57:fc:c4:0b:f2:2b:f8:
41:01:77:9a:6a:b0:d2:87:54:8a:d5:e4:e0:b4:2d:97:f8:b0:
fc:db:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:43 2025 by rpki-client