Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58daedb5-9d8c-394d-b057-1b15c14f7ada.roa
File: 58daedb5-9d8c-394d-b057-1b15c14f7ada.roa (raw, json)
Hash identifier: DIrWWbjpFTMP/CC6xYa/J+V+Xcn1z49KLA4omP+bM+4=
Subject key identifier: B5:10:E0:43:84:AA:5C:35:86:9A:AB:A8:08:80:50:ED:62:AE:99:9A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51CF0661661564D63B800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58daedb5-9d8c-394d-b057-1b15c14f7ada.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1c:f0:66:16:61:56:4d:63:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=71776657-7d66-48c5-9523-7c9c9c0ccdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:da:74:25:cf:86:af:b3:8f:98:a2:be:e0:
71:e5:9d:43:6e:a6:21:1c:05:24:e2:3b:4e:bf:9f:
ca:43:4f:7f:66:aa:c5:23:8e:d9:02:d4:92:16:e1:
07:6c:d5:3e:a2:4f:3e:94:a2:e2:d4:db:37:32:fe:
f5:4a:54:3b:fb:3b:b5:5b:ee:2f:74:06:1d:99:c9:
94:f7:7c:7d:db:70:da:76:a7:29:66:c5:e4:bf:f2:
c3:41:05:12:5e:f8:57:7e:73:60:d4:73:54:cd:ae:
99:a0:14:b3:ac:68:e8:99:ef:a4:44:2a:78:70:87:
10:1d:53:51:87:4e:32:99:d8:01:7d:d0:ce:89:6a:
c6:3a:a0:5b:f4:ab:7a:aa:c6:34:12:81:dc:ba:da:
d8:58:03:57:c8:53:a0:14:51:65:d1:9e:88:6c:8c:
a5:25:61:42:80:c6:37:bc:08:44:2c:15:78:60:72:
86:82:78:09:71:57:7e:48:c3:15:c5:56:32:3f:3c:
66:13:f3:10:3d:5e:75:ea:dd:04:0b:6e:c9:f8:f9:
ae:fa:96:7e:58:df:71:0a:4e:71:98:f6:02:0e:4e:
b7:e9:d5:18:85:94:b1:2c:85:09:08:13:91:13:5b:
e7:bc:aa:19:99:3e:22:fd:99:08:fa:1c:21:77:4f:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:E0:43:84:AA:5C:35:86:9A:AB:A8:08:80:50:ED:62:AE:99:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58daedb5-9d8c-394d-b057-1b15c14f7ada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a4:74:95:2b:f0:aa:2c:aa:be:92:57:04:2c:bc:c7:45:62:
b9:b7:80:d5:15:bf:cd:56:ef:c4:33:5e:d6:c6:53:b8:9c:6f:
bb:64:9c:da:51:8f:eb:47:54:09:2c:a7:04:8a:bc:0e:ab:b3:
59:39:b7:a8:7d:2f:03:5a:49:cf:76:a6:bb:4b:ce:76:27:08:
68:bf:ac:10:3a:a3:a5:97:39:c8:29:82:70:f1:81:77:82:b9:
f4:0f:62:16:7f:9e:08:b1:c1:96:ec:4e:fc:58:af:1c:32:16:
f7:a2:fa:0a:cf:da:bb:cd:e4:27:1b:6a:eb:f8:78:e4:26:7b:
41:71:b8:aa:14:ff:5b:ba:11:72:e2:6a:d6:fd:38:c8:78:49:
64:5a:c0:f8:c7:fa:94:3c:23:19:08:d7:b3:c0:db:e2:fe:a3:
29:df:4c:e3:12:7c:87:b1:34:b4:4c:73:a0:d7:0c:19:3e:41:
3d:f6:f1:6e:04:5b:49:59:07:41:93:98:74:d5:1a:80:86:99:
7a:75:02:e1:f1:df:8b:8a:fe:3f:34:7a:d6:15:cc:3b:89:a9:
ce:d5:00:5b:e7:ac:be:f5:8b:03:24:f0:ca:71:1f:94:7a:91:
0e:70:88:a0:2d:2c:39:8d:88:b7:17:d9:ff:bf:d3:09:5f:12:
06:c7:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:54 2025 by rpki-client