Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cbab354-011a-327c-97f2-75e96dcbc5cb.roa
File: 5cbab354-011a-327c-97f2-75e96dcbc5cb.roa (raw, json)
Hash identifier: FQu8YI0D18C8y/x+MZ5QPiRjgDh2ZufJIXtOjn9h1jM=
Subject key identifier: 88:71:E6:CC:91:31:40:EE:A1:3A:81:8B:B0:88:CC:21:42:43:4B:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A5085C9B13B63ED96ECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cbab354-011a-327c-97f2-75e96dcbc5cb.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:50:85:c9:b1:3b:63:ed:96:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=b7aec857-21ad-440f-8c84-f519000594c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:cb:1e:30:d4:34:dc:cb:fb:13:9b:61:0c:
d8:64:fa:47:70:8e:d6:78:3d:8a:fd:cb:4c:ed:65:
c3:05:8f:cd:f7:47:04:9d:f3:89:e8:73:8b:7f:24:
70:bd:4a:fe:17:92:d6:51:f8:b6:78:58:b2:3e:56:
03:21:cc:62:1a:5e:f4:5e:de:d9:dd:3e:53:94:c7:
fb:aa:b4:4d:65:9a:be:cb:43:84:7e:32:e6:8f:a0:
7d:2d:ef:09:8c:36:f8:70:4f:5a:1c:72:9e:3b:fa:
57:ca:a2:92:df:2d:12:40:85:e0:23:5a:54:a3:29:
2e:85:97:5f:8a:9e:4c:eb:6e:ab:f6:a3:7d:82:e7:
bd:5a:1e:a9:4b:bc:9a:6b:bf:b3:1e:fa:d1:82:60:
0d:af:73:b4:c3:d0:dc:39:e9:3d:c1:ae:9a:ae:2b:
53:55:95:49:f0:f1:16:0a:ee:7c:2e:30:54:2e:85:
ae:6a:94:be:52:1a:91:77:ae:81:f4:cc:42:08:09:
26:5c:a5:0c:dc:66:7d:99:a4:76:da:6a:65:9f:33:
21:50:3e:a6:ac:e1:c3:bf:22:1d:81:e9:da:d3:64:
29:04:04:f0:b6:e1:a3:d4:c2:3f:9c:20:40:37:9c:
ad:e9:19:ee:6f:fa:4b:b3:8c:3f:0c:65:90:73:3e:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:E6:CC:91:31:40:EE:A1:3A:81:8B:B0:88:CC:21:42:43:4B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cbab354-011a-327c-97f2-75e96dcbc5cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:de:d1:a8:f9:56:21:67:90:48:71:35:cc:63:8c:ee:ed:37:
e4:53:0c:50:af:35:6f:15:bc:3c:99:16:2a:43:a4:06:99:35:
93:43:62:9f:f4:d8:c9:ab:68:33:9f:f2:ac:5c:1c:61:1b:c7:
ad:ba:81:f2:3f:05:99:81:98:37:0b:cc:7f:48:95:d1:7f:5a:
e6:99:8c:27:58:ff:e2:6a:6f:e5:50:ad:bb:60:e4:bc:8a:ed:
27:41:e1:b2:f5:d3:d5:7d:e8:c2:7d:21:23:c5:03:85:73:7f:
1a:99:b6:8d:6a:87:01:1e:2d:63:f6:77:47:c2:14:aa:55:a2:
be:c3:e5:97:11:62:73:9e:3c:a7:6f:59:71:38:66:3b:3e:71:
11:9d:9e:7b:85:5a:16:41:71:c5:33:17:07:f1:4b:45:f3:7d:
55:38:65:8c:e1:a4:7d:03:08:f1:e4:0e:82:06:31:de:7f:07:
ce:22:c2:27:56:90:66:c9:7f:30:3a:47:8e:1a:c2:3c:a3:50:
d9:b3:49:77:ad:4d:e2:6e:67:ba:6e:e4:81:c8:6d:09:d1:8d:
53:ff:7a:18:fc:b2:22:b6:b9:a1:72:3d:62:39:d0:ca:a1:53:
d8:89:83:8a:d9:59:4c:91:8e:4e:34:20:e2:89:33:61:ba:5b:
8a:87:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:48:02 2025 by rpki-client