Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa
File: 63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa (raw, json)
Hash identifier: WGIK8/CUjf/Y0Bt94slGMSg4JyHYurzk59UkhmjOxf4=
Subject key identifier: BC:77:12:44:40:C2:16:F6:99:8F:06:E7:01:29:2D:E7:6F:EF:4D:95
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFEB4D23498AE920B5980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:b4:d2:34:98:ae:92:0b:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=a3ec8dbf-cedb-4b79-8887-3a69dd7a39c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:3d:04:70:d5:9f:22:b3:d3:d8:db:fb:ee:
20:fb:bc:97:09:8e:18:80:d3:ed:b5:cd:71:6d:e5:
c2:d3:cb:6a:1f:81:28:84:57:ec:ea:be:9b:fb:5a:
a8:ed:6e:2d:77:1d:22:d1:57:d2:29:b4:3d:bb:53:
69:68:6a:e4:8f:42:e4:ca:11:0f:de:17:5a:41:24:
fd:40:f4:f6:fc:67:b6:62:c8:09:8c:47:41:4d:c7:
e4:3e:d7:14:85:31:63:74:43:ee:f6:f9:a0:d3:c2:
a1:e1:f1:e3:1f:a4:28:38:ef:7d:73:fd:2a:d2:64:
21:8f:14:e6:18:45:a1:8c:14:dd:51:cc:b4:5b:57:
05:2d:39:db:37:5f:fd:de:f0:96:f3:3d:e5:17:53:
29:33:bc:b8:12:f3:e3:b1:24:f7:17:a5:54:ba:77:
0a:9d:23:37:50:0d:c9:d6:82:30:4e:2b:01:25:e4:
31:bb:d7:76:f0:b0:95:c0:ce:5f:5e:2b:67:0d:44:
a4:36:e2:6f:85:62:5a:3a:6a:c7:32:18:51:43:65:
7c:2d:d2:6f:c8:0b:2c:09:cd:96:17:fd:e6:d2:e4:
32:5b:65:49:20:c5:40:5a:e1:26:e5:de:da:c9:4e:
67:7f:57:16:78:18:39:2b:20:9f:02:e7:b7:15:d7:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:12:44:40:C2:16:F6:99:8F:06:E7:01:29:2D:E7:6F:EF:4D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a7a92d-f0ca-3950-a0c1-625e869e39b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:67:00:46:8c:af:30:56:3a:bc:72:f6:b1:45:73:f5:58:db:
5c:29:41:c9:c0:82:e3:fc:37:e9:6b:5a:c1:a9:59:d9:b0:05:
03:6b:0e:15:c9:dc:4c:58:50:ac:ae:00:92:4c:da:b0:7b:15:
b2:ce:07:e5:cd:f5:c9:3f:e1:9f:74:bc:4d:10:eb:18:08:91:
ab:85:b0:67:27:08:e8:0c:c8:d4:54:c8:7f:3c:c9:e3:ea:cf:
0e:bd:68:fa:e3:12:f6:79:42:86:3d:1d:f7:17:af:09:41:34:
95:f1:7b:ab:57:90:85:62:36:46:f0:10:cf:9e:6f:79:af:c9:
b0:ee:af:b4:21:6f:e4:8f:ea:1d:fc:41:40:91:79:4d:10:6e:
07:6c:ed:d7:87:1e:25:39:59:cb:7b:df:30:8b:51:14:a0:f9:
c3:b3:e8:d6:54:14:71:93:b6:b0:93:b4:c0:c9:64:cf:a6:07:
3c:0d:a3:07:90:18:b6:1b:52:e4:ed:d4:5c:3d:63:58:82:93:
e4:77:cb:63:46:9b:70:be:ed:57:da:36:6e:f1:eb:65:2b:c1:
1f:1e:53:e7:4b:09:61:9b:dd:e8:f2:c3:c8:6c:68:ed:3f:96:
fa:d1:b7:71:45:ff:76:36:e9:25:7f:ed:b6:02:32:7e:39:01:
e4:ea:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:31 2025 by rpki-client