Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64306d8c-c54c-3dfa-b2cd-454feb56b463.roa
File: 64306d8c-c54c-3dfa-b2cd-454feb56b463.roa (raw, json)
Hash identifier: 5KKr7axr5KViUWk5eN7GuCsSPfIMJeFCdCE9bxTRzhY=
Subject key identifier: CC:6B:03:AE:5A:76:F1:59:D8:F7:27:A7:3F:2E:77:E5:E5:FE:F5:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B6F47087CC692259F8900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64306d8c-c54c-3dfa-b2cd-454feb56b463.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6f:47:08:7c:c6:92:25:9f:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=10f501cf-e67c-4a52-a144-cbd813ee9ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:20:b8:76:5d:c0:d9:30:9a:c9:39:95:80:
8e:1d:f3:f2:0e:fa:95:2b:86:71:df:d9:60:e8:51:
f2:a2:63:77:71:9e:cb:b3:32:27:7b:18:16:b0:12:
a4:26:c4:04:d6:fe:b1:2c:bd:4a:90:f1:b4:0d:ba:
8a:77:fe:e2:68:a8:33:d5:58:a5:0f:fc:43:63:be:
e6:70:d0:77:7d:67:dd:f5:82:a7:ac:27:ff:a7:db:
09:85:b6:98:3a:b2:d1:b0:8b:00:ba:c1:62:8a:f1:
6d:c7:09:24:7c:ae:08:82:39:68:e2:2c:be:44:a5:
78:a0:cb:13:7b:ab:18:e6:75:a5:a1:22:67:dd:84:
4b:fb:60:06:e0:83:19:88:1f:e0:ac:ff:a8:fa:26:
13:4a:24:74:64:f7:41:0d:ec:c6:f6:13:06:a9:96:
a3:5f:fb:6d:ac:94:9c:80:57:8d:01:be:b0:98:7a:
47:43:ca:a9:ee:dc:d2:06:33:59:2b:f3:68:5f:df:
f4:c4:c6:6c:f0:91:25:ae:88:77:22:49:98:38:43:
95:49:48:de:fa:6c:7e:09:22:d3:0d:92:54:45:e0:
e9:e0:65:0b:bb:0b:06:11:e1:9b:fa:82:1b:34:62:
54:cb:48:3c:5a:05:8e:09:c0:eb:74:63:9b:bc:00:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:03:AE:5A:76:F1:59:D8:F7:27:A7:3F:2E:77:E5:E5:FE:F5:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64306d8c-c54c-3dfa-b2cd-454feb56b463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ad:0b:c9:a3:8f:f6:9a:03:08:e6:79:6f:87:17:e4:76:1a:
ff:89:e2:f6:40:6e:9d:59:e8:e0:96:19:da:7c:ac:c1:ba:1e:
e9:b4:f4:6f:02:86:21:b1:cf:94:ed:c0:ad:72:f6:a4:2e:25:
9e:27:57:b4:d5:c4:da:b3:c6:3b:ca:7a:0d:9f:80:35:c0:8b:
03:3d:5b:61:45:f1:b0:8c:81:36:2e:4d:61:c3:48:53:9d:d7:
1e:4b:0a:5e:ed:c3:20:7d:f6:44:59:ee:e3:69:a2:15:91:4d:
1d:32:1f:86:df:ce:fc:c2:0f:b7:05:52:51:94:33:21:15:48:
c0:8e:50:be:e8:6a:18:4c:1b:a4:c9:7e:fe:3f:e2:e8:8f:75:
d4:28:6b:71:c5:28:b7:d2:36:36:64:f2:0f:3f:d1:74:37:88:
7b:7e:12:9b:48:26:3b:96:09:37:d6:1c:40:c9:74:7e:a8:9e:
56:40:73:f5:b8:e5:9d:be:14:13:e1:16:83:4d:84:ef:96:66:
bc:48:8d:8a:ec:ce:e8:56:0d:f0:f0:5e:9c:fd:32:d8:8b:f0:
4f:d7:e7:df:ca:6c:29:a3:f4:49:b3:d5:f3:4a:eb:66:d0:cc:
9f:43:98:88:a3:2b:bd:3c:17:6c:98:d5:bc:e0:56:68:49:ad:
19:c6:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:28 2025 by rpki-client