Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa
File: 647a69c0-ead5-325c-849c-5bd5cdfb0081.roa (raw, json)
Hash identifier: 02G54hEz/R5wshZVHVBqpUftMn6rmr1MkN96JZ+7MPc=
Subject key identifier: AE:37:89:DD:9D:E4:BC:0A:6E:68:7B:9A:59:DE:AC:1A:6F:AB:E9:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584802150EEBFAFEFE8EE4721F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0e:eb:fa:fe:fe:8e:e4:72:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=782a482b-cbbc-40c7-9782-45d2ad7c5181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:71:f8:2c:65:42:86:88:7c:4c:f2:84:50:
ef:eb:4b:be:10:49:d2:61:9b:3d:52:28:f7:f6:60:
5d:8b:e8:c3:ab:e1:38:ab:d4:3f:9c:0c:a1:9f:79:
0b:25:73:31:ea:f3:c1:50:cf:e2:8e:39:d5:de:96:
58:32:3c:41:3b:e0:fb:c9:38:c1:62:66:23:1c:34:
97:f9:6e:39:2b:54:20:0d:ce:62:d8:5d:d9:3b:97:
4a:a7:bf:f5:f1:5c:c3:38:8a:40:a8:9a:d4:97:b6:
66:26:e1:c3:44:84:45:8d:0e:2f:e7:bb:03:cb:37:
fc:51:a9:29:09:7b:60:83:f8:f0:af:35:e1:5d:78:
de:11:94:1d:ef:44:5e:3f:84:37:41:90:94:2f:48:
d4:6a:c3:d7:52:94:bb:19:73:99:c7:d3:a5:27:02:
45:bd:9e:8b:dc:d9:4e:4c:07:1d:24:f8:c5:e0:23:
e3:39:d2:cb:d8:56:85:0e:96:89:ed:79:34:64:20:
c1:df:12:e6:7b:f5:b2:82:e7:b7:f5:6a:e9:4d:c0:
9b:ca:0d:38:06:a9:e1:2f:1a:77:c4:e4:4d:70:41:
df:2a:1f:8d:76:cd:08:78:29:40:7f:ec:05:14:02:
b4:2e:d2:5b:27:bb:6d:96:69:13:2a:c8:04:19:41:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:89:DD:9D:E4:BC:0A:6E:68:7B:9A:59:DE:AC:1A:6F:AB:E9:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:8a:63:b2:3c:70:61:1b:eb:05:b9:8b:bc:bb:b9:5d:ba:3f:
aa:29:19:01:e1:18:c4:f9:42:1f:53:63:97:4e:aa:d6:95:a0:
6e:4e:0d:a5:ef:77:36:4e:98:c6:79:c2:46:17:c3:d2:de:09:
ea:b3:71:de:a5:06:cf:a0:e7:5a:bb:4a:a1:7b:6e:2e:02:7c:
05:53:ea:61:99:29:f0:a3:90:e7:13:5b:60:36:08:c0:37:81:
57:e0:ac:b2:a9:58:db:44:c8:17:9a:08:56:4e:a5:ae:bf:1c:
63:2c:08:e7:7a:2b:79:8b:04:b2:47:63:cd:9f:ea:48:45:39:
73:5f:5b:98:37:af:60:f5:3e:30:bf:b4:6f:88:c2:75:6c:19:
89:ca:ce:27:84:d6:45:da:8c:e8:dd:d1:c6:58:72:04:b2:3b:
d7:0c:85:5e:38:09:cf:81:0b:49:0c:e1:96:b6:b5:b0:fb:da:
42:0a:32:b6:91:34:c2:cc:a9:f7:57:ba:43:de:e8:b6:15:f6:
57:de:10:4c:aa:cd:d2:a0:62:bb:05:c8:ac:8a:5b:f6:07:23:
88:07:38:0c:ed:05:ac:6d:7d:53:87:96:5d:8d:d8:ac:94:be:
bb:e1:58:e8:3c:fa:16:a1:33:0e:65:12:f1:f7:7d:9d:49:33:
a9:4f:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:34:52 2025 by rpki-client