Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
File: 649189b4-bfc0-35b4-931b-45e2843949b0.roa (raw, json)
Hash identifier: QibGshidwuxYi9zbs40inmKToyJpGdvy9NDokM5DtCk=
Subject key identifier: A1:44:97:AF:90:9E:37:1A:93:A9:49:91:4E:37:1D:30:E8:35:4D:B6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A50BAEB52826A8BCD0080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:50:ba:eb:52:82:6a:8b:cd:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=888192f3-ce63-4e4e-b966-aaa249241c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:be:61:a9:db:0e:c2:2d:5d:dd:e9:a8:7f:
37:12:0a:02:ab:11:99:ec:34:90:cb:96:8b:10:91:
72:c1:97:dd:e6:da:d3:3b:a4:01:3b:ca:fb:70:55:
07:79:e1:0f:c3:69:54:91:18:5c:e7:b6:d0:cc:7b:
84:c5:9a:6f:a9:fb:66:a2:20:ef:f4:db:7f:95:ba:
74:ff:38:a7:81:08:55:9d:2d:ad:35:79:b1:0d:68:
da:d0:89:7b:ff:2a:c0:ab:f2:f6:52:1c:4b:52:19:
21:fb:0b:71:bc:40:d0:68:f4:12:41:e1:d0:7c:bb:
a7:6f:aa:34:02:38:d6:1f:8f:06:59:eb:a9:b4:c4:
fd:88:54:72:6d:96:b5:7b:90:d5:00:e7:53:0c:05:
69:7c:3c:15:93:d5:bf:2b:ce:25:66:56:af:7b:52:
46:25:d8:47:4d:3d:6d:be:e2:6e:0c:4c:bf:d2:dc:
4d:c4:91:92:b8:09:a6:f8:9d:18:f3:9e:11:51:10:
75:40:9f:50:d4:8b:ca:60:42:b4:c2:1c:fe:c5:2f:
04:32:90:be:f7:ab:4c:55:e3:77:b7:53:b0:a5:6c:
4f:a7:fd:81:56:2d:7b:3c:bd:5d:c2:fd:5b:47:b5:
37:5f:9a:b2:d4:e1:5a:ea:c9:36:c7:c6:39:ad:9c:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:97:AF:90:9E:37:1A:93:A9:49:91:4E:37:1D:30:E8:35:4D:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:2f:55:e6:ef:bb:f2:41:d5:d9:d6:2c:78:17:ac:c7:27:3c:
a6:fd:05:42:0c:fe:f2:8e:c0:da:aa:9b:41:b7:98:1e:b4:d9:
34:55:e9:c3:b0:ac:56:98:0c:fc:03:47:f6:db:95:6b:11:ab:
99:96:db:f2:18:7a:a2:02:cc:79:da:2f:71:df:90:45:d3:d0:
32:ac:cc:cc:67:3c:72:95:20:1a:07:95:28:a5:a5:b3:89:ea:
19:07:c1:ba:83:2f:c9:d2:e9:3e:9a:62:e7:22:cf:d6:b5:3d:
29:7b:4e:48:14:5e:cd:ac:62:e2:4c:97:ba:ba:56:fe:ee:22:
e6:e1:77:9e:fc:c9:a8:0b:a1:51:1d:6a:58:0d:b9:8b:ad:33:
e6:95:c9:1c:97:56:e4:18:bd:2c:09:a4:58:64:7e:89:44:c1:
96:e1:b3:a8:53:7d:be:9a:9d:0f:ee:fc:cc:5d:05:09:ed:eb:
23:c6:d8:66:0c:a8:74:65:19:61:e1:18:af:e6:41:3b:31:2b:
a1:55:4b:89:ab:e4:ee:91:64:3f:92:a5:25:0f:4e:af:37:ec:
87:30:ec:2a:dd:32:db:5c:a5:90:ee:2e:2d:b0:c3:4c:bf:41:
2a:b0:40:79:13:dc:0c:1f:75:8e:03:8b:bd:d2:06:f6:7a:59:
26:a0:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:55 2025 by rpki-client