Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6761b0e0-112b-39dc-b15e-a3e2feb481f0.roa
File: 6761b0e0-112b-39dc-b15e-a3e2feb481f0.roa (raw, json)
Hash identifier: Gl4Qz6es/mvJbeTfadqceBiSr9JL5dRHH32bz0ePxLw=
Subject key identifier: E7:C8:2E:1E:B0:26:A7:34:B9:0D:23:4C:AD:6D:71:B8:AD:D0:5F:1C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFE0BB1EF88B165BE6500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6761b0e0-112b-39dc-b15e-a3e2feb481f0.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:0b:b1:ef:88:b1:65:be:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=91324e4c-1b9e-401d-ab0f-d838d5993a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:b4:00:ed:33:fc:a3:84:34:64:a1:54:a6:
cf:e9:17:86:3f:44:14:5f:45:72:d5:dc:ad:45:e9:
57:b9:ec:2e:7a:3d:5d:6f:11:3e:58:f1:59:9a:f0:
86:2d:34:d0:88:ef:ef:77:f1:8e:d7:ed:54:96:0d:
5c:88:26:29:6c:ec:d3:8c:5b:17:25:2c:96:27:56:
0a:22:8a:de:d6:30:a7:17:39:61:c7:8a:97:d9:e8:
2f:3b:83:fa:52:0c:75:e7:c7:7a:fd:81:83:b2:92:
7f:b0:8d:a4:d6:51:eb:76:5f:ba:c7:b0:6f:94:ee:
87:59:40:bc:73:da:53:4b:3b:0c:d3:22:4a:66:11:
fc:c9:28:3f:d6:92:62:46:86:a3:91:65:78:8c:01:
3f:70:eb:c2:f1:14:36:b4:f3:1e:13:da:dc:f2:fa:
1a:13:36:cb:84:bd:5c:e6:c0:de:6a:ac:c6:24:4e:
2a:0a:66:db:13:8b:fb:1f:eb:21:8a:96:9e:bf:25:
c6:c9:6f:29:d7:31:ef:94:d2:48:9a:0b:c7:7d:11:
b4:5a:f9:18:02:9f:d4:5c:cd:14:6b:41:4e:29:1a:
5c:fe:22:5c:b8:5b:f1:37:51:b2:5c:79:dd:10:5f:
52:45:da:94:44:ee:77:40:53:76:a7:ae:ce:e4:59:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:2E:1E:B0:26:A7:34:B9:0D:23:4C:AD:6D:71:B8:AD:D0:5F:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6761b0e0-112b-39dc-b15e-a3e2feb481f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e0:a5:d5:e8:d0:9b:93:76:fe:e2:ee:9a:bc:0b:30:68:9f:
03:18:6a:0a:bb:52:fb:42:ff:11:15:ae:51:0c:ee:3b:58:98:
0e:b4:f6:f7:90:44:55:92:6e:76:74:56:7a:7b:eb:22:b7:00:
67:b4:53:93:0f:81:ba:77:30:e0:48:a2:93:09:6b:c7:e7:5d:
72:56:7f:27:0e:96:b4:1e:4a:fd:c3:2f:82:36:84:af:30:91:
76:fb:b0:0e:44:19:86:24:6f:10:31:d4:18:8e:db:9d:36:18:
a9:62:25:55:c8:ad:03:7c:60:00:9f:88:fd:33:7c:f4:1d:97:
06:df:58:00:38:06:81:ac:3a:db:ae:a4:87:1e:c4:20:c7:2b:
64:14:98:5f:a6:66:0d:10:00:4c:9e:2f:46:e2:2b:20:43:f9:
d2:51:c7:e0:ba:f7:8b:8b:1b:17:28:f4:d7:e7:97:4a:ff:ee:
b5:6f:ee:16:82:29:18:42:22:9a:51:8a:9c:92:b7:51:dc:33:
73:a9:d5:c0:8f:32:de:bc:ce:0b:58:35:1a:a7:4b:11:69:7b:
42:a1:77:fc:dd:65:a3:87:e6:99:fc:2b:b2:d8:89:8f:9e:c1:
73:51:de:c1:ca:c2:73:bf:8a:6f:56:96:79:51:3d:42:e2:73:
0f:6c:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:45:28 2025 by rpki-client