Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa
File: 7834dcf2-c3a6-3c09-83b3-46d136891b88.roa (raw, json)
Hash identifier: aUByKFqzwaWlJzbQckax8fQFaP5Ge3ck99iBYvg/amw=
Subject key identifier: CD:F7:9F:9F:3A:87:06:8B:A7:92:43:9F:97:D0:32:7F:04:26:61:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848021511CBA1F0EAB872203900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:11:cb:a1:f0:ea:b8:72:20:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=a23e21a8-2092-418f-a239-5c7bd2b5eefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:b1:92:95:5b:45:44:82:d6:b3:1c:ed:11:
eb:56:d3:8f:2a:09:dd:e2:df:3c:86:aa:cf:54:c9:
85:a2:62:40:76:0d:0e:5e:1c:4b:32:18:80:6f:3f:
2b:55:d2:2b:d6:a3:3a:fa:dd:95:dc:03:c0:6d:21:
69:35:5c:59:6a:cc:6b:c0:bb:5a:b0:d8:98:47:1e:
4b:a5:93:f3:15:58:1f:67:e4:14:4e:de:96:a8:dd:
9a:28:6a:35:a3:f1:ea:54:d5:ad:35:a3:46:77:ff:
ed:0c:e8:fb:54:c6:51:6b:b1:7a:42:8c:e0:fc:a6:
7b:15:d3:35:fd:c3:83:02:24:c6:c5:00:07:ec:6d:
0d:ab:ef:51:31:21:54:c0:22:5e:68:00:c5:86:4a:
63:e3:8a:07:6d:88:1f:2d:88:be:ce:17:92:55:b8:
90:bd:ac:2c:87:af:d5:f8:51:0e:56:23:9b:2f:31:
9a:91:78:2a:cc:ed:9c:67:56:ec:ef:67:09:76:7a:
5b:2a:d7:35:83:81:be:7c:b5:ca:83:4d:12:26:0e:
83:21:35:3b:c5:06:3d:2f:02:04:50:e8:b5:ac:98:
b3:ce:2e:2f:3a:b9:61:6e:9f:a2:bb:3c:6a:00:4c:
25:bf:1b:e5:f7:56:00:2c:ca:5c:a7:3b:81:4e:44:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:9F:9F:3A:87:06:8B:A7:92:43:9F:97:D0:32:7F:04:26:61:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:55:b8:31:e7:5c:af:a9:6d:c1:a8:46:1f:93:4d:77:02:6b:
e1:fd:7f:ce:73:ff:12:1b:8d:75:a0:43:9c:6c:7c:83:21:b4:
fd:5b:aa:1c:66:82:8d:44:b6:99:9f:70:20:9f:61:24:fe:d6:
08:eb:6d:e9:a4:c7:04:ed:da:bd:fc:63:ef:4b:01:24:9c:52:
9a:da:08:8a:7b:3a:be:52:ef:f3:c0:52:18:b0:32:01:27:59:
31:f7:ff:89:b7:59:5e:bb:a7:9d:7f:19:5e:eb:31:50:cd:f3:
ee:21:4e:b1:c2:4c:43:a6:5f:76:76:d4:0c:7f:cf:d3:72:af:
6a:29:e9:de:ee:ae:b7:bc:b2:99:36:26:ba:25:56:ef:5f:43:
a5:8c:90:3e:ab:fd:04:0e:8a:0c:d1:cd:ba:9e:6c:9b:e9:88:
f2:39:8b:6c:03:9a:a8:bd:2f:90:7a:10:79:79:a4:0e:66:e2:
3f:bf:1d:3d:42:0e:ae:0d:bc:4f:81:b9:35:46:56:7d:b6:20:
d7:11:ce:69:02:d2:94:83:02:fd:83:ca:62:a5:9b:05:16:72:
f3:27:fd:57:eb:7b:6c:30:9f:da:39:50:17:91:2e:fd:b4:75:
3d:b3:bc:cd:ee:7b:c3:9e:78:82:0b:e3:b0:51:c3:bf:d8:bb:
04:d1:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:31 2025 by rpki-client