Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e63c4f6-7332-317d-97a2-1fe1553d2628.roa
File: 7e63c4f6-7332-317d-97a2-1fe1553d2628.roa (raw, json)
Hash identifier: uAJl8dho53QChaHtFR7C6wCkkwOQ8WiXacj47xiTrYc=
Subject key identifier: C5:0B:38:6E:85:9B:B5:76:72:CF:0D:66:35:34:23:0E:EF:DA:10:68
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B6FFE4444D53F75A36800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e63c4f6-7332-317d-97a2-1fe1553d2628.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6f:fe:44:44:d5:3f:75:a3:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5bbe4ee5-9a5a-4c76-9f82-0816ef2ae791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:57:d8:83:44:5f:f3:00:ba:0b:a4:1f:15:
fe:ec:e3:8b:d3:68:10:8f:fd:cb:fa:b4:72:30:5e:
96:40:e8:20:6f:70:22:16:d3:ae:f4:d4:d3:7f:b0:
a6:6e:0b:56:74:42:7b:f5:99:15:f3:5e:45:a6:c0:
83:d3:e3:41:24:18:de:8f:d7:30:37:81:d6:76:b5:
4c:5d:d4:53:63:21:57:6c:3c:c4:4f:21:56:fa:44:
23:06:36:cd:5c:0c:78:49:c8:44:a1:3d:10:e3:21:
02:5d:f3:b8:0b:5d:19:88:47:22:fa:6c:e3:84:94:
f7:b5:a4:44:98:ed:7d:27:ab:05:3c:a5:2d:12:db:
58:c5:f3:0e:fd:9d:48:3c:bb:0e:74:7b:ff:68:76:
0d:bd:3c:46:00:cd:98:58:97:dc:ba:54:e0:09:8d:
9e:cf:67:ec:b1:01:65:cb:20:14:f7:44:cf:24:09:
b3:a7:e7:50:3e:17:aa:05:fe:a7:96:b9:fe:d0:85:
15:95:be:98:14:3f:bd:5a:a6:04:ea:eb:ac:06:c3:
7b:2f:5a:e3:65:6d:9f:e0:76:1c:bb:ec:4a:df:87:
6e:d5:5d:c7:3e:8e:ab:9b:b6:29:da:77:f2:1c:c5:
97:a0:99:10:06:37:b6:27:25:ca:06:2e:ee:77:04:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:38:6E:85:9B:B5:76:72:CF:0D:66:35:34:23:0E:EF:DA:10:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e63c4f6-7332-317d-97a2-1fe1553d2628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:7c:d5:f4:59:76:67:96:0b:f7:df:4b:26:08:ea:6f:25:56:
21:9c:ed:9c:c5:e5:ae:5a:bd:8b:5c:f6:a4:d2:3d:18:1b:d7:
80:d1:4f:27:ee:b0:e6:b8:d9:3d:f9:49:b3:2b:79:ea:69:df:
8f:b9:a0:49:34:d0:72:c2:b6:d6:f0:68:26:b3:28:6e:40:1b:
2b:bc:16:e7:20:98:fb:49:8b:10:71:88:f4:6e:42:45:04:b1:
3c:b5:91:b4:96:f2:f0:57:42:93:10:b7:65:20:93:87:af:56:
d5:71:8f:89:3b:e7:7e:ed:27:fc:38:d3:63:91:78:bd:2f:14:
39:11:0f:71:2d:70:41:57:88:70:6d:c0:95:43:f8:d9:ef:f8:
8e:67:be:7e:da:fc:c9:4e:e3:20:f2:a7:da:f5:20:ef:d9:d6:
cb:5c:d2:2f:0e:0d:44:3e:d4:12:2a:8c:ee:e7:5d:1f:c0:4c:
53:c0:ae:2d:63:a5:ed:02:23:4e:fb:e8:9d:5d:91:1a:8e:9d:
ff:17:48:7a:5c:d0:0b:a1:8c:2c:d4:40:e1:9c:ad:87:c2:64:
12:89:1f:0b:17:f5:2c:93:68:95:f0:ff:c7:3d:d4:4d:a5:45:
be:18:b5:66:08:a7:be:43:71:a0:c5:d7:75:0e:57:41:49:de:
72:76:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:15 2025 by rpki-client