Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa
File: 7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa (raw, json)
Hash identifier: 4xfU5C1tZ3YaPUXc3GLzUf/ym5bk0rl11wKXoTMrpX8=
Subject key identifier: AC:89:72:8E:A0:19:4B:4D:D6:6D:ED:66:29:18:92:39:8A:D3:54:B2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CDF1D89E3F851EE05DC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:df:1d:89:e3:f8:51:ee:05:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0cf3520b-a28b-4bac-bedc-2f6441661be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:1a:f9:03:f6:b1:6a:f6:d3:b2:68:49:aa:
a8:46:59:08:ba:2b:0b:d9:35:d4:3c:9e:9e:35:38:
98:d2:4d:cf:47:be:c2:53:b7:4e:dc:db:ed:b6:70:
67:73:c6:d1:ed:03:cf:c4:35:49:30:6c:18:1c:a9:
87:43:47:fa:23:f8:de:f8:1d:3b:53:07:5c:70:ea:
f6:f6:de:12:32:3b:53:9c:ac:8b:0d:0b:5d:3d:08:
fb:8d:a5:9a:06:00:46:1c:fe:15:fe:71:54:74:3d:
43:fa:f5:1a:06:08:46:09:4f:61:1e:69:4e:f2:1d:
ac:f2:36:bd:73:dc:2b:63:44:85:a0:d7:04:59:76:
d2:0f:fd:11:7b:c1:21:e2:59:38:e3:4e:7d:e9:1f:
7b:f7:70:33:c1:8d:65:e9:c0:95:05:c9:54:1c:57:
6a:c1:47:85:9e:86:5b:db:9e:ee:46:72:69:90:01:
8b:eb:26:b4:07:ae:f1:d4:1a:44:e4:74:45:d2:3c:
e1:1a:1d:a2:88:8a:9e:2c:ce:58:19:4a:38:79:5f:
f4:96:93:83:d9:dd:a3:fe:6d:3b:ee:0b:e3:8b:b0:
93:70:f8:3b:4e:66:50:68:a3:cc:b3:eb:68:13:9e:
85:f2:eb:22:73:f3:35:f7:4e:aa:24:42:5e:0c:98:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:89:72:8E:A0:19:4B:4D:D6:6D:ED:66:29:18:92:39:8A:D3:54:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:31:08:52:65:b1:29:5d:22:10:64:3b:9c:f8:cb:cf:b6:a9:
23:7b:e2:b0:9a:08:23:23:e3:02:2f:f3:54:55:4a:bd:5b:7b:
93:69:86:96:92:fc:2a:55:fd:6f:46:f7:cc:a5:72:b1:69:1b:
ac:cf:38:87:c4:f4:aa:a8:8a:75:e1:68:a3:cd:c4:5b:3d:37:
f1:14:15:59:ad:d0:3b:fe:9f:34:c2:9a:8b:8d:fd:01:58:a6:
24:05:4c:22:35:24:55:7b:49:ea:e7:60:59:11:9c:64:40:be:
3d:2c:28:b9:10:8e:50:f3:c3:e4:a7:23:32:84:ce:b2:e1:e8:
5b:05:ab:f2:54:9b:86:3b:97:1a:1c:1c:46:d9:18:34:5a:71:
cb:e7:8b:85:37:33:2c:03:da:e1:30:f2:83:53:76:1e:7f:97:
20:69:b5:3f:a5:1c:f6:bb:2f:af:2b:b6:1e:69:5c:33:09:2b:
a9:21:6c:97:b4:d1:e0:be:1c:9f:8c:6b:97:34:cc:0a:82:e6:
5d:22:f7:8f:cb:f7:a3:12:36:8e:93:83:65:af:ef:c1:94:79:
d4:72:99:8a:a1:46:d2:01:be:1f:0a:8e:cb:e3:0c:36:9e:4d:
92:df:52:b2:12:fd:b3:81:9e:b9:d6:ea:8a:2a:c3:49:4e:de:
46:71:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:24:22 2025 by rpki-client