Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d01936-9614-3264-98d1-5dd875e9bf93.roa
File: 80d01936-9614-3264-98d1-5dd875e9bf93.roa (raw, json)
Hash identifier: 8v2ycZKNg8RJm1mrYjqJiwHLFaU9+nVs98f97ULB6YA=
Subject key identifier: 84:ED:6C:21:5E:A8:23:A2:67:C8:2E:A8:41:30:C9:EB:E1:09:85:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9847B40B86A3EC3B5B60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d01936-9614-3264-98d1-5dd875e9bf93.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.224.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:98:47:b4:0b:86:a3:ec:3b:5b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=10e054e9-c7cd-4d61-8d7e-2fa3c0740151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:52:6d:c9:93:31:f0:08:a4:0a:47:35:ee:
85:a0:e8:a4:e9:ee:14:81:38:73:c3:c0:be:e3:c6:
3d:85:40:85:5e:93:cf:88:70:57:33:74:d7:d8:68:
33:9d:7f:09:02:16:a7:01:0b:64:02:71:7d:bd:54:
5b:1e:ba:e4:fd:59:a0:90:71:c5:fe:a8:24:15:c5:
ed:cb:72:48:93:67:bd:93:89:3a:01:83:37:84:04:
1c:cd:36:06:5f:2c:45:be:67:2a:89:79:43:9d:63:
70:0d:16:5e:01:5f:92:5e:c0:65:8d:29:38:db:8f:
ff:fb:86:3b:7b:59:5c:df:01:50:3e:9a:44:fc:46:
4b:a5:6e:89:b9:eb:44:c1:63:ce:cf:68:60:cb:ca:
89:d2:a6:ff:6a:1e:27:29:ed:69:d8:e7:54:4f:a0:
d8:6d:ed:0d:85:3c:47:3e:dd:91:05:fc:ad:db:5c:
23:a0:7a:f4:5d:95:58:e1:ea:bb:59:80:9c:6e:b3:
11:09:6e:3e:b9:19:1a:84:df:9d:03:de:b5:e4:c5:
f1:d8:f1:a8:72:1e:5c:c5:dc:31:fc:4c:74:64:22:
8d:e2:0c:6c:3c:d0:6a:6b:da:45:34:e7:39:49:40:
4e:42:03:5c:49:bb:b6:1c:ac:0f:de:85:63:a0:2e:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:6C:21:5E:A8:23:A2:67:C8:2E:A8:41:30:C9:EB:E1:09:85:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80d01936-9614-3264-98d1-5dd875e9bf93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:71:93:f2:9d:eb:0f:cf:b8:85:89:32:ba:bf:5b:42:84:85:
13:e1:b5:67:65:5d:0c:fa:22:6c:dd:fb:18:65:a7:cd:05:09:
b9:6e:e8:00:db:75:17:04:12:3e:3e:79:1d:1c:d6:72:99:b0:
d2:c9:b2:f9:49:e0:1d:51:70:08:37:b5:30:bb:26:81:41:ee:
eb:bf:e2:bb:6b:31:95:50:5d:ba:d2:16:24:a4:98:4e:43:7c:
4b:6a:ea:b5:e4:7b:4c:13:bc:82:60:f1:3c:32:5c:54:dd:9c:
42:77:51:4c:b6:57:4f:7f:90:a4:20:de:8e:d5:7a:d9:73:22:
ff:67:4d:2f:c4:cb:60:2d:f3:c1:88:84:e8:9e:45:04:93:17:
eb:50:79:b9:6a:84:4f:d5:56:ee:c3:aa:a5:09:d1:34:28:41:
dd:50:06:69:08:ae:fb:60:56:94:35:92:93:9b:3f:cb:0a:29:
7f:b1:9f:33:c4:40:16:99:d9:7c:49:dd:ae:6a:e4:cf:45:9b:
8d:73:3e:58:f8:02:a0:4b:da:27:4b:b4:14:8f:30:d8:ba:31:
5a:21:24:d4:d2:02:bc:22:fc:b6:e1:15:e4:1f:20:df:a2:d8:
ce:de:03:64:16:39:7f:50:2c:2c:63:4b:0a:03:9c:71:65:f6:
6a:64:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:08:01 2025 by rpki-client