Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa
File: 8dca6e30-e5ec-3a17-ab58-0740102380f8.roa (raw, json)
Hash identifier: 6EkopyWgFsDCiMW1SvW9eUdc9sc9m/UEv5GWM0n2bBg=
Subject key identifier: 8F:5A:34:3A:12:C1:F2:D1:2A:23:6A:CD:AC:3B:19:B5:DC:0D:98:C8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9CE4F1B145A7C94AFCE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:e4:f1:b1:45:a7:c9:4a:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=c09706c9-17b4-47c8-adfb-91c69a0759c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:99:b7:d5:d7:82:d4:42:92:6f:d6:22:dd:
40:77:3d:0d:f1:57:e0:12:4c:ea:78:c5:01:06:58:
ee:06:88:d3:95:c2:59:55:45:29:eb:d3:ca:f5:0f:
8f:3e:91:d8:a0:89:7f:94:57:36:72:23:ed:31:ce:
35:d9:cf:99:48:fd:18:49:1d:df:ff:5a:06:b4:69:
2e:0b:c5:41:91:25:46:51:bf:af:29:e2:25:6f:d8:
6f:4b:0f:27:b8:14:6d:8b:0e:59:ac:d4:52:b1:5f:
27:2e:d1:cf:79:62:9b:3c:ec:31:04:6c:7c:94:17:
cb:0e:81:e4:b5:33:bc:59:98:3c:87:29:44:ba:43:
02:e8:09:87:fe:c2:cd:73:93:e9:76:80:6d:5f:9b:
1b:c3:f7:44:f4:cd:5b:32:7a:70:26:3b:59:dc:cb:
9b:2c:17:52:3c:d2:2b:61:16:64:ee:f2:9b:46:2d:
61:47:0c:36:e3:82:3c:8b:0b:d8:d9:a6:f3:8a:98:
aa:99:6f:34:d9:d1:9f:91:95:a1:3e:f6:53:03:4b:
0d:d4:c8:cf:80:dd:a3:5b:6e:6e:9b:2d:2c:ba:e0:
d7:e4:1d:70:ce:2d:96:c5:8e:e9:f9:2c:60:68:35:
d6:5d:8c:8c:84:5a:87:a4:a1:f0:5e:fe:b0:0f:8b:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5A:34:3A:12:C1:F2:D1:2A:23:6A:CD:AC:3B:19:B5:DC:0D:98:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8dca6e30-e5ec-3a17-ab58-0740102380f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1a:5e:66:9e:8e:d8:41:13:39:8c:f7:19:36:e2:62:1a:4a:
19:f9:71:b1:f4:88:17:47:d4:71:33:cb:e8:87:7b:a1:12:33:
cc:32:07:05:30:4f:b5:2f:a7:3e:af:f0:ec:4f:82:2f:b3:c3:
5b:52:7a:d5:e1:8b:20:be:1e:58:c4:65:a1:98:38:be:b2:48:
54:f6:7e:d1:7b:d6:98:52:fd:fc:1d:db:ae:42:f1:b4:d9:b3:
8b:7e:10:86:5b:e0:c1:8a:1c:a0:08:58:6e:6f:44:3c:a1:5c:
71:a2:0e:55:a4:22:22:8f:7c:01:d8:d9:86:45:cc:e7:2d:09:
5f:48:54:a9:d6:c4:37:6d:d3:92:10:b2:1d:63:3d:a6:29:d7:
37:e8:58:da:21:1b:1a:24:23:68:86:5b:d1:1a:46:aa:5b:53:
22:b1:c5:70:85:69:ba:2d:b8:cf:e2:ed:1e:46:ba:57:f9:49:
d9:cb:f4:e4:98:b4:5f:43:86:28:c8:d1:c3:a9:63:95:e2:a4:
18:a1:ac:9e:25:35:eb:80:3a:f9:93:64:68:18:35:dc:25:05:
50:10:09:8c:b6:2b:e4:83:60:9b:d4:7a:e9:91:64:d2:16:c3:
7f:80:80:f8:54:c8:6b:5e:e7:da:38:20:44:07:e2:df:39:29:
7a:71:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:42 2025 by rpki-client