Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa
File: 945902be-2e75-355d-ba30-77f51e86f5da.roa (raw, json)
Hash identifier: rB8Hx/Mpr4ZDdbK9hVaqI8MIQPEEj714NjX6DfLc218=
Subject key identifier: D4:18:BE:F2:87:F0:2D:9C:86:32:E2:DE:11:B5:D4:57:BD:FE:B6:A0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51F91AB0C91A264AA9E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1f:91:ab:0c:91:a2:64:aa:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=d369466c-0748-4139-9c38-bf3be47ecde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:4c:c4:24:21:1b:83:27:f0:53:55:4d:56:
48:95:3e:a4:75:1e:13:78:f4:5f:8b:37:3d:03:bb:
2e:7b:de:e1:76:cc:4e:c8:26:63:73:fa:12:c4:ec:
23:96:f1:3c:bd:5a:69:4b:7a:ee:2a:27:43:92:46:
01:f2:72:41:64:37:1a:0d:1b:ac:af:13:4d:6f:4a:
7c:eb:45:1a:9a:c6:58:3e:5d:cf:97:d6:19:86:62:
43:59:d3:23:b2:b5:c7:02:8a:6c:ed:46:95:bb:a2:
bd:12:f0:9f:27:7e:c5:2f:4a:94:39:29:23:e8:5e:
c2:9b:b4:62:92:2c:3b:70:30:f2:c0:53:e4:3d:fd:
4a:51:79:db:d5:1b:56:be:47:5b:9d:df:4a:49:64:
fb:14:28:56:7d:4b:fd:91:c4:a8:7e:52:58:f2:02:
6b:e4:a6:37:b6:b8:45:8e:e7:a5:c5:1d:a2:a7:6d:
81:d3:4b:c6:07:b5:75:91:d8:72:ee:63:10:6e:bd:
12:12:6f:01:63:3a:3e:47:33:2d:53:ff:91:fd:1c:
ce:78:94:43:68:1a:34:76:bb:ed:78:08:1d:38:e2:
e7:85:e5:5a:c4:de:9c:28:52:5b:41:5c:1c:8e:24:
f8:9a:c6:01:2b:a9:a9:cd:c3:14:5d:ae:87:d6:56:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:BE:F2:87:F0:2D:9C:86:32:E2:DE:11:B5:D4:57:BD:FE:B6:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/945902be-2e75-355d-ba30-77f51e86f5da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:55:66:d5:da:eb:c4:fb:10:6d:af:3f:ea:48:e1:00:16:2b:
96:c7:c1:c3:6f:97:02:f0:e6:7d:ca:39:44:38:ad:d5:7a:4d:
ec:15:05:8e:62:01:f6:3b:ee:70:a8:3b:6b:71:25:27:53:be:
84:12:c2:8b:bf:22:a8:e4:8c:25:5e:f5:83:e7:39:3b:cf:ae:
d1:0b:55:5e:42:70:04:f3:40:5f:8d:2e:a2:3f:f9:bf:9d:b9:
46:ba:88:5f:ce:01:dc:04:b3:c9:df:7e:18:a2:f7:03:bb:4a:
13:cd:eb:e1:2b:e2:75:1a:7e:14:32:c2:02:57:83:70:28:06:
d8:32:e7:37:03:14:f2:93:0b:5a:74:85:4d:2c:7e:ad:95:c9:
e0:3b:7e:1e:8e:5a:e2:75:ae:0e:3f:b1:45:63:a6:1b:ac:19:
d1:8a:55:b1:60:1a:5f:32:af:7a:34:6c:d5:48:6b:c5:d9:b4:
cc:33:9b:59:de:ec:b8:9c:97:86:a1:c9:1f:69:73:87:44:68:
06:d7:eb:d1:bf:7c:2f:3b:a7:ef:44:7a:16:63:30:79:a9:48:
aa:68:29:e3:ae:7c:13:f0:02:48:b8:e7:e7:79:7c:9a:bc:07:
13:53:45:8a:39:92:59:2f:a8:4c:dd:11:f7:19:ee:bb:32:7a:
b9:60:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:14 2025 by rpki-client