Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
File: 94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa (raw, json)
Hash identifier: gu9538K99gxW++0wQrQuqZJNSubMe4exZU87yNUgKeI=
Subject key identifier: E2:F3:6D:C3:EC:E8:F4:E3:23:2B:05:7F:47:79:2D:F7:82:95:6B:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9C90EB4B839787561580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:90:eb:4b:83:97:87:56:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f4e166e3-19fe-44b0-a144-cf0a07699fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:8f:c9:3d:38:67:e7:41:c0:03:4c:6e:29:
3f:be:9f:97:83:54:e2:5e:ed:c0:24:a8:37:65:cd:
33:e0:f4:85:cc:26:81:39:d2:25:00:6e:00:a9:3f:
c9:0c:f2:a6:e9:eb:77:69:66:26:14:c5:6d:c4:66:
35:3a:d0:70:44:d4:a3:a9:36:47:35:94:65:2a:24:
dd:81:d9:04:d1:2e:dd:f9:b5:36:8a:9b:aa:c7:02:
76:68:87:38:e6:02:cb:49:a7:9d:46:46:cd:f6:da:
14:10:17:bb:72:25:0b:d9:dd:2e:93:3c:a3:b5:55:
cf:c6:b1:37:4f:3c:f0:21:ed:c6:aa:5f:b1:08:14:
0f:99:1e:f3:7d:8e:34:8f:b4:49:e2:b7:ed:a8:d1:
e0:dc:8c:9b:95:0b:68:2d:97:e8:c3:39:72:ef:bd:
b1:01:63:db:ca:8e:d7:9e:c8:bc:2e:64:f5:2b:e9:
35:69:59:79:3b:62:41:d9:5a:85:07:7f:28:ed:6f:
b1:f9:45:fd:7b:ec:86:87:51:55:25:53:fe:c3:13:
7b:d7:75:6b:9a:1b:44:5f:3c:ff:61:f6:2f:50:d7:
20:60:74:c5:aa:86:96:26:a6:3b:05:fb:d1:72:e0:
10:8e:db:8e:1e:89:7b:04:51:a3:a6:75:1b:2f:52:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:6D:C3:EC:E8:F4:E3:23:2B:05:7F:47:79:2D:F7:82:95:6B:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:01:52:a0:5b:f2:aa:aa:f4:9d:55:f2:35:3a:c7:1a:12:54:
01:7a:a6:8c:c0:44:55:cb:a2:0e:82:39:b3:96:fc:8f:b2:84:
06:cc:a7:9d:c7:4d:90:93:fc:58:c2:21:78:f9:32:3c:c4:dd:
22:e9:ae:83:e8:be:86:d5:48:37:b9:6c:80:48:11:92:37:ee:
6e:04:09:a9:f3:15:3f:05:d5:da:f5:9b:97:6b:a5:7d:8c:db:
3e:e9:fb:2d:3e:25:13:bc:0e:6a:49:14:b8:02:9a:c7:f8:f8:
26:be:c2:91:0b:6f:25:b2:78:c0:aa:8e:13:6e:fc:b6:47:1a:
9e:e7:e0:58:e1:12:bb:0f:2a:70:44:84:f0:b0:b8:d2:46:3e:
3e:62:53:ab:40:95:a1:2f:ef:ef:fd:a5:87:83:18:5c:f6:61:
ca:1f:5a:52:83:74:46:5e:0f:f8:e9:16:6e:0a:b0:46:a5:7a:
5d:da:ef:e6:e2:c0:5f:a2:29:d9:9c:db:be:0c:e3:57:43:c6:
85:68:33:5d:17:ac:18:7a:cf:0c:62:1c:97:81:2c:57:8b:cc:
68:32:f9:4e:02:8d:4b:8f:88:6a:65:01:6a:bd:0a:94:d6:a7:
96:fc:af:45:8c:fb:e9:40:bd:8e:32:2a:1c:88:1c:a1:e0:54:
b5:99:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:24:14 2025 by rpki-client