Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa
File: 970cb531-2a50-39b8-9486-6ed2b0b9d958.roa (raw, json)
Hash identifier: CfgMDP+ZGlMMoEWXVrs2iMVIZTjvf92ZbWNqWL6BbTA=
Subject key identifier: 47:69:CF:5F:92:C4:EA:CA:67:28:1A:4B:E9:4B:54:A7:4E:7C:E5:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584802150F7F6A0D90B2790F0EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0f:7f:6a:0d:90:b2:79:0f:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=6d4b39fa-1a34-465e-b8d8-2d0e7f10a81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:01:8c:ae:ee:7c:de:41:d1:f5:ed:e7:b5:
c6:3d:2c:92:db:de:6a:9e:3e:e3:f3:5e:ec:2b:f6:
55:96:86:37:2f:0d:09:4d:c4:ed:f7:21:c2:ef:ce:
dc:04:f4:5d:a6:da:ee:06:27:17:33:66:5e:0e:ef:
5f:48:70:9d:57:9e:20:df:b0:55:41:03:78:d1:6a:
5e:aa:38:46:5d:b4:da:ae:26:df:ae:bb:17:58:8e:
a1:7d:c5:fb:21:4c:e4:7e:bc:b8:b4:81:20:78:90:
df:e9:7e:ed:92:af:18:56:8e:03:59:51:cb:30:bf:
b8:ed:1c:ec:c0:fe:69:47:d6:0a:de:b2:98:14:eb:
66:b7:2e:40:d5:49:2b:1f:fc:1f:15:db:d0:0d:8d:
74:64:6d:6c:a7:ac:15:a3:24:be:93:cc:c5:53:ce:
59:fa:0c:dc:61:5f:d1:b6:e6:bb:af:5d:1c:48:5f:
c4:67:87:66:ca:f1:ff:32:b4:73:90:96:cf:26:37:
3e:e3:b1:d4:2a:95:f4:ac:16:10:d8:28:a1:f3:94:
69:51:45:92:39:c5:55:7e:2f:f0:70:91:93:40:7d:
c2:15:e7:10:86:7f:fb:13:e0:1e:82:cd:4f:22:73:
8c:c9:e4:7e:95:77:92:08:c3:56:96:73:d7:7c:c9:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:CF:5F:92:C4:EA:CA:67:28:1A:4B:E9:4B:54:A7:4E:7C:E5:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b8:19:69:a3:d4:37:bc:79:80:d9:4f:8e:1a:c0:64:83:80:
e2:a2:5d:61:7e:31:5e:e5:f0:77:47:0f:12:72:f8:c9:a9:23:
ea:b2:cf:38:42:70:29:b6:6d:8b:9d:77:88:53:04:35:77:87:
08:d2:db:37:13:d2:cd:19:e7:4d:00:19:95:98:6f:dc:21:83:
0e:cb:10:15:07:0f:2f:29:c9:ce:11:2c:5e:a9:88:53:6b:88:
34:dc:db:b6:de:6c:90:e6:53:ce:06:48:6b:81:67:00:56:5b:
88:ce:49:a1:a3:c2:a0:14:ea:c6:55:a1:ad:66:de:3c:b3:be:
d7:5b:ce:d7:a2:30:34:92:9d:50:90:75:61:eb:ed:cd:d9:07:
8c:8c:db:a5:1b:ba:17:21:c7:9f:26:5e:ce:d6:0d:37:54:b4:
26:9c:9f:4d:b2:e5:dd:69:ed:7b:f4:66:3e:0b:37:41:38:1d:
3e:76:ef:48:3e:46:65:9d:28:d3:bb:5f:1a:e2:6c:51:fd:19:
1f:ed:11:f9:6b:b0:a4:20:0d:ff:26:c2:b5:4a:d2:fd:3b:30:
61:80:b7:45:7a:b9:4e:83:c6:ef:e7:3b:e7:ab:f0:23:fd:d3:
3f:f9:bb:78:cb:14:39:2d:9f:a7:66:d6:56:7d:bf:f4:80:df:
ed:db:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:30 2025 by rpki-client