Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa
File: 9a77e582-a25b-3deb-82c7-35a938a9f125.roa (raw, json)
Hash identifier: KCj07t1b9CG53FEY8NaklFcuCqVw4HHlcksHtIq/ByU=
Subject key identifier: AC:C5:0A:67:4B:45:75:7A:9E:20:96:E5:1F:71:18:83:07:41:E8:98
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB5682F1C2FC7F403B8F1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 63949
IP address blocks: 172.235.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:68:2f:1c:2f:c7:f4:03:b8:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=75262a0e-b29d-4f6b-8764-3691f1870bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:28:ea:b6:ad:97:e2:8a:ba:5c:4d:8c:1e:
85:94:79:b3:6e:b9:80:7b:49:c1:1c:7a:07:f8:2a:
4b:18:1e:d2:e1:28:ee:4b:f9:72:5a:9b:af:75:9f:
3a:1d:01:1f:60:5d:cd:1b:09:10:bb:54:a1:96:3a:
bf:0b:38:b8:58:b7:a5:e1:2a:bb:31:a7:55:39:01:
79:a2:cc:a0:8c:84:47:81:34:48:a2:0e:1c:6a:a9:
16:8f:79:6d:6f:2f:ed:4d:81:79:1d:d9:78:04:79:
02:07:78:6e:13:cc:8b:30:7f:37:41:89:38:47:8e:
08:4f:39:d4:c1:00:2c:1c:f7:17:a5:d5:a2:ad:17:
c9:90:a2:a3:f0:fd:2c:11:2d:1d:a3:89:47:ac:27:
2b:4e:7a:7b:f9:70:70:04:a8:a1:b6:97:e0:97:1c:
79:74:08:40:bf:1c:7f:61:6a:f8:5c:f5:a6:f4:c7:
d9:1c:c9:35:b7:27:22:61:77:f9:cd:45:d1:12:ca:
57:12:58:48:d4:c5:c7:36:05:8a:47:c2:ea:b1:3d:
14:5c:be:cd:50:da:72:fc:e2:66:b6:08:c9:96:3b:
ca:96:95:d8:db:a9:f3:90:ad:36:3f:ab:26:ca:7d:
d9:ee:e2:fb:65:8c:69:7c:98:e4:48:e4:7d:fe:8a:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:0A:67:4B:45:75:7A:9E:20:96:E5:1F:71:18:83:07:41:E8:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:12:7d:cc:47:cd:7c:52:5b:59:9a:48:d8:02:f3:5a:83:0c:
de:f7:51:f4:83:df:71:ee:c9:23:f2:8e:a7:19:3e:5e:51:80:
78:eb:d2:76:64:de:b5:09:c7:ba:5e:22:22:96:f7:e8:3e:52:
1a:b2:04:62:71:a5:ac:58:9b:42:8b:89:03:e1:41:67:e9:53:
c4:a2:b8:91:11:19:d5:0f:5b:ad:d9:19:2e:1c:24:60:d2:2f:
fb:09:b8:9c:aa:a6:a6:4b:cb:be:d4:54:7d:b9:b6:4e:ac:b0:
51:8d:b6:76:d4:d1:4c:e8:53:56:0e:34:cd:20:e1:d8:fd:9f:
7a:68:6d:ff:2a:07:14:3e:bf:42:14:91:69:06:17:d7:b8:13:
8a:66:71:43:e8:3f:1d:d0:fd:1c:df:17:57:82:87:e0:bb:25:
d2:1b:93:4d:2d:c3:4e:23:2d:2f:cc:00:e7:18:da:1c:5c:ab:
1a:de:af:f6:49:ff:84:c8:a9:84:0c:0d:7a:47:17:4a:d3:65:
53:13:3f:64:5f:ff:87:e0:c6:4e:5d:80:96:b7:5a:53:a3:00:
ef:05:03:5b:ec:a1:85:e9:5d:6c:02:6b:d7:21:0a:e8:c6:15:
fa:94:e3:b6:75:33:7f:c2:34:d5:5b:96:5c:b1:76:3f:f7:e8:
08:3f:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:35 2025 by rpki-client