Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1b2fc9-15bc-32d1-a7d0-bef9cbf4489d.roa
File: 9e1b2fc9-15bc-32d1-a7d0-bef9cbf4489d.roa (raw, json)
Hash identifier: Vdwl8dyi/YXPrzaAVAljpk41kY5FagpPFWvfTfT4FT8=
Subject key identifier: B5:68:23:15:BC:36:AD:6C:17:3A:AC:FA:2A:1C:D3:9E:2F:AA:8D:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848021511D78642DFDC6B36AA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1b2fc9-15bc-32d1-a7d0-bef9cbf4489d.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:11:d7:86:42:df:dc:6b:36:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=3d75372a-c91c-4d3e-937b-1f7035f28498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:70:e0:71:32:84:0b:f1:74:59:14:e3:fc:
b2:5b:7b:3b:c6:47:58:20:77:f7:fd:68:45:fb:37:
b2:48:fa:3e:e0:e7:cf:39:ed:2f:83:e9:00:f7:bc:
58:5b:70:4c:1a:8a:40:2e:cb:b1:cc:6f:66:a6:52:
f3:e7:06:20:42:8f:e3:4a:2b:44:32:b3:f1:d1:93:
ea:39:9d:38:5f:06:a7:5d:34:7e:56:98:4c:12:ad:
59:c4:96:12:99:c9:44:0e:56:16:00:95:0f:3c:1a:
d5:c8:e8:1a:91:e8:90:77:27:3f:4c:91:88:00:30:
5d:d2:e0:57:45:8e:97:1b:1e:8f:e9:11:24:2d:a6:
2f:42:a1:86:a2:83:1a:09:1c:c8:66:37:09:40:79:
35:80:13:30:95:48:f1:96:59:f1:12:8a:be:fa:2c:
d2:75:1b:84:2e:93:82:fe:5d:64:b4:cb:2a:6f:51:
2a:5d:61:c4:f1:9f:26:68:c8:f8:85:80:d7:00:00:
3b:4f:0b:a2:19:ad:55:fe:ae:3b:32:9b:26:64:f9:
48:50:77:5a:aa:0b:09:a2:9c:4b:d7:0b:6a:7b:86:
0f:58:d8:85:ee:0f:60:b4:80:29:92:a1:9a:85:8f:
c3:63:e9:6b:0b:b9:89:51:4a:f1:71:3e:12:25:e1:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:68:23:15:BC:36:AD:6C:17:3A:AC:FA:2A:1C:D3:9E:2F:AA:8D:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1b2fc9-15bc-32d1-a7d0-bef9cbf4489d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ce:5a:02:3d:6a:f6:f1:52:bf:ab:83:33:ec:67:31:bc:cd:
3a:e3:40:d3:cf:2e:c0:7e:43:be:e4:de:2f:16:5a:2b:ea:db:
fd:b7:d3:ee:46:bb:2c:ba:98:4c:02:5c:f7:68:bc:f6:33:ad:
7a:e8:76:ff:60:6b:73:22:3a:9c:eb:67:1a:bc:a2:9c:b8:0e:
ab:a1:5a:53:85:2c:48:c5:33:43:5c:32:78:ba:6b:7a:74:d3:
ab:7c:55:23:b5:fa:26:7d:a9:14:e9:fb:f1:3a:67:1f:56:9e:
0a:ce:c4:45:82:cf:67:4e:b4:b9:cf:16:aa:8d:d1:13:9b:91:
77:57:5e:ee:87:19:5a:d8:18:e7:4d:e4:99:a4:52:db:37:74:
f4:6e:77:c1:c7:20:d8:b9:cf:59:d8:e4:3d:a6:2f:9b:63:15:
cb:49:e8:75:81:92:7a:b3:29:b1:75:00:d7:c3:dd:21:e9:da:
37:4d:e3:7c:26:63:32:49:1f:84:cb:75:2d:f8:1d:96:dc:32:
86:a1:f1:dc:6f:4f:11:0a:a2:08:a4:51:b0:5c:96:5c:a7:80:
fa:d7:24:6d:b9:81:eb:e0:f0:e9:69:1c:62:29:ce:88:07:da:
a1:b0:6c:57:cf:c1:9d:e6:11:95:6f:96:4d:79:b5:ea:fa:e1:
cf:89:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:48:03 2025 by rpki-client