Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
File: 9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa (raw, json)
Hash identifier: HsKie4Y8D42hs1ejmW4+sLowYEvzyYORpHDq8WQOzZ0=
Subject key identifier: C8:99:F1:7E:B0:11:F7:F5:69:B0:A2:42:74:80:E1:86:22:AE:A0:F8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51FBF2F961811697BF020
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1f:bf:2f:96:18:11:69:7b:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=37e910e2-63ac-4540-9844-1805d781f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8b:3a:e3:bf:ba:1f:25:23:a2:9d:40:1c:06:
b5:27:3b:01:01:a3:ea:cc:be:9c:92:1a:a1:98:d1:
d4:8e:6a:d6:a2:0c:7a:39:44:2a:3a:a8:35:c9:84:
1a:20:74:b9:41:fe:1e:c5:cd:11:ae:28:76:7a:de:
0f:1f:7b:d5:d9:cf:21:76:b5:20:14:73:a0:a9:1e:
27:1a:e2:bb:2f:34:0a:a1:4d:3f:0c:66:4e:3b:f0:
73:b1:39:74:30:2b:9e:82:b9:d2:6d:20:76:67:ba:
77:9f:44:b8:e6:77:75:6e:36:39:94:3b:c3:37:76:
a6:1c:a3:38:97:07:7b:5a:91:b6:2a:60:67:21:95:
aa:dd:80:8a:c9:6a:8c:11:19:27:b9:1f:2c:81:01:
47:77:fb:80:f8:22:51:25:a1:f8:28:77:b4:6d:db:
75:76:cd:a8:a0:16:25:23:c6:76:69:0c:d5:61:f3:
4e:16:3f:a9:1a:c1:21:3e:34:e3:55:3a:5c:e3:e5:
6c:4f:1e:9f:67:e2:90:28:a7:0c:b9:83:d5:84:37:
ba:e3:c9:10:1b:3d:0a:dc:3f:aa:8b:1f:24:f1:4d:
52:97:ab:36:43:be:2b:0b:ee:51:6c:5e:b8:8c:d4:
ee:23:a8:14:ec:cb:78:a8:c9:4d:0c:91:12:64:ce:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:F1:7E:B0:11:F7:F5:69:B0:A2:42:74:80:E1:86:22:AE:A0:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f4dc6e7-fe88-3bd7-b904-361b4f0babec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b2:24:c4:3d:b7:43:44:26:df:b2:8b:63:96:6d:b9:f5:44:
c2:69:a5:8e:65:35:42:da:6c:ab:97:7e:b4:15:f3:98:71:43:
84:aa:cb:c6:04:0d:78:ce:e2:28:4e:6a:5e:94:12:00:f0:ed:
ff:59:72:f9:e8:0d:41:e3:4d:6c:7b:64:fc:6f:b5:08:a5:c7:
0a:87:f6:aa:02:11:72:06:b8:22:d8:bd:77:fa:5d:82:e4:bc:
e8:4e:cc:71:15:e3:27:8c:5d:55:87:51:85:8b:8c:9d:69:8f:
19:bb:df:83:72:fd:0b:57:19:fd:f4:98:36:53:23:8f:52:af:
73:d3:7e:e0:da:14:d3:e8:2c:9d:8d:77:c2:b0:da:1e:f6:0c:
56:05:5a:70:f8:39:4b:df:40:0b:32:87:1f:84:f9:a4:e6:7d:
31:5e:df:0a:67:09:39:85:14:e6:c8:06:70:b4:d8:ff:19:88:
e1:24:fd:98:ab:ee:b8:c7:ab:6e:60:e5:4d:b4:60:44:03:45:
c0:bb:c9:8a:99:57:b6:bb:14:1b:ee:04:be:3a:f4:42:ac:f7:
a7:eb:3d:89:c5:61:92:11:fa:6d:78:cc:90:34:70:8f:0c:79:
f5:2c:54:28:16:27:12:ac:ad:f7:95:14:7e:ac:0c:3d:b1:2c:
37:08:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:09 2025 by rpki-client