Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa
File: aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa (raw, json)
Hash identifier: G3NK/ifI9Ci8pWr+y8Lnbn9cEle1xYjFB9fuEjC0sbg=
Subject key identifier: DD:7A:29:9A:7A:97:3B:45:AA:83:45:E4:3C:E8:C6:BD:42:D3:D4:96
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFFEC80D46BBC9DCE4C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ff:ec:80:d4:6b:bc:9d:ce:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=9b66223f-03a0-4167-a045-ada6d6bf3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:c4:f9:35:77:69:8b:a2:8a:67:70:0a:95:
6a:a1:e1:3a:07:65:d3:87:73:e4:bb:45:fa:ce:74:
84:7c:a2:1e:b8:eb:b4:78:4f:59:89:f8:48:11:cc:
27:e4:b9:9e:de:0a:3c:45:81:85:d8:f1:17:92:b5:
8a:ab:3a:7e:bd:c4:10:8c:65:31:a3:86:3c:13:29:
83:7e:d6:3d:05:66:1f:5d:8d:cb:76:58:fa:25:67:
8d:08:49:87:7c:5c:83:2b:91:c5:69:24:d8:03:80:
43:7b:54:25:b4:04:91:12:13:cd:33:1e:64:ca:af:
57:8f:51:06:d0:64:90:97:e7:79:19:8d:46:32:5c:
37:39:6f:21:2b:34:84:fe:36:53:18:57:a5:a2:50:
19:28:33:f4:79:cc:35:c3:30:68:e6:18:55:9e:dc:
56:5a:e0:7e:a7:dc:49:a5:5a:51:da:aa:2b:a0:da:
7e:7e:58:78:a6:de:24:68:ff:87:21:c7:25:1a:47:
d0:c7:a5:c9:d8:f5:2f:ba:05:d7:e7:6a:04:e6:c9:
dc:65:41:da:4c:f0:0f:bf:58:f2:96:cc:28:40:4e:
cf:68:5e:3c:cc:92:b6:ef:67:bb:08:9d:92:23:d9:
f9:9d:05:31:5a:57:6c:3e:28:9d:00:df:72:d2:8e:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7A:29:9A:7A:97:3B:45:AA:83:45:E4:3C:E8:C6:BD:42:D3:D4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:69:ad:cb:2e:14:5a:05:8d:74:93:c4:bd:94:dc:ab:a8:77:
aa:5f:dd:e2:aa:eb:be:ee:62:7d:97:15:8d:6b:04:68:1f:71:
ad:ff:06:65:db:f2:c2:0a:05:48:69:1d:b1:ad:36:67:73:18:
cd:e6:49:18:30:7a:14:02:5f:78:fc:4a:78:3e:1b:1a:74:a1:
b8:38:40:c6:a6:d1:0c:35:b9:7c:3c:fd:dc:64:29:0d:ce:ec:
d7:75:38:a1:91:cf:ea:0c:8b:cc:7a:3b:9f:38:31:46:5e:d4:
71:38:e1:9d:45:95:1c:db:3b:32:53:10:7f:dc:47:32:75:07:
93:de:02:6e:d3:8d:f6:69:98:6f:eb:4a:92:c0:30:5b:de:b5:
18:44:0c:ff:a9:c1:a9:76:55:95:56:b2:08:05:91:c7:b5:92:
62:8f:c4:97:05:f5:65:be:37:6d:0c:43:83:2f:ec:96:7a:99:
31:76:22:cd:f8:38:ae:1b:a9:a7:91:68:05:ff:34:e4:9d:46:
c4:87:72:4a:6a:6e:5c:90:2f:53:61:f2:63:96:b9:94:66:48:
b7:73:30:a4:27:47:4f:f2:89:ca:60:56:76:59:52:23:b8:a5:
cf:a5:9d:d2:eb:43:f7:5c:98:b2:01:ba:c1:11:d3:d8:c8:fc:
5a:ab:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:17 2025 by rpki-client