Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa
File: b09ef27c-e99f-37e1-b1ef-94a95129010b.roa (raw, json)
Hash identifier: wcONtrGMbAzFeOfotdEKB1mwvIKKVXDCWwMaXIh1gok=
Subject key identifier: C4:70:21:02:D9:56:BD:94:EB:61:F8:64:13:00:F3:38:A2:66:33:16
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51ED24A10BFFBFE277340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1e:d2:4a:10:bf:fb:fe:27:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=0a73370d-3285-4534-83dc-3950860de8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:d3:87:7f:e7:08:49:59:0b:0e:88:30:f9:
77:99:10:b9:14:45:7a:0c:8c:d5:f5:8d:8a:82:ab:
4c:2f:c6:d0:2f:23:ca:ee:e7:df:0a:e7:a2:a4:3b:
54:31:1d:b5:fe:3b:0e:08:85:88:11:4f:43:f9:cb:
d6:43:a7:db:7a:a5:c1:4b:cf:fb:f1:ad:91:85:dc:
37:cc:9b:4d:a6:25:7b:96:ad:56:b4:f6:d3:86:bc:
46:53:f1:f9:02:49:3a:3f:42:ba:34:a9:22:19:a9:
c0:b6:de:46:91:0a:ad:54:51:cc:e2:f8:15:5e:9b:
77:a6:b2:40:9d:40:29:fe:83:32:2d:d3:b2:38:b7:
65:22:96:5a:ff:02:49:75:8a:60:06:80:88:8f:93:
0a:a4:54:8a:ce:df:87:f6:3a:a6:38:bf:c3:73:11:
45:fa:da:4b:ea:d4:9a:74:93:38:98:3b:42:60:f9:
65:b7:ae:16:85:c7:44:4a:22:ed:ae:92:53:32:bc:
f6:d6:d8:b9:11:6f:90:ed:62:ec:a7:f4:1f:86:c5:
09:8c:b3:05:8d:26:0f:41:23:32:62:a6:d7:82:e5:
9d:75:ff:4a:00:68:86:6b:c5:a9:64:e7:39:11:94:
a0:22:12:4c:9b:94:f7:f4:5a:53:cf:6d:cf:d9:d8:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:21:02:D9:56:BD:94:EB:61:F8:64:13:00:F3:38:A2:66:33:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b09ef27c-e99f-37e1-b1ef-94a95129010b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e3:ea:0e:80:42:cc:03:0b:22:c5:ce:a8:da:24:d3:b2:f1:
83:e5:58:7a:9d:0f:a7:c9:a7:fa:d7:3d:a2:8b:39:c2:fd:01:
2e:c5:3c:84:e2:e2:e2:9f:17:d3:7f:a8:e6:2c:5a:83:3b:c7:
99:ec:2b:38:f5:bd:aa:d7:17:5e:91:2f:50:f0:a3:fb:a4:d5:
50:30:d4:c2:1c:3c:8a:15:1d:84:9b:a5:85:b4:17:33:b9:f2:
27:52:fa:7e:3a:e9:97:79:e4:bf:19:ac:18:5b:48:59:e7:11:
0c:e9:49:a5:61:69:4e:d9:41:14:d9:c3:6c:df:dd:47:39:87:
09:dc:98:04:e7:11:96:d0:d1:63:22:fb:3d:41:48:35:b5:44:
76:1c:fa:bb:14:77:cb:1e:81:88:2d:4f:53:1d:82:18:f8:35:
4a:56:9f:22:95:84:24:e5:21:b3:80:5c:2b:e3:c6:6d:d2:2b:
c3:b8:eb:32:e8:03:3d:54:b2:3d:9e:d4:86:4f:af:b2:50:2c:
09:f0:55:f5:83:78:73:ef:27:0c:29:6a:9d:1e:4f:84:4f:3a:
d5:04:ea:a0:ee:90:c4:b2:58:1e:50:22:0e:d0:a7:b0:30:67:
1a:10:9c:a5:89:4d:04:6c:cd:d7:be:04:1b:5c:75:95:3e:22:
98:a2:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:29 2025 by rpki-client