Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa
File: b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa (raw, json)
Hash identifier: ya4CdXh16hI17w9oLZ4l3VQD6EIzzJuR5vlSZwLjiu8=
Subject key identifier: 8D:8C:97:17:22:A1:42:38:99:20:40:70:96:AE:1E:09:B4:D7:F3:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584815A00274DEC82849656B0E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:a0:02:74:de:c8:28:49:65:6b:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=c7cd9e2b-f90e-423e-b23a-c1e4038a60c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:9a:8b:32:ee:cd:18:71:7b:11:1f:3c:7f:
0c:b7:4b:0b:14:68:7f:1b:dd:fe:66:19:69:96:f1:
4d:9f:2b:fe:8c:db:27:cc:fe:4f:9d:36:d4:87:23:
97:9b:f9:cb:28:55:61:dc:c5:3a:e9:01:9b:1b:77:
cd:ce:6f:1e:c1:93:b9:89:eb:71:0d:f4:5e:34:1b:
fa:24:7e:1c:44:2a:56:b4:08:44:c9:2b:70:06:e3:
f6:e9:92:ca:c6:f5:df:bf:2f:8a:6f:44:6f:e0:26:
0b:6d:89:e6:42:b3:2a:d3:52:50:90:08:07:cd:6a:
ff:9c:f8:f9:7e:15:37:b5:c5:34:d2:4a:a4:93:47:
63:30:a4:58:67:69:15:0b:fe:5a:03:f3:ee:2c:1d:
eb:ee:44:a1:0a:ea:9a:4c:5e:df:4e:8d:8e:6e:2e:
d3:63:8b:93:1a:60:3e:9a:df:60:0b:b4:10:3f:87:
8d:e0:f6:ed:cf:d2:45:9e:f2:22:cc:5c:dd:24:11:
53:c4:93:78:67:e6:3e:a8:2e:e4:e7:2f:24:d1:5b:
c4:1d:cf:6d:d5:8b:dd:bf:32:8e:e1:51:4d:9a:7e:
f3:f8:3e:1c:4c:39:83:38:cb:e9:60:88:73:38:43:
c6:6b:67:cd:aa:7d:c5:ae:73:b9:aa:c7:99:ed:ba:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:97:17:22:A1:42:38:99:20:40:70:96:AE:1E:09:B4:D7:F3:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:dc:37:e2:aa:f9:69:36:7a:67:39:bf:16:d3:e2:bf:af:64:
61:ec:33:58:35:b5:3e:c5:a0:15:66:6e:a6:ea:71:b0:e6:27:
16:08:27:4d:93:dc:22:4a:38:a7:87:8d:e2:f3:e1:43:af:d3:
20:c8:d5:69:07:df:fc:e8:d1:10:21:ab:21:41:4a:d5:2b:99:
a3:c4:bb:44:55:2d:1d:1a:78:98:32:f8:73:bd:fb:af:34:23:
c9:de:4a:ba:80:c3:d5:00:1d:a6:8d:3e:c6:93:11:fe:9a:f3:
86:23:26:a7:a5:78:a3:ae:cc:c7:75:36:39:c8:fd:96:22:9d:
14:33:11:3b:91:96:f7:5a:4f:71:9e:e3:c3:bb:e2:6c:63:12:
1d:1f:1d:06:f4:a2:8a:22:af:2e:de:58:e0:aa:41:6e:98:ab:
bb:19:3e:79:e7:bf:3a:62:7f:55:83:ce:13:e5:1e:e5:54:11:
eb:a3:1b:f9:2a:b4:35:75:e7:b1:60:33:e6:4d:1b:0d:ae:7a:
b3:2c:c6:d6:b9:9d:b6:c4:90:c9:88:88:9b:2b:99:9e:76:9c:
d3:8e:38:f6:84:f1:d9:d8:3f:59:26:ef:fc:0b:2c:4b:fc:e7:
a1:92:72:32:06:73:83:77:e9:c7:59:bc:b5:43:bb:e3:d5:7e:
9a:85:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:36:58 2025 by rpki-client