Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b507a872-e541-3868-aac4-8b91a13c2040.roa
File: b507a872-e541-3868-aac4-8b91a13c2040.roa (raw, json)
Hash identifier: kIWcgq8W1/766fkwga9Pl/dXXmswNL8nD6jQ64C5xFQ=
Subject key identifier: 27:E9:8E:62:67:7B:84:59:DA:97:D6:F1:8B:87:E7:29:57:F6:5C:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFF07C0C3F9A24EFD7EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b507a872-e541-3868-aac4-8b91a13c2040.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ff:07:c0:c3:f9:a2:4e:fd:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=c4bc376b-b966-445d-ab55-30311772526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:2c:b9:cd:2f:cf:98:e7:df:98:e4:ab:f6:
73:4c:19:a1:7d:5a:ce:60:74:cd:60:a8:5e:97:53:
44:01:d0:35:86:09:90:ea:9a:d6:61:45:9c:98:6c:
ae:c9:85:a2:1f:99:f4:4a:cf:d1:dc:d9:66:89:6e:
61:54:7f:21:95:02:a9:e4:32:ba:45:05:13:99:49:
09:0e:32:41:3e:27:4c:94:63:3c:58:17:12:18:5a:
c5:69:76:24:73:88:9f:32:f5:5a:98:0e:51:22:a0:
e4:6d:ef:19:ae:a3:35:07:fc:f9:75:36:b5:99:3d:
eb:f2:08:3d:fa:d8:f1:51:31:ca:54:c5:e4:d8:1d:
7a:85:07:88:d7:c4:b3:e8:88:62:8f:d6:d3:1d:a2:
9d:3a:12:80:9e:ab:47:89:94:62:c9:57:1c:3c:68:
86:37:31:a6:bf:6d:d0:49:85:c2:6a:88:33:a2:81:
d0:bd:92:61:8f:31:84:6f:1b:69:13:5e:76:80:bc:
3e:5a:65:cb:da:08:00:c2:88:c7:95:6c:61:61:4f:
c4:81:c3:18:ec:3c:d5:35:ee:a3:d7:6a:f1:8c:4f:
8e:ee:2f:b6:a2:c1:44:4a:42:f0:ae:bb:21:00:15:
e0:0d:39:60:42:04:ca:35:ff:6e:97:b4:0e:f8:b5:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:8E:62:67:7B:84:59:DA:97:D6:F1:8B:87:E7:29:57:F6:5C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b507a872-e541-3868-aac4-8b91a13c2040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:10:ec:2b:8a:63:b7:41:e6:84:b1:13:2a:3c:8f:ac:49:db:
0a:dc:6e:1a:8c:97:2d:a1:ba:ab:99:c2:9f:d2:5d:40:a5:ee:
a5:df:6d:4f:0f:00:e4:be:f8:e0:c8:b9:c3:4f:52:17:78:9a:
a8:c6:59:dd:fc:da:b0:96:9f:9b:1c:a7:1d:f9:e3:8e:6a:19:
64:22:98:f4:29:bb:a9:71:7b:aa:73:ec:06:c7:4b:1a:e5:84:
48:c3:04:14:e7:c4:ad:60:c1:6a:18:ae:88:d3:a8:fc:7c:34:
06:1e:0b:59:4d:26:a3:29:b0:b2:a9:80:b1:9d:38:48:d5:2d:
1b:4a:ca:51:48:a7:24:b1:e5:ea:22:de:a7:43:7a:2e:2f:6b:
73:b9:72:dd:aa:8a:fb:f0:8a:2e:aa:c5:1c:0e:71:0c:eb:99:
e2:3d:ad:4e:97:6f:3d:99:f3:a7:13:f1:ab:7f:43:33:cf:10:
13:54:e2:ea:c5:ed:14:36:60:e3:64:6c:43:3d:1f:20:7b:34:
47:19:b8:c3:18:16:84:30:8a:bb:43:9a:bf:29:f2:38:65:98:
1e:32:f4:ef:22:8e:e6:0a:29:19:29:d1:fb:fe:87:74:40:2f:
cc:81:c6:cb:f4:2f:10:2d:58:9f:40:79:59:66:1a:8c:e4:94:
54:04:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:34 2025 by rpki-client