Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa
File: bdb95884-a77a-345c-a80d-6363c583f603.roa (raw, json)
Hash identifier: g1/EkdkW8BUPKbaxp/lB9eTVL/okOhCP3WgK9spUGyo=
Subject key identifier: 3F:A9:69:A0:70:A3:E3:7B:74:91:0A:B6:D0:76:76:10:A7:27:E9:AE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51D0AEA9399875B4A8120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1d:0a:ea:93:99:87:5b:4a:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=eb5c22d8-e821-4505-97e1-f5e805d405f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d0:01:a4:0e:27:a4:f7:b8:e0:74:6e:06:6d:
3b:81:c8:ba:71:bb:a5:bd:37:30:d2:d7:3d:27:17:
99:77:06:08:79:02:95:56:88:6b:54:03:7e:76:11:
46:43:ee:19:66:46:01:80:17:60:11:7e:ec:5f:31:
12:3f:d8:17:a4:be:ad:f8:e5:d2:98:88:f6:9a:0b:
95:c1:e8:84:44:e3:b3:1f:3c:4f:ad:cf:80:c3:47:
eb:91:58:c3:2c:fa:18:bf:0c:b2:b2:db:71:8c:0a:
15:be:a4:81:e7:e2:5a:cb:60:03:62:a1:ef:43:9c:
5d:e4:a3:98:51:2e:c5:3f:1b:b8:77:a4:11:35:ae:
ff:cd:00:4e:f7:8b:8f:f0:17:0a:96:af:b2:ff:be:
51:34:bf:ab:aa:3f:eb:e1:2e:6b:0a:f3:b5:f1:f3:
6a:26:4f:ac:b8:34:4f:ac:7b:24:0d:a1:cb:17:88:
ea:fd:58:4e:7c:d6:c4:a2:74:e4:2c:6c:f5:00:48:
ee:9e:8a:dc:d9:dc:9e:0a:41:65:32:76:8d:95:33:
1b:e3:56:a4:5a:d7:2c:07:ea:1e:17:07:df:19:89:
1b:f0:90:66:88:c6:bd:e6:21:74:bb:57:b3:55:4e:
59:ec:96:55:16:75:0b:bf:b2:2a:cd:99:57:61:f2:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:69:A0:70:A3:E3:7B:74:91:0A:B6:D0:76:76:10:A7:27:E9:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb95884-a77a-345c-a80d-6363c583f603.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:93:18:fc:3a:7d:83:c1:f2:a9:e6:ef:93:02:81:15:3c:fa:
b5:2a:77:e7:e7:ba:4c:00:76:34:2f:0c:e5:7e:4a:b4:e6:d7:
e4:b3:78:7d:d3:a4:d6:22:85:bd:c5:37:f7:72:a8:89:a2:fc:
0e:87:58:b8:87:9c:86:e9:03:34:a3:6c:61:c2:84:e9:82:c1:
2c:94:71:66:35:38:c9:be:8a:26:de:36:c0:64:1f:95:1b:ab:
58:05:7c:08:e0:5b:75:88:66:87:bc:57:1f:6e:86:5a:15:fa:
de:2d:05:23:1b:76:ce:50:3f:df:3b:65:98:92:c6:c5:a8:ee:
32:62:97:3f:06:cd:e1:5f:c8:91:06:ef:95:eb:7d:63:dd:8c:
b2:64:7a:f3:0f:34:ab:c4:65:7f:28:21:af:10:00:27:46:0f:
bd:45:e8:54:cf:8b:86:8a:98:4f:b1:59:ef:cb:5f:77:3f:d1:
c8:01:7f:2c:88:c5:c6:d7:a5:bc:7f:5c:98:b5:c1:69:e6:a6:
44:40:43:96:ed:ff:94:78:31:4f:80:30:e5:da:2e:a9:80:43:
d7:24:a8:41:9c:51:fd:3c:c7:dc:77:51:42:22:04:e0:b9:96:
1b:97:9b:ae:14:2e:59:ce:8c:4b:dc:90:1d:af:79:ae:b9:3a:
36:d7:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:45 2025 by rpki-client