Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c229a0be-d146-3e97-9061-2d83aba4e7df.roa
File: c229a0be-d146-3e97-9061-2d83aba4e7df.roa (raw, json)
Hash identifier: cSvN1cWO5BMH6W6/bDMdqT3ma2bGZgmJ5vigBs0fR6k=
Subject key identifier: 17:3E:45:00:FD:5C:96:66:6A:41:12:69:56:6B:5E:38:9F:95:43:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFE8E4D59871CB05F1D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c229a0be-d146-3e97-9061-2d83aba4e7df.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:8e:4d:59:87:1c:b0:5f:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=3c00c721-e5ba-42d6-b7c5-bb208cfa934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:ba:e3:7c:d6:f2:aa:0d:c0:66:b1:ef:86:
d3:e5:61:ab:16:12:e2:03:74:3a:1e:1b:4e:75:dc:
1f:6b:87:5a:26:ad:fe:a3:7d:98:9b:1b:5e:40:79:
30:c6:a0:79:d9:48:89:c0:c4:1d:fb:14:dd:de:4d:
ac:f6:25:8d:1c:57:8c:e4:22:d0:fe:33:b7:70:7e:
1d:95:d0:06:1b:05:3c:a9:2b:6f:d7:e4:b1:c6:77:
88:e1:2e:66:06:16:89:9f:bd:83:fc:5c:80:c0:af:
14:89:4a:72:65:74:09:58:54:70:83:92:d4:5e:ac:
ff:bf:e9:92:58:b4:e1:91:4c:40:ab:17:d8:19:27:
31:62:fc:16:45:84:08:a2:f4:23:b7:a2:a8:57:1d:
3f:9e:bb:67:9c:b3:ff:e0:0f:e6:0f:e7:25:4a:e5:
54:8b:d0:f5:06:4a:6d:fd:3e:b9:c8:55:ad:52:fa:
0a:39:6e:7f:eb:55:3c:fe:50:e4:fc:e9:22:dd:c9:
db:e9:22:a3:3c:9e:ef:b6:4d:42:85:f1:09:b8:62:
25:10:35:33:41:6f:ed:31:54:db:e6:b4:69:28:f3:
f7:ce:43:36:54:78:b2:10:b9:8f:82:3a:84:19:ce:
ae:fa:58:28:8f:f3:af:5a:35:08:53:57:a4:6f:73:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3E:45:00:FD:5C:96:66:6A:41:12:69:56:6B:5E:38:9F:95:43:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c229a0be-d146-3e97-9061-2d83aba4e7df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:05:eb:d8:e7:2b:14:00:0c:aa:99:61:20:21:af:bb:91:ec:
59:6c:88:ff:1b:fb:1d:2b:07:2f:cf:f0:4a:1a:b3:e9:13:47:
39:6c:da:d6:91:44:eb:93:4f:ea:02:b4:bb:6f:89:ca:1a:b9:
67:6c:23:ee:9d:6a:11:cf:02:5c:d6:37:40:b3:51:0c:d1:28:
06:e7:68:c8:45:ea:4a:5d:3c:7a:44:f7:44:1a:ca:4d:d6:00:
62:90:e5:d5:3e:36:21:d5:4c:0a:12:cc:ee:0f:93:f4:84:28:
f5:9a:aa:f7:18:4f:80:d5:94:4d:2c:9c:f4:8e:ae:ff:76:cf:
aa:8e:38:8a:df:ac:9f:e6:fd:70:63:d4:8d:e1:4d:c4:01:11:
97:40:44:00:2e:5b:76:be:de:3b:44:05:fc:1c:f3:26:93:1a:
60:46:2c:1c:5f:1b:2e:68:72:65:cb:1b:bd:42:25:fd:c7:77:
1e:57:34:30:c0:43:fe:c9:0d:b9:59:d9:62:a3:40:b6:7d:50:
6d:ec:1c:13:41:7c:b9:73:a2:60:dc:d3:56:a5:df:db:e0:4d:
24:cc:47:88:4d:9f:4d:a6:31:57:76:0f:56:56:96:51:b0:7e:
56:b5:ad:61:cf:46:5e:f9:4a:cd:93:4b:f6:d1:3c:cb:d8:fb:
4e:38:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:35 2025 by rpki-client