Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa
File: c391c69c-01db-3c19-a394-007ea2b9973e.roa (raw, json)
Hash identifier: iyZVIVgen2yN6nMPCSU3UC2w/XhuChMqG1hdQpEJiDA=
Subject key identifier: BA:DA:FD:4C:C1:45:DC:A8:C8:72:30:34:10:BB:06:C1:13:64:6B:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E0268538781DCB2BA06A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 31984
IP address blocks: 173.222.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:26:85:38:78:1d:cb:2b:a0:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=b610063e-9d36-4dc8-99c6-a134de4f2864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:52:31:83:a9:22:80:98:73:d3:5a:0e:d7:
f0:ec:c1:c7:9a:3a:97:e8:bc:e2:a1:9f:f3:37:92:
1c:8f:af:57:f6:5d:62:1d:27:c7:fe:68:a9:39:10:
e4:1e:27:a3:a6:af:50:f7:44:72:ce:26:78:ca:93:
9e:dd:56:46:c9:9d:d2:8e:61:a4:a2:8d:2c:e0:69:
dd:46:a9:cb:05:24:d1:0f:3c:9d:09:b1:6f:77:17:
9d:5a:d0:9b:ed:03:f0:83:e5:61:d8:6e:fe:59:8c:
a7:23:50:49:7c:d4:d1:f1:e4:65:72:bd:8a:cb:88:
0b:9d:cb:7c:17:52:88:ac:4a:43:ab:d5:ed:c4:db:
70:25:71:62:b6:49:d4:1b:90:18:0c:1b:2c:5a:70:
b9:18:6a:11:8d:88:8e:a1:92:38:a4:4d:e7:10:e3:
2b:0b:47:ae:55:49:45:1d:7e:d3:88:0f:a8:56:2c:
2a:aa:3c:68:61:21:28:3c:e3:0c:7b:93:1d:b9:dc:
48:9d:cf:f8:97:06:9e:e5:3f:d6:22:85:b4:bd:bc:
69:a9:d5:5b:e4:83:f0:3c:7d:ef:ae:b9:91:97:ac:
c2:01:77:8a:19:51:58:00:fe:f3:b6:8d:bd:b1:37:
c6:b2:eb:80:3c:28:c3:c5:40:eb:b6:da:11:be:52:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:FD:4C:C1:45:DC:A8:C8:72:30:34:10:BB:06:C1:13:64:6B:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c391c69c-01db-3c19-a394-007ea2b9973e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:62:29:ac:9e:af:73:03:2e:f4:51:ad:08:0f:d5:f7:63:df:
c8:c0:01:60:0b:b5:9c:75:74:97:99:e0:f5:49:e2:51:a5:b3:
6a:60:2b:ba:e0:79:1a:38:4e:5b:0b:12:24:73:29:a3:29:67:
9d:5a:33:ad:d1:80:da:fe:02:de:d1:d8:93:4d:ca:64:e9:44:
77:98:8e:16:58:cd:87:1d:84:30:72:56:aa:01:28:7e:e7:b4:
7d:dd:84:38:2d:d7:7b:e0:ad:77:c9:54:53:68:80:75:94:2b:
7f:a8:94:ed:af:a2:c9:ef:71:e1:6b:9b:33:fa:d3:c2:d7:b2:
22:b0:27:9b:88:55:3d:8a:47:5e:92:48:c2:4c:5d:26:ac:1d:
69:1f:7f:65:36:b4:31:cf:79:e2:1f:fb:43:e7:8c:ef:12:ae:
e5:29:50:07:ac:38:67:4b:0b:6e:ab:78:24:de:88:a7:1b:69:
88:3c:e2:2c:fb:fa:8b:e2:16:79:3d:8f:53:cf:9b:01:87:90:
6a:01:e1:5f:5e:da:1a:0d:bb:c6:9f:44:65:6f:67:ff:83:e0:
bc:71:72:2e:7b:af:83:d7:0a:ca:d2:51:78:d5:42:b0:02:ef:
59:26:2a:4b:69:42:23:96:d7:1d:5e:05:5a:dc:10:da:7c:a2:
60:6f:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:23 2025 by rpki-client