Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6bdd3a0-8d41-3aa6-b464-cb1756c9bfe3.roa
File: c6bdd3a0-8d41-3aa6-b464-cb1756c9bfe3.roa (raw, json)
Hash identifier: LFZ5CzKr5LdaYsONK9fvwLaWhbYsJmzsO+mWCXENY3Y=
Subject key identifier: FF:FF:A2:FA:14:88:77:77:A3:ED:BB:79:5E:73:11:7A:71:C4:8B:9E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51EE42B739E666B5A2330
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6bdd3a0-8d41-3aa6-b464-cb1756c9bfe3.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1e:e4:2b:73:9e:66:6b:5a:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=177597ae-9b60-4ea3-b5ad-f73f03ee0344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:75:44:2f:8d:80:74:84:39:cd:87:5b:ce:
c4:ba:3e:51:73:1a:d7:15:56:15:94:85:fb:7e:d2:
ca:6b:ce:99:1f:98:06:61:c6:f1:18:82:99:6f:0a:
01:bd:f3:f9:84:96:b7:7c:d8:65:6e:a0:0f:85:77:
d4:3d:9c:1d:8b:17:f1:ed:df:6b:4e:88:5d:91:2e:
dd:cb:b4:0e:41:4b:7b:72:72:bd:58:0e:0b:b2:bb:
71:e5:59:b6:56:b3:03:5f:11:98:7f:e9:82:04:af:
02:71:c5:1a:02:b2:d0:4e:79:5c:87:37:21:9a:ef:
df:67:31:e9:12:36:e7:24:9c:87:ed:93:6d:05:f0:
4f:b8:a0:5a:bc:e1:43:89:b7:78:35:1d:c9:0f:7b:
1a:c7:60:f9:b2:81:cb:2e:cf:59:05:ae:80:0b:42:
43:8b:eb:bc:48:76:23:d5:22:83:3f:1d:bb:45:39:
3f:cb:2e:0b:1a:9f:57:f9:43:55:70:a0:3c:1c:16:
0f:db:1e:a9:d8:62:fc:1a:2f:e0:10:2b:42:ac:48:
0b:88:f0:6e:ba:d9:fb:be:6b:65:fe:31:cd:63:83:
26:39:41:11:15:70:ec:e2:cb:7b:41:7c:fb:bc:ae:
f4:e4:0e:b9:cc:1d:b0:8a:a2:90:d5:6b:1b:ab:e8:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:A2:FA:14:88:77:77:A3:ED:BB:79:5E:73:11:7A:71:C4:8B:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6bdd3a0-8d41-3aa6-b464-cb1756c9bfe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0c:da:a7:e4:b8:79:6a:72:6e:a5:51:4e:65:4b:f6:6d:60:
6b:4c:5a:ca:5d:73:6b:23:87:88:7b:f0:70:a2:76:ef:5b:c4:
98:3c:1d:08:e8:38:1c:fd:27:b5:9d:c5:d8:e3:5a:b5:73:fb:
44:57:93:a3:d7:18:02:c1:cf:86:20:24:09:7b:45:ea:2b:02:
79:af:68:8c:f7:41:93:aa:20:ad:ea:6a:19:4e:e0:92:7a:a5:
fd:57:90:0f:22:ec:28:43:54:dd:4b:c4:fd:e4:35:eb:c1:e1:
5f:37:ed:e8:12:d4:6d:68:04:69:11:6a:b9:16:cf:5b:de:4e:
f3:09:dc:dc:94:5e:4d:90:fe:b6:01:19:ac:c1:50:49:01:3b:
fc:ad:17:fc:b8:b5:7c:09:ae:cf:8c:64:82:15:82:e5:e4:fa:
ba:c1:88:31:ac:69:b0:64:da:0e:ec:29:e2:c3:ff:f8:3b:95:
47:2c:2d:a8:65:5f:81:e1:0e:c2:b4:49:37:ab:1a:1c:69:c2:
3c:ee:a4:9d:66:14:77:fe:48:be:0b:dd:9e:4c:7c:6a:ec:c4:
f9:3c:66:e2:50:e6:b7:e6:25:14:57:0b:91:2a:54:81:3f:9a:
67:dc:c9:13:3a:af:2b:dd:62:c0:80:a9:85:4f:c7:a0:43:b1:
b4:33:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:17 2025 by rpki-client