Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa
File: c9cb8e87-47e5-357d-8c31-e985ff45619e.roa (raw, json)
Hash identifier: xVlMVZUoMUwpx7XkIiN4/8FF20XQKf4li8XuA4pgkH4=
Subject key identifier: 69:58:79:42:1C:72:43:87:DE:53:22:BE:7A:AE:73:85:BB:CE:66:15
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A67E69201884A9731B9E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:67:e6:92:01:88:4a:97:31:b9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=fb0dc8ab-553d-43f5-af89-7b04177deb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:f6:ee:eb:78:3b:50:c4:5a:91:1e:12:0f:
47:86:7b:2e:5e:98:c4:88:e8:ba:6a:fe:30:4f:44:
06:f2:1e:b1:6c:6b:81:e4:1b:fb:84:d0:f9:93:0a:
4e:79:1f:c5:1e:02:21:ec:44:84:09:59:0e:17:2f:
02:38:42:bf:f1:84:5e:e5:2a:59:62:b5:eb:43:be:
6f:d9:d1:ea:b7:d2:24:27:59:5b:63:46:41:29:8a:
73:c9:57:b8:a1:5d:c1:b5:b9:a6:fd:5e:7d:56:c7:
e2:cd:59:67:97:a8:bd:70:f3:dc:7c:47:c1:4d:a7:
ab:11:24:58:d4:17:94:d4:ac:c7:37:93:da:61:41:
1b:7d:3f:a4:84:13:c4:0a:18:e0:9a:7e:a2:ee:b1:
fa:a0:d4:90:99:27:d2:8d:e4:7a:f5:77:ea:4b:05:
e7:99:c3:6c:ef:2f:e0:98:43:71:de:3b:ec:e5:29:
3e:ed:67:59:70:f4:ee:30:2d:bb:f0:c6:49:cb:e8:
46:ee:d2:0a:18:54:84:90:ae:de:85:21:52:19:a9:
b1:19:95:12:62:d0:5e:4b:5d:e1:c8:ee:be:76:5c:
f3:e5:78:59:2b:44:9f:97:92:60:37:26:cd:6c:bf:
df:e0:65:57:d5:95:96:fc:c2:5b:01:95:a2:a1:81:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:79:42:1C:72:43:87:DE:53:22:BE:7A:AE:73:85:BB:CE:66:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9cb8e87-47e5-357d-8c31-e985ff45619e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c4:96:0f:69:11:ba:0d:a9:77:88:9e:fc:e7:24:0b:bb:2a:
01:e2:66:06:89:e1:28:6a:6f:fe:6d:86:8c:d7:6b:7c:b1:3f:
f5:b9:b0:5d:de:82:c2:95:ad:ae:58:62:99:15:63:79:76:71:
f6:a4:3a:c2:89:5d:b6:37:2e:e8:ce:e0:89:b6:30:af:10:6b:
02:ee:a5:0b:31:c4:7d:48:72:0c:5d:bd:8e:08:ad:44:aa:53:
80:33:fc:8e:90:34:79:36:15:8f:54:09:36:0e:53:cc:7c:45:
c0:b6:9e:84:da:05:d7:4f:32:f6:7e:54:3c:39:c9:92:4a:d7:
5d:c5:9e:e7:64:09:1d:47:2d:f0:68:25:4c:8c:c3:a9:f2:6d:
7b:d6:14:8c:a0:6c:94:c6:94:b2:da:ba:15:34:6f:2a:ad:8f:
9f:d2:57:78:54:b4:82:da:f1:37:ae:23:f9:7c:80:c0:be:c8:
57:70:18:93:74:cd:e5:ce:1d:ae:6c:40:8a:4f:d7:9e:fe:31:
b7:53:0e:a1:a0:28:b7:b8:f7:f2:db:7d:29:98:79:c7:6c:9b:
93:f3:bc:49:b5:ba:c0:08:9a:52:b9:1c:2a:e6:e1:a5:d0:1b:
71:7d:2e:b1:a8:7a:bb:7d:92:b1:68:da:67:dc:23:bc:85:00:
6b:87:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:39 2025 by rpki-client