Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2b43cdd-012a-39f2-b0f4-a100ffce8832.roa
File: d2b43cdd-012a-39f2-b0f4-a100ffce8832.roa (raw, json)
Hash identifier: G3PpfTkgSi3zfud7IRFvqd0VpbbQ0kYa0XpTSsGNUsE=
Subject key identifier: E0:06:AF:49:31:DB:B9:1E:99:69:62:D7:31:BF:F4:11:D5:30:7E:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFEC2632FDF365644B280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2b43cdd-012a-39f2-b0f4-a100ffce8832.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:c2:63:2f:df:36:56:44:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=89e559b0-8257-457e-b5bf-bb45c248b4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:ec:67:95:5b:6d:4b:d3:ff:cb:a7:51:70:
96:43:57:38:b8:c0:4d:8c:3d:1c:60:38:0b:d1:15:
3e:4e:a6:e1:4b:79:8a:ee:f8:71:26:8a:09:25:91:
bd:7f:41:d7:b0:2e:fd:0d:56:51:3e:7d:4c:37:b0:
f8:23:1b:c0:9f:48:e9:63:34:14:5b:0c:7c:fe:04:
ec:c5:d3:16:c4:6f:3a:b2:5e:31:3a:a2:91:5b:43:
bb:45:65:0d:b2:c7:bb:71:1c:6d:45:00:d9:a9:7e:
9f:2a:6c:28:7e:4e:da:cc:1e:8f:d4:db:80:a3:a5:
5b:e5:fd:78:92:bb:80:c7:c4:a2:53:9a:43:c3:be:
43:ff:0d:13:75:71:06:5f:88:f4:43:85:71:21:56:
82:b7:9b:95:85:ab:f1:32:40:8e:27:ee:ac:61:07:
10:45:fe:03:3f:6f:cd:be:63:61:13:7b:ec:a9:be:
58:cd:35:23:23:41:06:43:f2:fe:5c:12:97:63:ff:
a8:94:99:d9:34:c8:a3:10:1a:d1:da:33:82:d8:92:
52:0e:e8:b1:3f:51:3c:33:a4:f0:8a:93:2b:2d:39:
bb:eb:e5:fe:4e:9a:70:72:17:74:23:a4:52:1c:12:
03:49:69:12:00:13:40:2d:69:ec:f6:c9:e1:fd:35:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:AF:49:31:DB:B9:1E:99:69:62:D7:31:BF:F4:11:D5:30:7E:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2b43cdd-012a-39f2-b0f4-a100ffce8832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d2:54:c5:d1:5c:6c:56:a1:b3:ef:7c:4a:82:79:70:4a:39:
1d:fa:18:19:32:7a:6d:90:3d:a1:38:a2:9f:1d:ec:f5:bb:99:
60:95:cd:bc:5e:c3:1b:61:9b:f8:b1:03:dd:52:9c:f7:af:3b:
83:2f:f2:13:18:95:18:4f:18:97:45:d3:c3:2e:49:76:1e:61:
57:ad:20:12:a7:a2:5f:3c:1d:d2:70:e8:f0:43:7f:27:b4:94:
04:75:d4:13:f6:b9:b6:11:24:f8:ee:2e:54:8d:bd:eb:b0:fd:
2b:4f:1b:41:68:98:f6:cc:f7:79:27:d0:bb:90:7d:04:44:b4:
da:fc:24:ab:2f:ba:f8:53:af:bc:9a:de:6d:fb:c4:d9:50:98:
e3:a5:40:f8:f7:07:7d:d8:0b:62:98:62:d9:15:7c:1b:e3:08:
6f:9f:a9:a2:6a:5e:62:b4:9d:78:1a:2b:c1:6e:1a:de:4c:67:
0e:95:97:72:36:38:67:ee:ac:53:bb:2a:28:0f:8e:64:9d:8b:
91:9e:c3:fd:49:60:78:96:20:91:13:11:55:de:e3:85:42:84:
c6:53:3e:e6:f0:98:4c:26:12:93:67:77:21:d9:01:a6:b9:fd:
7e:d9:d4:a0:bc:10:6c:84:80:c9:b5:85:04:9a:c1:5f:4a:c2:
65:4b:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:21 2025 by rpki-client