Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47bc5a9-ec25-3405-bc6b-92fe59442b5c.roa
File: d47bc5a9-ec25-3405-bc6b-92fe59442b5c.roa (raw, json)
Hash identifier: vNJhmYU8EsxgfDA3EGoeEvdnQ7OzcqUdh2e5kC/WE6U=
Subject key identifier: A7:59:85:EF:1F:FE:C4:4B:2A:D7:4F:88:9D:C0:80:04:00:29:5A:F3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFECFE43ED65C460204E6
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47bc5a9-ec25-3405-bc6b-92fe59442b5c.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:cf:e4:3e:d6:5c:46:02:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=1ec14bb8-c256-429c-938d-ca3de2fc4d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:91:88:de:c8:f1:5a:e2:36:88:28:ec:99:
cb:57:d3:78:cb:68:c6:e2:89:5f:fc:0e:67:58:24:
30:da:92:4a:0d:b4:42:f9:58:cd:7b:c8:9e:08:98:
05:72:c7:f9:0d:96:8d:3c:a4:5e:b4:d1:7c:7b:74:
04:40:ac:5f:38:d9:4b:42:9d:61:9e:ee:81:82:0b:
15:bc:28:63:44:39:44:b8:e8:01:2a:5c:79:44:1e:
56:de:5a:6e:6c:a8:8a:a7:59:bf:2f:50:e6:98:19:
35:10:a9:99:de:0c:da:35:ef:cf:31:66:47:74:31:
73:c3:8a:8b:1a:be:78:a9:ae:44:86:15:54:65:8b:
ae:af:38:a3:43:fe:36:90:92:e5:32:6c:d9:64:5d:
03:8c:51:5d:98:2d:bb:2c:c0:ac:f7:be:6f:09:1c:
d6:cb:aa:f9:f8:46:57:02:fa:f3:c5:6e:a7:1c:0a:
5a:ff:6e:fe:fb:3f:55:15:06:5a:67:fa:ff:d7:dd:
3e:29:63:a5:97:7a:15:e9:5d:02:42:ed:bd:6d:f7:
7b:8d:91:f6:1c:15:6c:17:66:5f:08:da:11:f3:c7:
7b:d5:12:65:fa:54:ea:a6:9f:32:a2:33:ca:2d:43:
32:1f:ca:44:b1:a2:0f:3f:20:23:8e:44:7e:46:e7:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:85:EF:1F:FE:C4:4B:2A:D7:4F:88:9D:C0:80:04:00:29:5A:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d47bc5a9-ec25-3405-bc6b-92fe59442b5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:df:b0:db:b8:d5:c8:a2:11:6d:eb:d6:b2:87:8b:ad:6e:1a:
32:89:c2:e2:33:9b:51:1a:a3:d3:e0:d5:13:e0:f7:e2:d3:48:
be:d9:0f:e7:66:be:d9:2c:9b:17:c3:61:4b:6b:81:c9:d8:78:
af:36:79:20:38:c2:3a:dd:32:00:bc:6a:c9:d4:60:69:5d:32:
62:81:9e:86:fc:b9:9b:a6:4a:d1:31:53:e6:38:59:47:94:96:
a9:7a:af:4a:ce:d7:e9:da:45:fa:60:44:1c:90:0e:6a:d0:65:
46:7d:75:97:e1:25:a2:75:fe:0e:92:5f:69:09:9f:c3:87:2f:
cf:ca:64:35:a5:69:ef:37:5e:c2:c4:bb:fa:04:79:c4:69:4c:
03:38:25:53:f3:79:e7:7a:0d:f3:5d:91:79:5a:5b:fd:bf:32:
d0:9c:94:df:1e:09:7f:a3:f8:8d:f6:8f:f6:c3:b4:60:32:13:
cc:bc:9c:e9:40:14:69:c7:4e:d9:82:55:81:d5:59:23:73:e6:
c8:3e:1a:31:8c:17:67:11:6e:28:03:a5:94:9b:67:fb:fd:e3:
b9:41:6f:7a:cc:26:05:64:c1:fd:9b:61:61:de:2f:a2:07:69:
7a:a1:c5:29:ba:e3:45:a9:1c:b2:61:65:1b:c4:7a:ea:2f:1a:
07:67:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:37 2025 by rpki-client