Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa
File: d80137cf-d83d-3de0-8d25-f43332092311.roa (raw, json)
Hash identifier: UYOCpFStu6+Kpu6POUjol0Nk1bdcjFZIkRIoo4p7VfM=
Subject key identifier: 96:FA:6B:D1:08:88:B8:F2:10:C7:E5:5A:5F:DD:97:F7:F2:F6:C4:DF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFE6AC93C7D0B8DF3C4E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.224.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e6:ac:93:c7:d0:b8:df:3c:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b3b73e6b-484c-4fe2-bd6f-8dfee6df4ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:f7:70:a2:d3:3c:fd:10:ad:bf:f6:44:32:
76:2b:b4:a3:0f:e9:73:59:80:8c:43:60:c8:a2:8f:
7d:4f:a6:61:ea:3f:c2:fc:6f:2f:e2:c6:eb:3a:1b:
6d:f3:37:5a:94:9b:a2:71:f3:ce:db:8e:4b:4f:72:
f9:03:04:09:2d:d7:57:fe:33:a5:6c:a9:fb:8c:65:
18:71:b5:05:d5:0a:0c:91:98:1b:84:7d:ca:2d:07:
6f:57:e8:ac:e2:86:c0:b8:8d:08:5d:6b:b8:c2:eb:
bf:96:b9:97:73:6b:00:34:dc:62:a4:a4:c2:1f:27:
5a:20:05:3c:42:d1:07:8f:4e:bd:f5:b1:bb:47:00:
67:37:71:26:3c:73:1c:ef:80:7b:77:a0:d8:88:c9:
bc:0e:9a:fd:96:44:e9:ec:9d:12:d8:06:69:43:ab:
a5:87:65:9b:87:59:a7:87:e2:cd:c2:e6:53:e1:26:
26:c8:1f:fb:33:7b:42:85:5d:81:f9:10:d4:51:ba:
e4:b6:54:12:13:f9:3c:7d:44:8a:34:b1:b7:7a:46:
f5:3a:dc:32:49:87:9f:94:aa:c3:36:03:0d:45:68:
b3:be:ce:a1:91:12:90:85:c7:9c:46:7e:db:e9:75:
9d:f2:95:39:57:a6:f7:e9:a3:43:28:c9:82:50:b7:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FA:6B:D1:08:88:B8:F2:10:C7:E5:5A:5F:DD:97:F7:F2:F6:C4:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a4:a0:ec:4c:0a:e8:5c:ad:2c:c0:33:3f:a2:8f:b8:18:d3:
f5:74:38:7a:61:23:01:03:89:bf:06:90:77:03:5b:bd:0e:42:
9a:82:f3:97:89:28:42:84:2f:48:fa:95:e0:20:78:73:3e:36:
c8:b6:2d:6a:5e:69:3f:b8:91:08:8a:f5:b2:27:e5:41:45:f1:
ad:20:48:91:da:1c:b1:33:0b:b3:e8:82:3e:ee:4c:e9:07:f5:
55:c1:13:e6:a0:85:ff:d6:98:ff:6a:36:c1:c9:3a:87:fc:97:
26:9a:2f:cb:9d:f2:78:0e:a5:21:e5:14:de:97:9c:53:7d:11:
20:f9:01:b2:fd:53:61:a9:0d:ae:c2:cd:8c:66:a6:b7:f3:ca:
c0:a6:9b:16:c0:1e:58:74:4d:26:1c:ae:7e:d2:af:e9:a9:81:
a5:02:20:a5:c1:9e:69:f3:31:71:8b:e6:b5:6b:43:30:3e:ed:
0a:47:ed:bc:e8:a4:93:9f:4b:ef:8c:ac:76:0d:d7:59:51:fd:
18:28:ae:a6:51:00:88:e3:da:c7:59:0b:07:4d:08:84:ef:a5:
6e:58:9e:d9:de:fa:5a:12:fd:1b:7b:43:ea:01:71:30:21:b6:
e9:50:c7:ee:84:6e:26:c6:23:99:16:15:21:19:ba:35:0d:a6:
a6:55:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:17 2025 by rpki-client