Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa
File: d95c6310-5d0b-3158-80b3-7141149fc74e.roa (raw, json)
Hash identifier: 3AG4ps3DenGVHvFpvASFk18ykHYm2PUZq8hbQtNuCRI=
Subject key identifier: 1F:BA:55:F3:E9:28:14:B7:5B:4D:16:46:B4:1E:3C:09:5A:F6:AF:38
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848345582E25823EA578B939A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 63949
IP address blocks: 172.234.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:82:e2:58:23:ea:57:8b:93:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=46628d95-2c75-4aef-947e-e0d8905a664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:73:c3:3b:38:5a:89:68:bc:db:7f:9e:1c:
d4:2a:87:2b:65:d3:c0:0c:45:50:04:88:65:92:86:
f3:a3:0e:ce:87:b6:6f:fa:e9:ef:47:12:7b:7d:3b:
7c:0b:e0:27:f6:8a:51:a3:ac:b7:30:26:10:f2:00:
96:5b:4a:09:c1:c2:5e:60:af:95:5b:77:d3:dc:dd:
32:35:e3:2f:ce:b6:97:10:01:fd:5a:d2:d9:4e:fb:
c5:e8:cb:02:fa:47:0a:eb:8b:c4:d1:24:0c:f8:15:
9a:84:c9:54:cc:3a:cd:d9:e9:a1:bf:4a:17:ec:cf:
32:7d:7a:91:0b:e3:a2:d8:ed:4a:b5:e4:d0:f0:df:
83:ac:40:d7:63:57:bf:bb:4d:58:3d:4a:c1:cb:c7:
d6:f4:4c:d1:af:3f:b3:42:9c:26:37:75:ff:bb:b3:
f9:6f:d4:bb:6c:45:f3:63:82:f9:fe:48:a4:65:8c:
96:57:64:6e:25:62:a9:f7:f3:60:a5:42:6e:8e:eb:
1f:1d:dc:47:51:11:2a:c5:bd:0b:cf:fc:6b:e4:5d:
bd:6c:cf:88:d7:4a:32:4d:c7:dd:e8:05:d6:2a:87:
14:74:df:a4:9d:5f:bd:00:42:c7:f3:4b:80:e7:e0:
d4:3c:7c:8e:9b:e2:e0:08:af:a3:8f:f0:ec:f2:78:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:55:F3:E9:28:14:B7:5B:4D:16:46:B4:1E:3C:09:5A:F6:AF:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95c6310-5d0b-3158-80b3-7141149fc74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.234.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:16:78:be:70:32:eb:81:1e:d5:a5:d7:67:c9:3c:10:1f:24:
c7:6b:2c:f0:0b:53:e5:fc:86:72:d7:a2:88:e5:6f:76:14:d6:
9e:68:96:b0:3e:87:c3:85:7d:65:0b:54:4c:80:79:b4:79:8c:
3c:3c:53:bc:c0:73:b5:7a:3f:df:3f:a8:7d:92:3f:7e:9f:dd:
5b:21:2d:1d:bd:c3:5c:62:9c:12:dd:4d:57:90:06:8c:ff:84:
df:d8:85:81:a3:23:40:ec:3d:03:3b:b5:cc:3f:75:42:01:51:
82:d0:c5:be:3a:93:5b:c6:bd:c4:52:33:c2:92:6a:28:d9:3e:
2c:e9:00:23:ef:db:a4:eb:cb:77:aa:5c:37:f9:c3:9c:0a:70:
04:fe:c5:e9:91:ea:1b:43:ee:57:80:6d:2c:7a:e0:b2:2f:73:
3d:f4:53:35:27:ee:4b:12:10:54:10:57:ff:ad:2e:a5:38:61:
88:b6:0d:c1:31:94:1e:f5:d9:02:9c:34:1d:cc:35:a2:00:87:
1f:35:23:33:d9:b7:46:fe:e8:3a:1c:b7:39:2d:d1:67:4a:21:
30:4c:b2:e4:20:0e:29:06:9b:20:ef:da:a5:6c:3a:09:76:12:
f5:a9:e8:2d:67:90:5a:f1:6d:f3:09:55:b5:06:56:78:21:98:
b7:ef:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:12 2025 by rpki-client