Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa
File: d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa (raw, json)
Hash identifier: rEhr8mJUatyuU8Ij0S0TYZmsmN+ejhlblwzQcL63aMk=
Subject key identifier: DE:84:5C:6A:B2:B7:33:BC:B1:99:88:FF:D9:4C:73:B0:61:18:3D:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B72D1FAAB517F1F2DEB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:72:d1:fa:ab:51:7f:1f:2d:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=4d37d27c-0180-4916-94df-9b0392f8ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:4a:de:cb:fd:ef:0a:e0:58:95:f8:68:e6:
08:a6:8f:ae:d8:a3:8c:92:70:42:eb:31:cc:17:49:
09:c1:c8:72:f6:9c:a9:ad:8f:cd:d7:8f:df:57:c4:
62:90:bd:80:bf:78:fd:62:64:9c:6d:88:b7:86:bd:
34:a4:7a:ff:e7:bd:cf:14:e9:95:27:8a:d4:1a:f2:
f6:e5:72:2d:4f:9b:52:6f:f6:c7:84:82:a8:64:c4:
33:86:a4:bb:78:47:7b:0a:8a:43:87:cc:7b:6f:9d:
1d:12:7f:e7:01:bc:9a:aa:ec:8d:aa:9a:03:ef:c4:
c4:a8:a0:d7:38:bd:cf:3a:b8:70:4a:45:2d:fa:d8:
f6:e8:b6:81:cd:26:9c:05:cf:e3:a0:fb:72:dc:69:
b3:3e:23:ef:96:0c:ac:35:db:ea:05:8a:ff:48:bf:
0f:32:3d:58:67:24:6c:65:af:96:fc:f0:ff:f9:fe:
7d:3d:60:0d:51:92:ad:a1:03:d2:5e:01:6c:9e:d7:
1d:0e:40:a8:a9:ec:60:a2:e4:42:46:74:ae:99:ea:
1f:c4:3f:ca:7c:02:bd:af:2e:48:3f:67:76:97:3e:
09:2d:ff:08:f7:f7:ff:38:c3:2b:d4:bd:7b:55:57:
81:2d:2a:12:58:12:9e:de:da:16:f6:d6:1b:1f:fa:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:5C:6A:B2:B7:33:BC:B1:99:88:FF:D9:4C:73:B0:61:18:3D:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ab0ffd-5817-3a20-b2aa-227a1039d063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:db:16:7d:20:20:c9:e1:ce:9f:df:f1:43:85:bc:83:60:da:
f9:f1:f5:d6:db:66:b7:f4:8e:35:8c:e4:15:1d:a8:d8:16:f6:
fc:35:27:b8:3e:64:05:01:2d:11:53:4c:67:42:32:1c:58:f6:
b6:68:ce:fc:33:63:4f:b4:72:f7:39:65:58:c6:ac:be:17:74:
ea:4f:e7:ed:8a:35:4c:e0:2c:a7:4e:4c:eb:11:70:1b:67:c3:
16:02:8d:18:92:f7:8a:dc:d5:aa:7b:98:27:e0:c5:9e:e1:5e:
fb:37:ba:1a:c5:00:3a:5b:98:c8:f6:1b:47:2b:90:a9:e2:76:
1d:18:1f:2b:97:5d:4a:5e:38:e3:c5:80:4d:ff:b7:e2:76:e2:
80:05:ff:ef:b5:6c:63:94:d2:e7:14:78:8f:be:bb:52:af:11:
fb:6f:a3:90:90:f4:1d:cd:c2:7b:88:13:fa:8d:bd:66:60:11:
d8:26:3b:8f:ff:93:5f:a5:64:1e:74:e7:0e:bd:38:21:f8:8e:
96:c6:9a:80:be:df:bd:91:34:e1:3b:ee:8f:38:21:af:6b:8d:
3d:a9:31:7d:e4:25:44:84:8e:a5:09:98:85:0b:3f:23:20:4e:
0e:a2:f4:9a:71:4f:9d:42:c4:55:d3:78:89:6f:cd:05:a9:32:
09:36:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:44 2025 by rpki-client