Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
File: da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa (raw, json)
Hash identifier: H0BR5kgJgKqAQk+PbplaqDaEBSgcUJaYpwEHuydibwk=
Subject key identifier: EA:1D:E2:F9:49:26:C8:84:D1:A9:CF:1B:7A:59:F9:38:7C:25:36:8B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A4FE5E47A5A5704770A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4f:e5:e4:7a:5a:57:04:77:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e52aea13-e115-4ae7-96db-9f84e2f9d70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:cc:e9:2d:a5:14:6b:b2:00:d2:86:9a:b3:
67:c8:03:06:6c:d6:6b:9f:f1:04:7c:b4:d4:65:4b:
ff:6e:34:04:27:f7:b3:a2:9f:9a:a0:eb:fc:33:42:
10:19:82:dd:83:1a:d4:10:64:cb:4e:12:98:dc:2e:
61:29:42:e2:79:81:a1:0b:6c:1b:5e:62:31:3e:a3:
32:d0:10:e2:8a:8c:8f:70:81:b5:13:2f:d9:ff:62:
d2:29:80:ad:b1:a0:1b:de:20:d4:c4:0e:b7:98:c5:
d7:3e:e6:9b:ae:2e:64:ec:96:92:66:60:77:76:17:
5b:14:50:48:8f:99:ba:9c:97:2f:8c:40:b1:e8:36:
e6:36:98:9b:37:15:b6:ba:d7:97:1e:c4:5c:2d:8a:
ac:c2:b2:f6:05:21:45:1b:d9:fb:a1:2c:46:9d:3a:
fd:86:c1:08:11:5b:4a:57:e7:ca:ae:0e:3e:b5:8d:
aa:a2:89:56:10:e8:07:b5:b7:e2:b2:c8:9a:2d:c0:
bf:c7:50:43:63:7f:3b:0a:f6:b8:9b:fc:37:d6:21:
91:c7:a9:19:ca:0f:60:d0:23:82:79:f5:9d:d9:dd:
ec:1d:26:5a:b8:f6:cb:24:76:94:5b:4e:bb:15:21:
c2:cb:94:64:91:eb:5b:c5:82:87:7f:ce:35:d5:90:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:E2:F9:49:26:C8:84:D1:A9:CF:1B:7A:59:F9:38:7C:25:36:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f4:b8:ad:fe:f6:17:ee:c8:a8:fa:40:c4:73:ab:9e:a1:25:
42:28:58:60:62:d4:a9:7b:ef:e6:67:94:e9:c1:ca:7d:76:07:
f2:be:13:12:92:23:b0:33:e7:72:4a:ad:ad:2e:38:a3:09:4d:
51:83:d5:e7:7a:66:68:65:07:8e:58:d2:e4:b0:e8:3d:de:8a:
1d:63:49:5a:3a:cb:f6:43:35:3f:00:da:b4:81:36:00:e4:e0:
5f:f9:e8:a9:50:e4:64:81:60:33:19:6f:6b:50:98:90:d9:1f:
47:8f:10:41:19:ed:9f:15:2b:13:b1:65:ad:24:4e:93:e3:25:
a2:e9:ad:40:48:34:fe:59:63:f9:10:94:03:c0:a2:f6:72:75:
e4:21:f0:18:b0:c2:9c:68:90:af:93:7d:18:13:e0:cc:e7:60:
bd:2d:05:04:43:10:0e:4c:07:12:66:0f:40:4f:74:52:f3:36:
bb:81:36:e9:f3:9d:fa:c8:3e:e9:e5:46:0c:a1:fa:5c:f4:95:
b1:a7:79:e7:c2:71:62:f6:5b:0c:5a:28:c3:09:ff:9b:eb:61:
21:b9:70:08:09:7d:90:6b:3f:36:db:6c:2a:bd:35:24:e9:a2:
f7:3f:be:1e:fa:90:3e:93:d9:77:72:ee:6d:ab:3d:ef:4c:e1:
5a:2f:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:33 2025 by rpki-client