Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa
File: de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa (raw, json)
Hash identifier: S9Ni6+mJ6AqNIyzk51e+UY+dFYv2wDct5hgC2sLS6hA=
Subject key identifier: 8F:E7:F0:6F:40:1F:CD:2D:DB:30:CC:C4:DC:BF:D7:B0:0A:77:E4:B6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFE570CA710594D68BB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:57:0c:a7:10:59:4d:68:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=3ffa8c52-b2ed-4410-afe3-1d0546d4472a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:4c:a7:16:f4:6c:11:dc:4f:db:3a:43:a5:
37:48:c0:42:97:96:cb:6d:e1:38:8f:c6:99:09:a7:
fd:75:4f:e7:79:f7:70:d5:a1:b9:49:54:9f:84:3a:
89:fd:60:f4:66:07:07:0a:c8:0d:03:db:bd:69:e1:
68:7a:12:f9:88:6a:69:4e:44:1d:80:48:6c:a0:a8:
b8:14:cc:c4:0b:3e:88:18:b7:7b:f0:62:e9:bc:a2:
9a:ed:20:bd:97:ea:57:0e:e7:42:bd:06:3f:97:85:
7f:ca:2a:2f:50:e7:6f:a0:7c:4a:d8:73:c4:df:2b:
85:1b:4a:6e:ee:e3:c4:d4:2c:e0:14:8d:1f:f2:26:
6a:5c:58:86:ae:bc:eb:a7:aa:5f:3d:f8:c2:f4:85:
34:28:5c:9e:6d:c8:ba:e7:3b:2a:11:ca:2f:b7:36:
e0:0c:7b:b1:5e:43:99:cb:48:76:82:34:76:31:e4:
9f:1d:3e:56:fb:a6:de:e1:78:e3:91:f0:57:f0:90:
4d:39:6e:70:4a:9c:d9:7d:1c:d6:ce:80:a8:02:35:
14:02:ab:21:ac:85:36:75:40:f3:8d:08:9f:a3:a4:
e5:d3:66:08:6a:ed:9b:e8:0f:3a:bf:ef:07:9b:bb:
d2:45:a0:89:d9:a4:89:79:03:b3:cc:df:06:11:91:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:F0:6F:40:1F:CD:2D:DB:30:CC:C4:DC:BF:D7:B0:0A:77:E4:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d1:fd:a1:c2:fb:fa:b0:98:c3:07:8e:45:6f:65:c6:17:60:
7d:f3:b1:1e:df:b6:66:31:58:5f:93:96:8f:97:c8:ce:5a:65:
11:c6:c8:1e:a5:a7:cd:15:14:da:d8:c9:8f:46:46:78:65:92:
e6:29:8c:13:65:51:07:4d:94:61:1a:e9:6f:99:8a:20:8f:7b:
94:53:c1:83:3a:3d:9d:10:f2:63:38:d4:e0:a8:2f:74:24:2a:
aa:59:4f:13:50:41:8a:e9:71:77:e7:31:4c:15:00:c1:96:e9:
30:3f:37:52:f7:22:67:a8:3f:16:1e:9c:0d:65:17:fd:46:29:
a5:fb:35:d5:ba:d2:a7:1b:e7:2a:35:4d:58:87:b9:ab:44:e0:
4e:81:bb:c6:d3:9a:56:33:98:9d:6a:a2:9c:cb:42:eb:09:95:
05:12:44:16:c2:d5:51:89:dc:a3:54:9a:16:48:b8:41:d8:6c:
3e:78:54:a3:a0:bd:d3:1f:98:dc:fb:c4:01:41:32:66:d0:b0:
02:6e:20:b7:76:7a:f6:df:0a:32:80:9e:a5:39:f1:2d:bd:bc:
63:e5:fa:24:96:eb:b5:cf:d7:19:1e:96:69:5f:e9:3e:7e:16:
12:02:64:ad:6e:7b:9e:93:1e:31:91:52:36:19:eb:32:90:32:
3b:8b:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:23:56 2025 by rpki-client