Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256a6ff-bbab-3184-8f0f-1c4fed8bd492.roa
File: e256a6ff-bbab-3184-8f0f-1c4fed8bd492.roa (raw, json)
Hash identifier: +ad6JlXkBQApxecTrfxgNwuGcWVZCpB8tr3wppWUlKk=
Subject key identifier: 92:DE:A3:F8:2D:96:10:62:30:7D:72:49:67:30:A0:56:49:8E:28:CE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD0346D08E40AB2E8DF7100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256a6ff-bbab-3184-8f0f-1c4fed8bd492.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 172.235.96.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:34:6d:08:e4:0a:b2:e8:df:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=a91a5e4e-9a05-4e98-b422-3e6ceeac4b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:3e:48:a1:73:b3:20:9c:26:b5:27:2b:74:
76:22:3a:c2:09:26:d6:ba:b6:1c:b7:c3:4e:ac:36:
aa:9e:f6:3d:c9:e7:a5:33:cc:28:da:2b:b4:0d:f9:
07:94:91:68:3c:bd:aa:7f:62:70:8f:9c:5a:56:ec:
6f:a6:dc:b7:7a:bb:f5:ac:fd:6b:cd:78:88:d4:6d:
c2:0a:d6:21:e4:6d:0e:c9:51:50:5d:b8:f0:eb:1c:
f3:a7:41:80:9c:bf:68:7f:71:a7:56:a3:0f:34:a1:
e9:3e:30:3c:b0:e7:59:b6:6a:de:23:a0:74:1a:3f:
24:ff:05:2a:2a:83:7d:85:ff:66:ac:c7:1c:83:14:
af:01:25:b5:3f:73:10:0a:59:60:a6:bd:a0:7c:61:
2c:22:1d:e8:ae:ee:d2:b9:4e:00:2c:8c:bc:72:b9:
bb:e9:eb:1d:bf:bc:e8:f2:38:ba:a2:5f:3b:8b:8f:
16:de:8c:ed:3e:7d:e0:2f:3a:2d:e8:36:da:45:5f:
5c:c2:7f:fb:86:39:aa:2d:70:14:8f:e6:11:4a:7a:
f8:fa:66:a6:66:e2:77:0f:36:81:86:d4:a0:4f:f5:
a0:c4:aa:c2:63:81:4a:e3:41:98:ff:a4:90:0f:46:
22:7c:c1:4e:8e:08:38:27:cb:71:3a:1f:1f:fa:ba:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:A3:F8:2D:96:10:62:30:7D:72:49:67:30:A0:56:49:8E:28:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256a6ff-bbab-3184-8f0f-1c4fed8bd492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:5a:04:c5:38:07:47:4a:e5:b3:03:09:4b:44:0d:c2:f8:c7:
8d:e9:1d:b7:00:97:61:77:63:f1:7c:93:d8:1f:5b:60:62:81:
7c:ee:74:d8:a0:f7:32:36:cd:8a:ed:ae:35:92:64:b4:53:2c:
fc:02:ca:84:03:53:8b:16:03:70:f1:f5:50:0a:25:81:3f:d5:
28:e8:cf:c7:7e:9d:bc:14:8a:25:b3:1e:ed:2f:6c:48:fd:81:
ed:3f:e6:cd:83:f2:0b:ed:bc:9c:1d:8d:43:84:95:a0:9c:13:
60:da:22:e4:ed:03:1a:fe:33:dd:e2:2c:53:d2:06:ca:a8:86:
c2:f7:e3:92:a5:28:b1:24:f8:86:93:1e:f5:36:30:15:93:e6:
c7:ae:d5:56:8d:c5:46:59:16:08:d8:4b:08:af:ca:a1:02:48:
16:82:ca:e7:d1:21:95:8a:e0:48:c7:f3:c6:9d:9e:b3:85:90:
8c:09:89:51:c5:0f:c3:2b:fc:6d:91:a9:ee:1c:c0:c5:05:8f:
27:c3:21:72:76:fc:60:5a:78:60:4c:3d:e4:34:d5:fc:de:6e:
e1:05:96:28:fa:3b:1e:a7:78:ba:8b:63:8c:1a:9e:46:b9:51:
bd:13:6f:1f:96:9e:98:b6:77:db:b7:8c:8c:a6:51:1a:ae:c7:
12:ef:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:49 2025 by rpki-client