Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa
File: ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa (raw, json)
Hash identifier: X5/snsD+AyNxHkz1rMe7idSAd4Gtg97u0syZlD/XJMw=
Subject key identifier: 39:95:4E:E7:53:E9:56:17:97:3A:86:43:82:57:C6:97:93:60:B8:E3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AB3737D74FBA37E7B3880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 16625
IP address blocks: 173.223.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:b3:73:7d:74:fb:a3:7e:7b:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=64b6e88a-4617-49df-9cc3-88278b502930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:7f:d0:b3:9c:bc:15:1a:ce:1a:3d:54:07:
11:e3:61:b9:03:23:83:80:9c:10:58:a4:c6:ef:fd:
aa:4c:8e:0b:ff:ff:73:26:c9:73:d4:b6:4d:f5:96:
00:9d:06:e2:05:b6:1f:40:a8:6f:ab:e2:9e:6b:d5:
5e:44:c9:ab:3a:6d:6b:3a:49:b0:5d:b6:e8:90:d5:
6c:58:05:f7:b1:e9:c5:1a:97:03:33:e7:3e:4c:66:
3a:51:ba:a5:2f:84:39:e1:df:bc:19:b9:b6:df:9d:
27:8a:ff:60:34:4a:37:36:fb:dc:c7:89:c4:84:78:
f4:48:48:23:f5:bd:05:ba:12:02:6f:d5:fa:c5:ea:
29:b6:56:73:fc:2b:a8:79:bf:86:50:b2:c2:6b:bf:
a0:98:09:5b:27:09:23:47:14:57:15:9f:d3:78:cf:
b1:8c:0a:66:24:14:cc:b1:91:54:94:fe:57:df:a5:
ec:f8:53:2f:e4:2b:6a:ed:10:01:d7:7a:1f:ee:4e:
e4:bf:47:bb:b4:63:10:bf:6e:7f:e2:d2:52:7d:e4:
47:d8:e4:b1:02:8d:2e:ff:92:ca:90:ee:2c:8a:01:
9d:1f:27:40:79:04:37:93:66:17:7b:f0:cb:7e:2f:
b0:b3:aa:4a:84:3f:45:ff:53:8d:ee:77:93:ec:16:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:4E:E7:53:E9:56:17:97:3A:86:43:82:57:C6:97:93:60:B8:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee905cbb-5ff9-343c-b9ef-53b1be80031e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:06:04:dc:13:dd:48:51:99:9a:3e:85:42:24:d7:9e:5f:dc:
ba:47:7b:41:56:a2:e3:e1:42:ea:0a:94:8f:ba:19:d0:6f:3a:
67:06:c0:aa:ef:a3:df:bc:4c:67:df:58:1c:da:ef:8f:ca:cc:
07:ce:18:e3:e2:16:84:d5:95:8b:c1:87:09:43:51:24:32:2f:
7b:5f:22:0d:e0:78:e0:db:43:b9:57:9e:d0:cb:e4:c6:cf:8a:
55:21:e1:45:2b:b9:8c:ff:ce:c3:d8:b4:21:ed:01:e8:7f:52:
9d:2b:4d:ea:3b:f0:f8:e5:f6:04:a7:48:27:0e:f6:b6:e6:85:
88:69:b2:10:03:e6:cc:32:ac:1f:55:ad:a6:04:f7:9b:06:7f:
54:f7:c8:ee:47:21:ea:af:22:20:21:52:8a:77:59:c3:01:dc:
22:64:a7:da:e6:cf:67:39:92:e4:95:21:e4:5d:06:9b:75:89:
89:2d:df:db:ef:b7:74:48:2f:09:77:51:25:61:78:b5:f2:e0:
b3:21:08:2d:d8:48:a0:44:37:09:54:85:e1:1e:b3:80:7e:10:
4e:b7:fb:89:15:88:cc:ab:0b:44:d5:f6:4c:dd:80:a7:4d:16:
cb:af:5a:e9:28:09:75:6a:6d:52:40:e4:ca:6c:c1:95:0e:9d:
c4:30:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:22 2025 by rpki-client