Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa
File: f899bb61-75dc-3120-8fed-7338fd88ed69.roa (raw, json)
Hash identifier: FMzoUztoNhf7z8ua5hxvQLcvE9MeYLs+e1hzL4nlC+s=
Subject key identifier: 91:79:DA:C3:7D:9B:B8:0B:B6:53:74:F3:1A:7E:5C:75:64:92:11:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9CBD656CDAE5B8FFB680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:bd:65:6c:da:e5:b8:ff:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=37984ec9-2421-4844-bcb0-edfd5b500684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:9f:41:59:f9:c1:ad:e8:94:dd:4d:4e:61:
24:20:2b:9e:ee:28:4e:c6:c2:60:da:ce:2c:08:41:
34:3f:52:88:c9:de:c7:71:60:2d:a6:58:13:2e:d3:
d2:03:5c:96:83:ae:9f:9b:3d:3f:9d:86:6d:48:d6:
d8:bb:b0:b9:7a:82:87:a6:30:8b:30:c6:4e:24:dd:
97:17:c0:af:06:e5:b4:32:67:8a:82:2c:4e:ee:53:
91:ec:88:e5:21:8b:f9:62:21:b7:b5:11:11:b5:e8:
f9:5f:48:28:c2:1e:57:e4:99:33:09:a0:b7:68:74:
ca:37:20:eb:1f:73:c0:06:4d:7d:83:fa:c8:ff:42:
8d:25:88:b9:72:8f:b9:c9:9d:15:5c:ba:5c:60:56:
92:c8:54:53:30:13:86:da:87:c5:6d:3a:c6:3d:df:
1c:72:6c:c0:04:8b:cc:67:8f:36:79:e8:81:3c:ec:
cf:5f:1a:53:fa:eb:de:26:44:fc:27:f2:94:54:0f:
d2:f9:8c:35:0d:5b:e5:14:f3:5d:00:25:7d:2d:99:
a6:f1:60:2f:94:b3:ba:4a:99:77:c7:86:6d:a8:90:
ca:b0:09:cc:4b:ad:d8:19:e7:34:bc:3e:cc:cc:4e:
8e:fc:f8:a2:2a:2c:6d:2e:d1:83:87:88:a7:7d:ea:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:DA:C3:7D:9B:B8:0B:B6:53:74:F3:1A:7E:5C:75:64:92:11:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f899bb61-75dc-3120-8fed-7338fd88ed69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:98:04:86:ba:f6:f8:67:68:c5:01:a0:eb:8a:0d:a6:76:51:
a3:b5:cf:2c:5f:8b:97:3f:63:9e:73:46:12:0f:a6:e4:df:99:
d3:a7:a7:d6:2d:87:e4:ea:8c:fb:88:9a:79:26:c8:67:c8:95:
91:37:3e:63:5f:46:e5:a0:3a:80:c1:0c:b7:3e:e7:a2:a7:2e:
23:a2:e6:49:34:46:cb:2f:ba:2e:a5:d1:e3:b0:df:ce:d9:b2:
0a:9e:71:03:ab:66:0b:14:8f:05:5b:2c:6a:eb:66:69:3d:33:
31:bc:4c:8d:a4:e7:b3:0d:01:fa:76:51:62:7c:dd:b0:53:ec:
05:57:45:fe:d4:dc:d2:a2:1d:f2:ce:ac:6b:92:62:53:ad:86:
b5:2f:0e:5d:0f:f3:54:1b:ee:3e:f3:d2:78:9f:db:83:ab:dc:
59:8e:30:dd:15:79:e4:f4:9c:37:bb:4d:35:f1:97:08:d5:9c:
16:de:31:1a:2d:9e:04:95:08:1d:f0:ed:21:8c:6a:ba:88:fe:
b1:8e:cc:4c:1c:f3:43:61:17:4f:d0:4f:63:78:39:96:53:12:
84:ab:48:67:56:f3:3a:3f:26:5a:af:85:36:9b:f3:c0:fd:66:
fd:e0:93:cc:08:af:f8:3b:82:95:02:61:58:08:82:eb:f3:18:
b0:8d:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:06:42 2025 by rpki-client