Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0769185d-c7a5-3786-b46d-489061b12416.roa
File: 0769185d-c7a5-3786-b46d-489061b12416.roa (raw, json)
Hash identifier: dN1BUaa3KnA6CSEQW4Cw+a8j4YTCthoMbklLET89Y+k=
Subject key identifier: 28:0E:04:15:9A:50:53:B7:0F:EF:7B:2E:14:8E:A0:08:6A:96:8F:4A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493C093FD0E29F50FC939DE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0769185d-c7a5-3786-b46d-489061b12416.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 172.235.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3f:d0:e2:9f:50:fc:93:9d:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=eba60b4f-542d-4a05-bb1c-4f0030e96e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:6d:8d:5c:ae:04:37:35:c3:4a:c4:be:24:
b4:6c:1f:52:08:6c:4c:2d:a1:27:7f:dc:49:90:5e:
57:6e:10:97:34:cf:d8:63:5b:f0:c1:b2:22:f8:fd:
92:df:cb:31:84:47:ab:be:6a:b7:69:6b:18:9b:37:
4e:69:a9:73:99:3c:23:27:14:b9:95:ec:27:d0:02:
f5:f7:fc:df:7a:db:2b:b7:a6:af:ae:b5:9a:b8:35:
1f:bc:8b:20:38:86:25:6f:64:7c:8b:05:73:51:c7:
89:f4:bf:1c:d3:56:da:7b:42:05:29:07:75:7b:88:
20:78:1d:de:71:93:10:f4:d0:00:e3:02:4d:3b:a1:
3d:26:9d:5c:62:e2:ec:7f:53:27:7e:92:35:04:05:
ea:d0:28:a8:67:e9:77:e6:fd:67:dc:0c:e0:c0:94:
27:58:d9:a4:2d:74:d4:56:be:24:eb:75:d3:26:21:
07:40:e9:64:94:ca:a0:ab:92:a3:32:b1:a3:4f:23:
38:68:8c:4c:c9:27:74:93:93:62:39:e5:55:3d:52:
4d:60:66:17:93:32:bc:47:45:90:0d:24:88:3c:d1:
02:17:b4:5e:1b:cc:af:49:e6:b1:60:3b:2e:22:1a:
f3:52:ce:63:43:15:24:39:41:04:7b:37:9a:12:c3:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:04:15:9A:50:53:B7:0F:EF:7B:2E:14:8E:A0:08:6A:96:8F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0769185d-c7a5-3786-b46d-489061b12416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:19:74:b4:54:c3:fa:28:b4:2d:f8:9a:52:ec:65:87:2b:df:
4f:86:4a:d4:d5:ea:06:2f:50:a0:5d:0c:82:c6:ae:34:8f:f2:
2e:f9:b9:11:88:bf:94:2f:da:33:db:76:f7:2f:38:23:1a:e0:
c2:d7:bb:18:4f:ee:e9:09:1e:49:04:55:87:2a:4b:8b:5c:15:
a3:99:ff:d9:d2:10:1f:d9:36:75:ef:1e:47:c8:e8:ba:83:06:
ef:1a:36:ac:52:4f:76:e4:66:34:a0:17:71:78:ad:d3:03:af:
e9:4a:73:2b:98:3c:1d:7d:58:af:08:49:22:59:e1:af:af:6d:
08:35:1c:95:4d:81:72:a6:68:91:3b:83:ae:1a:8d:8f:02:3a:
13:f9:48:e9:dc:ab:51:40:3c:3b:de:83:30:01:09:73:79:ac:
45:16:b0:09:9c:3d:48:2a:23:a0:13:c1:d8:aa:4c:7b:06:3f:
f6:23:d7:50:98:93:0d:1f:6c:d4:8c:94:84:e6:13:42:c7:ec:
fd:cd:2c:37:19:ee:8c:9f:5a:4f:0c:11:7f:53:51:4d:75:a6:
ed:6a:47:d6:c6:84:84:c2:c7:d2:ed:c6:6b:b1:b8:32:e0:c4:
c1:f2:12:67:29:9b:6d:37:23:94:7c:9b:29:71:fb:34:d1:e6:
78:1b:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:08 2025 by rpki-client