Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa
File: 0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa (raw, json)
Hash identifier: 7k3Tv2w2JeGaVLFtPh7m0Yts05wtGv6z+NMRtoUnzdw=
Subject key identifier: 7B:C7:A0:1C:3F:68:70:3D:36:80:E5:E3:83:C8:60:3F:47:A6:31:40
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F4F81F9A409D98DDFCADB980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.224.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:1f:9a:40:9d:98:dd:fc:ad:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=0b1a7132-6453-4d1e-bd70-714825e9ca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:ed:42:a0:0b:ec:12:33:68:f8:63:0f:b5:
c0:ab:20:93:b1:ed:d4:27:3f:86:98:ce:ff:46:fc:
ce:85:d0:fb:fd:ca:34:26:d7:40:3a:bf:f5:cc:31:
35:d6:ab:42:ed:43:70:2a:b2:12:81:77:31:10:f9:
da:b5:a4:4a:3b:fd:8f:03:92:aa:52:8d:9f:9e:e1:
4a:05:4b:64:0a:c8:17:d7:91:a8:1b:b6:b4:8e:0b:
fc:9b:66:6f:90:fe:f3:3b:fc:69:9a:da:94:66:88:
93:74:5d:17:24:23:6d:d9:7d:27:a8:9d:aa:99:57:
d9:76:dd:3f:7e:8f:2a:7b:2d:dd:63:f2:7c:a7:bc:
56:f2:a0:99:56:26:83:b2:7f:15:c8:f7:50:a0:91:
f9:5e:87:59:13:28:95:09:30:da:3c:04:30:15:0d:
09:ce:34:51:39:19:fb:a0:9b:fd:cb:00:bb:c7:dd:
fa:18:18:95:f1:d5:64:12:40:c1:6b:12:ad:15:d7:
81:39:d5:c7:cc:97:9a:ed:96:47:68:38:51:ac:aa:
6c:1a:75:a8:ce:8c:d3:f5:9c:8e:9a:01:99:36:9e:
5b:bf:25:c2:64:77:aa:1e:0c:1b:19:44:5b:b7:ec:
f2:2f:e4:e0:a3:82:6c:c4:b4:c7:a0:8f:66:08:a7:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:A0:1C:3F:68:70:3D:36:80:E5:E3:83:C8:60:3F:47:A6:31:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b61f98f-61db-3f0e-aa22-3459e9f49cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:44:94:bc:7d:75:e9:be:8c:e5:4b:8f:c2:71:49:b1:cd:ba:
7c:3a:3f:c1:19:a7:80:c3:d2:7d:be:73:a1:6f:dd:47:1e:74:
6f:76:13:94:5b:9a:0b:6f:ba:d9:d1:82:1b:3f:49:5d:ca:d4:
9e:e5:59:da:d4:09:0d:0a:a6:a6:00:58:10:ab:4b:cf:52:c6:
7c:95:13:bc:79:3f:75:49:8f:ac:cd:f3:c3:5a:60:5c:8e:57:
87:98:48:11:c5:6f:b8:92:fa:ae:e6:9e:f7:09:c8:7a:7f:3b:
2e:e5:bf:03:53:1e:c5:5a:36:53:e0:f8:98:2f:49:2b:42:65:
81:96:35:20:88:87:12:41:e4:05:11:df:8e:3c:a3:ed:36:2a:
79:7a:fc:6f:70:ac:53:13:4d:60:9b:49:12:bd:ef:fb:b3:b0:
e5:ad:17:6c:a4:e5:35:09:83:d6:1a:fc:aa:38:14:ca:a1:c6:
52:b3:8f:03:61:39:3c:1d:e4:38:26:a9:a4:dc:cd:fb:ed:70:
b7:67:05:18:bd:bb:92:b9:cb:28:d3:3d:06:da:3d:dd:dc:bb:
7b:e9:4c:c4:89:8e:db:e5:8a:f1:f3:ef:4c:c7:d7:86:6f:4d:
06:cd:43:b7:b7:a8:e5:ab:af:a3:21:23:63:82:1d:a3:3e:7a:
fd:09:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:10 2025 by rpki-client