Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa
File: 2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa (raw, json)
Hash identifier: DZMcNi1yRwK0ju2rTlr3z0TdgesdZgq3IdMAswGVx68=
Subject key identifier: 2D:4D:4B:27:E2:A1:F5:05:64:0D:61:D0:E3:C9:DE:87:39:E1:1E:F3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F4F6A8871F45F106D1729E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.224.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a8:87:1f:45:f1:06:d1:72:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=68ae6e4e-c365-4252-af23-d5e7a6620939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:66:fd:04:3a:78:d7:53:b7:65:a6:33:ef:
fc:5f:5e:33:ca:ee:44:ad:7d:07:08:81:10:a4:57:
46:e7:ca:b8:71:cb:50:ea:30:1a:37:20:51:25:ab:
ee:71:af:90:14:68:0c:67:0f:dd:9d:94:35:54:33:
07:83:b8:b6:8e:1a:37:19:6e:fc:c3:bc:a9:25:4b:
97:25:00:ed:21:fa:af:df:57:2b:dd:60:77:1b:85:
fa:d8:54:6e:d2:5e:e0:f2:48:50:72:f0:e1:58:33:
66:cd:3a:ad:de:67:2f:fa:b9:80:fb:48:43:83:a1:
7c:10:41:2f:ff:14:3c:ed:fd:3b:46:c3:55:02:26:
b8:ad:75:18:d8:45:d7:85:d6:4d:17:19:30:dc:2e:
ea:c0:ad:bd:1c:f7:f7:5a:e5:fa:36:cf:09:33:9d:
16:58:a5:0a:ba:ea:8f:40:b9:dd:2c:86:1c:43:ab:
76:26:5c:4b:75:13:a4:4a:22:00:99:31:b0:7b:89:
e7:81:b3:9d:f3:e7:65:4c:26:77:bd:56:f6:a9:d1:
9e:ec:af:b3:3f:79:9a:f0:f7:e4:9a:0e:ad:4b:2a:
ba:06:d0:57:0d:88:bf:eb:f1:39:3e:a0:7a:95:44:
34:cb:e0:1c:40:b0:54:85:40:c7:88:35:7a:4f:fc:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:4B:27:E2:A1:F5:05:64:0D:61:D0:E3:C9:DE:87:39:E1:1E:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:60:9a:b6:ae:ea:52:50:25:d6:b9:c3:43:7b:c2:e2:25:ef:
90:7a:10:58:8b:aa:a4:c5:0a:7f:18:82:8d:ae:6d:df:83:52:
cc:18:ab:85:31:36:d3:cc:3b:7b:04:a9:00:69:4a:7a:b8:d2:
b0:b5:bc:3b:fa:a7:b2:31:bf:42:5b:eb:c6:86:e8:59:72:7c:
7a:a5:7c:9d:43:30:d4:85:a2:97:31:e1:d8:c7:89:31:da:9f:
da:48:a8:ae:6c:42:7f:f1:94:d6:fc:65:89:88:1f:c7:67:96:
95:5b:ed:98:26:57:be:38:4f:08:1c:22:2e:fa:c2:65:7f:ca:
90:a9:82:9b:7e:18:f6:c2:ec:10:74:dd:6b:5d:c1:5f:83:59:
19:45:32:a5:65:2b:80:bf:98:4f:5f:6e:b3:2b:4e:1f:5a:0a:
42:27:0d:74:4a:ed:41:6a:e0:17:c8:ec:a3:c7:e8:66:99:03:
aa:c2:f4:2c:02:16:b2:93:5b:aa:4e:ae:31:27:64:34:f4:08:
9c:89:f0:22:63:a0:36:2f:ff:f5:1f:37:bd:67:c0:d6:dd:29:
3a:f3:eb:12:cd:3a:70:c4:5a:57:b2:f0:c1:88:ec:90:dd:8e:
5b:2d:99:89:e2:f4:f5:5c:eb:ba:38:a8:7e:5d:3d:23:a7:14:
ae:70:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:50 2025 by rpki-client