Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa
File: 28b09633-56ea-303f-ae65-54763fa31125.roa (raw, json)
Hash identifier: uakr6ct87jzJ/PgbLxos/W+K8UsmZE0SSeHvAqOwlk4=
Subject key identifier: 60:0D:F5:A2:E5:49:A7:DF:F8:00:14:FF:41:85:D7:B4:5D:B8:25:50
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A1362AE68CC2E2BEDD5041E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.224.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:2a:e6:8c:c2:e2:be:dd:50:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=9bd8aab2-25b6-4acd-a9c7-74c3e98b9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:66:cf:cb:2b:9d:2b:fb:9a:85:26:49:bc:
3c:5e:7e:90:14:58:73:6e:03:60:f6:b1:6c:e0:84:
f1:5f:4a:1b:58:33:50:a8:dd:83:76:42:9d:b6:c7:
13:ef:8b:15:6f:f9:c0:0a:d7:14:35:be:02:75:ff:
0c:7a:7d:c3:f5:3d:5a:20:71:61:14:12:55:54:17:
f6:1b:f5:c0:8d:fd:f2:15:bd:86:a0:8a:56:5a:0f:
20:e5:4d:3f:6b:2e:d0:13:2f:ce:2b:f6:dc:ab:b2:
96:83:52:40:cd:43:7a:0d:01:f8:2b:ef:3f:eb:27:
fc:1c:fa:ff:f6:64:e2:b2:d2:fe:e9:68:da:9b:d1:
71:45:46:07:87:ee:d9:8e:1a:28:2e:05:f4:e9:64:
45:ad:ef:eb:cd:7d:8d:68:6c:74:78:55:b3:4d:f4:
ef:67:41:23:d6:98:62:2f:f8:3b:f1:7b:20:38:29:
08:d8:a1:9f:15:39:dc:2e:dd:26:49:fb:19:11:31:
20:16:f5:87:23:9f:de:98:ed:75:65:ff:e7:24:ca:
d9:77:93:7f:52:b2:03:2a:0d:0f:2c:05:ad:64:a1:
15:2e:cc:ce:1b:f5:5c:ef:ca:03:5a:61:7c:94:b4:
fb:5d:1e:1a:2d:0b:76:e5:75:df:6d:2a:23:3d:4d:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0D:F5:A2:E5:49:A7:DF:F8:00:14:FF:41:85:D7:B4:5D:B8:25:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b09633-56ea-303f-ae65-54763fa31125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3a:d3:e0:3e:88:bf:6e:28:f2:eb:0a:1f:e0:9a:8f:6e:3c:
3e:af:d9:14:1d:dd:f2:68:95:ac:92:25:6b:a9:3f:a2:8c:a0:
37:9f:29:4b:2c:c6:e4:1d:01:94:2c:d8:f5:2e:1b:f6:5a:60:
e9:09:b0:4b:78:50:38:ef:cd:1c:3d:e0:17:8c:d0:06:ea:d5:
47:4e:88:00:80:fa:d8:42:c1:99:e8:75:89:15:93:2f:27:4f:
15:89:c3:37:21:19:82:97:58:1a:a9:8d:51:9e:d1:c1:5b:53:
b2:a5:d1:ce:e7:09:d3:01:0a:d5:73:3a:5e:9e:b3:8e:ec:6d:
2f:3f:56:bc:cb:a9:54:9c:50:28:23:00:ee:40:ca:38:e9:ee:
0a:f7:21:91:27:8e:b5:fd:18:a1:09:be:5c:5b:aa:fa:d7:46:
6f:b8:e5:99:6c:3b:0b:39:cb:ad:11:0d:28:a9:e2:c1:c0:8c:
4b:38:36:d5:17:09:b7:53:1b:28:c1:2a:75:6d:fc:d5:72:b9:
14:40:3c:ae:f5:4c:d7:9b:d7:1c:83:18:8d:2c:04:29:26:1e:
c2:41:27:76:b2:7c:81:8f:d8:08:21:7c:48:3b:0f:0c:32:d3:
da:fb:dc:85:7f:40:6e:7e:65:31:43:bc:3d:58:c2:ad:1c:bb:
38:40:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:26 2025 by rpki-client