Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa
File: 313c10c0-7295-3f23-a4b6-1b392dfff720.roa (raw, json)
Hash identifier: gY22IbK7Vyyt3nSWRD4FHCMGXJhaVKWwSlTq4vznznY=
Subject key identifier: 63:16:F0:4E:02:19:97:7D:F8:30:9C:C5:3C:6E:13:4B:C7:3D:B2:68
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F4F81F80C198254E7130C180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.224.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:1f:80:c1:98:25:4e:71:30:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=7abcc425-0d54-4aa2-a8b9-7b6d953b9c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:a7:c4:54:be:09:24:19:9b:4a:39:66:28:
32:00:5b:81:67:15:6c:a4:5a:81:1d:81:f8:b8:4a:
a2:c5:b8:78:c2:95:f3:6d:64:f7:df:bb:63:3c:aa:
82:d8:90:16:48:de:e6:b6:4a:11:3a:e5:08:cd:e2:
00:f3:6e:bb:84:24:f7:86:de:20:44:7e:b4:af:8c:
84:1c:ee:73:19:54:76:7f:b5:db:1c:9a:87:3a:eb:
0a:c9:6b:6a:f3:a3:46:d5:3f:89:56:cc:80:2e:dd:
d6:2e:70:dd:90:99:db:d5:96:29:4c:df:63:7f:d4:
e5:81:d3:23:8a:14:c3:fd:f3:ed:8b:71:e5:f6:6f:
6b:60:08:83:af:9c:b7:62:58:8c:5a:e6:c2:cb:ad:
7b:0b:bd:51:a7:72:a3:b3:ad:5a:0b:c3:e8:84:73:
6d:5f:e3:72:1d:eb:25:3a:e4:b1:40:a6:da:11:06:
66:ad:43:20:c0:64:cd:cc:21:24:17:8f:81:8f:61:
6f:f7:18:43:4f:5a:26:be:53:81:5b:48:be:04:99:
46:fc:65:36:f1:b5:26:d3:0e:18:87:27:c5:9a:84:
60:44:de:d3:d2:7d:dc:45:d1:06:7f:25:4d:06:ef:
01:52:df:5a:b9:b8:c8:d6:b8:42:07:26:e5:73:b4:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:16:F0:4E:02:19:97:7D:F8:30:9C:C5:3C:6E:13:4B:C7:3D:B2:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/313c10c0-7295-3f23-a4b6-1b392dfff720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:aa:32:5b:9c:d4:63:06:a6:03:70:28:00:0d:a3:1f:6d:ad:
56:6a:2d:5b:e3:97:ac:17:9f:ef:be:97:cd:09:96:f3:30:80:
96:30:8d:a7:c4:07:1b:93:64:ac:c9:b6:6d:6d:87:4f:58:a9:
11:d7:e7:0b:c0:41:60:bd:25:31:5c:4e:95:15:2f:b6:11:59:
b8:8a:88:33:27:51:15:48:09:a0:22:5e:b6:0e:16:b0:fd:68:
a9:31:af:f6:de:a8:da:c5:58:3d:95:4e:9d:99:40:88:2d:15:
3c:29:8a:21:27:4e:12:22:50:80:b8:2f:52:87:7c:9c:18:4c:
88:62:bd:b7:a4:6c:ed:56:50:1c:01:ef:e0:82:99:ca:be:fe:
5b:bd:fa:dd:9e:d5:18:d0:de:15:bc:fb:82:ef:5e:b6:27:22:
e8:01:31:65:36:72:b4:48:4d:02:37:dd:1d:13:5b:46:21:79:
ee:15:65:7f:5e:3f:e2:0e:24:47:29:4b:22:45:da:5b:3e:14:
cd:5a:ae:d6:ee:a2:84:3b:10:6d:2d:93:25:19:de:09:76:30:
23:c2:9c:c0:74:74:29:8f:d1:1b:4b:38:89:18:15:b7:16:c9:
c7:d5:77:c4:e6:2b:80:aa:00:ff:75:63:e9:44:4b:76:67:11:
ad:90:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:42 2025 by rpki-client