Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b74cb6-398a-3a11-9115-af38eb4a2ecb.roa
File: 38b74cb6-398a-3a11-9115-af38eb4a2ecb.roa (raw, json)
Hash identifier: dol6AVNZEyqEdxL0rAUPRP7GoMKkeoMzgt2L9OAGJT0=
Subject key identifier: 16:48:8A:CE:2D:96:93:BE:F5:70:E2:EC:D1:5C:B6:4D:A4:30:33:5F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF61741B37780A76ACA01D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b74cb6-398a-3a11-9115-af38eb4a2ecb.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:74:1b:37:78:0a:76:ac:a0:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=19a953c2-a66d-459f-9c4b-bd3a0e31620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:9c:23:f6:90:91:8d:46:3b:0f:7b:1a:be:
9c:58:b1:09:1a:63:54:01:99:d7:ae:c1:16:62:c0:
a6:d0:d3:e6:7b:01:41:93:36:fc:97:e3:04:c1:d6:
f3:0e:ce:9d:db:8e:0f:ce:b1:fe:9d:db:64:c1:9e:
70:4f:bf:16:49:93:93:8f:be:14:7f:7b:40:b7:63:
0e:63:bd:85:39:aa:2e:dd:b3:84:7c:da:d1:05:8b:
9a:ba:a7:41:ec:b7:cb:d6:ce:a7:99:c6:45:20:da:
51:7f:d9:14:63:fc:7e:cf:46:56:97:f3:ef:34:6d:
61:24:b0:22:23:1d:57:4a:45:f1:35:75:59:2d:6e:
35:8b:c2:a3:f1:42:3c:f9:d7:4d:77:03:37:97:61:
99:22:14:42:2c:c3:d5:12:6f:e8:c2:c1:0f:00:a7:
08:c9:49:d6:02:79:db:21:b6:fc:4a:7a:0b:12:ab:
d8:ac:4e:34:d1:20:b1:3e:19:42:30:24:c4:8e:bd:
66:59:52:ba:91:51:8b:d2:6e:b0:1b:3e:61:05:5d:
76:fa:2d:82:a8:dd:6c:dc:27:27:cc:b9:12:05:16:
95:2d:85:88:3a:3f:44:35:65:bc:57:47:eb:9b:ff:
1c:a7:f7:6d:a0:6c:ed:b9:c7:c6:f1:bf:e5:4d:55:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:8A:CE:2D:96:93:BE:F5:70:E2:EC:D1:5C:B6:4D:A4:30:33:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b74cb6-398a-3a11-9115-af38eb4a2ecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:7e:f8:37:74:03:46:86:c6:7f:d7:b2:26:d9:38:90:ca:c9:
6d:32:b2:76:c0:d5:fa:d9:95:9a:10:0e:66:dc:bb:2d:86:fd:
9c:da:35:fb:78:10:01:2d:4f:9c:1d:ab:ad:f8:bc:cc:4a:56:
9d:f1:65:a9:be:33:ea:75:41:31:7a:c6:38:bc:f2:b9:51:fb:
d5:b7:83:53:89:96:7c:37:13:00:83:de:90:10:08:dd:4f:90:
c5:f2:fd:79:82:f9:0d:b7:2a:45:0e:91:44:ac:7f:e6:f5:5c:
9b:93:ec:0d:89:3c:ec:2a:76:ce:88:74:31:e7:89:ea:a8:ac:
86:80:ed:e6:75:a9:93:96:c3:e7:76:d8:d1:00:2c:cb:d9:34:
14:73:24:33:21:3a:79:87:37:bd:5c:0f:99:b0:6f:6c:18:e5:
06:c8:fe:9d:3c:bb:7b:19:b9:2e:27:4a:f5:0f:aa:94:65:45:
63:74:b1:f7:2b:1b:70:6c:bc:a8:02:b9:39:f2:36:d3:15:45:
9b:61:29:ee:cc:1d:37:14:8d:3d:44:74:bd:da:c2:5f:f0:8a:
30:ee:ff:ed:b6:d1:59:64:2a:51:03:43:4f:6b:a5:c9:70:c2:
84:11:00:cf:fb:ee:63:08:cf:02:3c:6b:3c:1a:9f:fc:68:6b:
dc:0f:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:27 2025 by rpki-client