Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
File: 3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa (raw, json)
Hash identifier: VMCgB1h+CVc2EOpnWiWZkIC9SNYqUfdfCjVmVBp1EBw=
Subject key identifier: 3D:F2:BD:93:27:50:4F:3C:2D:ED:44:98:8B:D4:13:3C:25:95:56:10
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E2D1A51C49616A8FAFF39800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.225.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a5:1c:49:61:6a:8f:af:f3:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=ee22948c-9da2-4f04-b385-a16103f4b105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:89:94:7f:43:f2:65:77:3d:cf:7e:8d:0c:
f5:02:8e:c8:45:fb:02:0e:3f:b9:0f:ab:6e:50:e6:
e3:0d:92:85:34:aa:e3:3a:a8:3c:7d:47:89:86:62:
2c:9d:40:4b:e6:22:59:c6:ab:48:4f:df:32:59:6e:
77:d6:01:6a:36:76:bb:50:8a:2b:9c:ea:fd:06:88:
69:96:7c:bf:93:e3:df:95:aa:0e:39:ec:24:c7:78:
52:68:0d:d6:f6:4b:59:ac:97:34:1b:36:83:71:0d:
f3:ba:cb:b8:48:14:a7:ea:bc:86:3f:1e:51:24:b3:
d3:65:f1:0f:c5:38:53:43:0c:bc:02:2d:d2:5a:bc:
1b:dd:d9:50:35:aa:d8:9d:ed:b1:da:e9:90:88:f5:
a8:94:8c:f7:c0:44:c3:8e:dd:29:a8:87:29:9a:e2:
1f:82:f5:36:e9:78:45:8e:b6:a3:93:f2:1b:8f:35:
b4:63:6e:70:88:04:d0:b6:3c:d2:01:a8:ab:b8:9f:
ae:b3:b6:b6:54:88:93:fb:9f:e4:48:97:95:4a:10:
d0:a5:28:dc:17:d3:f6:f8:bd:d1:68:14:c1:6d:7a:
fe:a7:b5:da:b5:91:83:3f:97:73:3f:72:0a:f5:c3:
9b:26:ac:b8:a1:6a:d0:2e:26:b9:01:d0:01:a4:eb:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:BD:93:27:50:4F:3C:2D:ED:44:98:8B:D4:13:3C:25:95:56:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ab7e658-3806-3076-8618-b2d6b06b7ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:4c:ae:51:63:a5:1f:b5:53:fd:5c:1f:31:c7:c3:85:ec:b0:
df:e2:13:11:25:a9:ed:44:7f:9d:98:c2:c9:c4:86:07:29:59:
09:d5:db:36:fe:f6:10:55:4c:04:6f:ee:32:09:33:eb:1a:6f:
fb:8d:f9:bf:e7:9a:de:a5:7c:40:7a:21:0e:b7:cb:8c:bf:8f:
93:af:71:5f:18:7d:65:ab:d9:21:65:ef:12:de:c8:9f:cf:9a:
9d:62:d8:8f:b5:d8:1b:31:70:73:4b:c7:3d:65:26:4c:9c:a0:
ae:7d:1f:a4:47:51:b2:d3:61:1e:70:0b:00:a7:ba:72:bb:d3:
08:f0:94:ed:3d:56:c7:dd:4c:da:34:ec:3f:91:7d:8c:a1:75:
91:cd:68:32:29:22:1c:fc:18:90:aa:f9:e8:79:88:50:15:77:
df:5f:44:9c:b0:5f:99:1b:b3:13:05:37:be:6f:a7:d0:f2:1b:
7c:47:b0:9b:d5:e0:55:80:4e:96:84:96:7c:da:00:2f:86:6d:
57:f0:33:b6:64:42:7b:2e:4a:50:57:a3:b0:af:7c:30:d6:a4:
51:3a:b6:26:86:6f:2b:0f:84:f1:76:08:94:18:c0:e6:83:c5:
aa:39:76:a0:55:f7:cc:78:b9:6d:31:1d:68:78:90:a4:db:21:
ca:6f:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:45 2025 by rpki-client