Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
File: 4b814478-696b-3695-a4b5-c0625b9e552b.roa (raw, json)
Hash identifier: MaGZ1U3MqPw5zYY1+mxW7aZqVK8Q2fGPJM6NuzWMXM4=
Subject key identifier: 22:6B:01:A6:27:ED:3C:F6:2D:CF:D5:29:3A:F7:FF:FE:24:47:78:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DBD671B323E95D651F587D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 36183
IP address blocks: 172.225.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:71:b3:23:e9:5d:65:1f:58:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=338fd58f-4a0e-4978-bd61-afe0ac93e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:05:57:1d:1f:2c:31:ae:28:26:35:09:13:
68:19:e3:8c:1a:d6:33:f5:d4:ca:56:a4:b8:24:5e:
2c:d1:0d:6e:d7:a5:28:ae:42:bc:da:3b:5e:22:24:
bc:fa:09:3a:ab:95:82:f8:46:50:80:1a:b4:e4:a5:
33:5f:db:70:c7:f5:a6:99:e6:e3:ea:42:dd:ad:04:
0b:ab:a4:2e:3d:73:c2:eb:f2:cf:9c:40:67:1d:b8:
8e:80:40:2a:fa:e3:58:c0:b4:52:ab:00:e5:db:79:
d1:79:ec:c1:4e:11:00:a9:a8:73:4c:c9:e9:e7:85:
dd:af:0b:b1:bd:1f:f6:1a:85:93:e0:5e:f1:4a:ce:
86:ae:54:18:33:4f:9e:f1:e4:c0:b1:dc:06:28:99:
d3:0b:fe:5b:70:b8:1e:0d:e3:c5:6b:c7:16:af:00:
32:fa:36:c3:82:64:c4:1b:06:fe:73:25:35:c9:91:
fc:f1:a8:0a:da:b7:78:0a:bd:e9:e6:ca:3f:89:be:
0a:d5:b4:b9:78:85:23:f3:89:32:9a:0e:7b:06:c2:
60:6b:b9:da:fb:82:2f:4d:df:df:f9:3f:a9:89:f7:
05:4d:3b:a7:cb:bb:db:1a:69:5a:b1:77:99:e2:8d:
a1:1d:14:17:fc:c8:be:eb:9c:f2:52:22:d7:ea:09:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:01:A6:27:ED:3C:F6:2D:CF:D5:29:3A:F7:FF:FE:24:47:78:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b814478-696b-3695-a4b5-c0625b9e552b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a8:08:6d:9d:b1:30:55:6b:02:f2:3b:66:52:8d:de:e0:c0:
82:3c:79:68:59:59:42:4b:11:b1:4e:78:8b:99:4c:59:04:33:
07:41:ff:25:11:b9:82:7e:ad:9e:b0:f3:fa:b8:69:11:d7:99:
53:6f:bc:86:49:c7:57:25:b8:f9:a6:1a:52:bd:0c:4d:62:ad:
c7:42:42:62:db:79:b6:f8:13:95:34:32:c8:ac:54:02:f9:7f:
02:77:5a:ed:60:7a:c8:ad:c8:ca:29:45:6e:3a:7a:51:d4:fe:
90:8b:6c:e2:18:7e:61:91:f8:58:9b:53:36:d7:7e:92:37:10:
cf:f1:66:90:04:6e:df:16:84:a6:53:52:45:e3:54:02:f7:5d:
b3:32:dc:b1:28:64:9a:8b:67:70:67:3d:9d:6c:b3:54:52:45:
b8:88:7a:95:0e:a1:57:85:0b:b2:ae:7b:98:4f:4c:38:5a:6e:
6e:c6:c7:87:ce:be:a9:29:9a:28:60:aa:9e:90:19:fb:67:88:
4b:81:67:40:27:9d:41:ad:01:d6:8d:a3:10:92:f2:bf:e1:e4:
67:70:7a:14:5e:e9:50:4c:f3:ba:03:a8:67:a3:e6:d5:57:77:
fa:0a:40:db:3e:30:34:bc:2c:4e:d8:bb:79:f3:0e:0f:97:64:
ac:31:21:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:59 2025 by rpki-client