Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa
File: 4d57e82b-04de-3948-8a71-e541289a09a9.roa (raw, json)
Hash identifier: xRrW9yqRGFU/TV6jLfq4XuW00H/BBW1BzCzS5W9Qx8Y=
Subject key identifier: 74:31:34:BA:36:A6:7E:01:DB:1D:1B:0D:65:F8:E7:30:0C:84:17:A5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF617408BE58DF0C3BFDBDF4
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:74:08:be:58:df:0c:3b:fd:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=33dc0735-615e-4989-905e-b9d8f512751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:77:b1:96:01:f5:24:a0:d0:ce:56:a1:a9:
51:3e:ec:4b:fd:47:6a:dc:c9:bf:1e:f4:de:70:83:
1d:7f:1a:dd:68:2c:a8:94:7b:ba:f2:37:5e:e8:79:
b2:ab:ba:79:5f:df:a8:34:df:86:4b:7c:3f:01:68:
fe:ac:5c:26:55:d5:17:4a:a9:64:60:78:10:38:3c:
84:95:e5:bf:c2:1b:84:41:6c:4b:cc:1c:f2:2e:56:
e1:e2:11:c2:af:11:15:67:bf:4c:d6:b6:d9:03:d4:
08:b3:20:3c:c3:c9:52:f8:77:dd:98:09:b8:f8:f4:
d7:8d:8e:c6:3c:f8:e0:7c:84:f2:b9:0d:39:3e:65:
c9:d9:d8:82:f3:8a:77:bb:28:5b:f2:7d:1d:d3:c4:
92:eb:fb:4b:7c:0d:8e:07:5a:c7:cc:d6:c4:97:5a:
7a:c5:f4:38:2d:7c:5a:13:81:ff:75:f1:d4:9a:6c:
98:d5:29:27:e7:fb:e0:21:c9:cc:97:67:94:e7:f9:
55:3d:a0:14:23:66:65:c5:e5:75:56:47:ce:e2:f3:
1c:f7:31:4a:22:73:da:28:fa:cf:7d:52:5e:b2:84:
ba:d0:6c:19:28:09:22:fa:46:18:f9:d9:f7:1e:5a:
fb:2a:bd:4b:a8:d0:ba:96:09:15:9f:68:c6:37:c2:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:34:BA:36:A6:7E:01:DB:1D:1B:0D:65:F8:E7:30:0C:84:17:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d57e82b-04de-3948-8a71-e541289a09a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:70:4c:22:95:1a:59:65:c7:95:d3:d4:56:f3:7c:1e:09:1a:
32:ef:c1:b8:ec:26:d0:e6:62:5c:38:50:da:6d:40:f6:6d:18:
1b:bf:2d:6e:76:5b:a6:72:b6:e8:8f:c8:01:51:ea:b9:1e:a3:
4f:07:45:6a:82:e6:a2:d7:ca:be:cf:88:85:b7:fb:b7:ad:bf:
57:e1:ab:6b:39:a0:1e:52:e1:67:da:26:42:ea:a4:97:d8:35:
2f:d1:54:bf:68:fc:29:56:98:a6:ff:94:ee:43:38:95:fc:3b:
b4:a7:52:33:64:85:0a:92:87:0a:ff:fd:d9:76:6c:63:da:15:
25:66:b0:40:20:45:21:75:86:4c:77:a8:8e:6d:57:33:a1:3b:
c7:99:3a:4c:fc:8c:87:f1:bb:61:fe:17:07:12:7d:79:2a:62:
d4:cc:71:f1:a6:ec:99:30:6b:4b:0e:40:43:87:d9:83:6c:2f:
cd:e2:b6:69:22:c9:78:b2:26:fb:21:86:05:34:ca:6b:2f:2e:
7d:bd:1c:92:30:93:37:85:2e:11:4a:32:00:ba:dc:2c:1d:ae:
04:31:10:ae:14:55:32:f2:c4:b7:6e:85:9a:f8:db:ee:17:5b:
44:5b:51:4a:03:09:96:44:f2:84:2a:5e:48:9c:8b:ae:44:af:
2f:9e:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:15 2025 by rpki-client