Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa
File: 717284ca-0bf6-3928-987d-375d53d3228a.roa (raw, json)
Hash identifier: Dp2MuBkpFsuxzxD2X4V3kPzuSdjw/RXG3hdULffbdbM=
Subject key identifier: 81:88:68:2F:09:2E:6B:77:56:08:E5:88:8B:7B:3D:12:CB:82:3A:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DEA12902EF22FB3FDFD7DF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.225.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:29:02:ef:22:fb:3f:df:d7:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=1a1c1b5d-f7e4-4acc-a6bb-34dd4f282a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c1:c7:97:10:7c:db:56:bd:6b:4b:7c:56:17:
de:96:a4:7b:76:7f:fc:ac:d8:69:96:1c:a2:61:1e:
2d:49:c5:5e:a3:6b:07:1f:a2:c7:bb:cd:7c:22:a3:
9b:6e:34:67:38:ba:9e:55:3e:70:f1:f5:28:30:c2:
58:af:52:51:2a:23:03:a1:b6:cb:73:01:e5:24:88:
21:5f:d8:04:91:63:ff:cd:eb:bb:6f:61:1f:7f:01:
d7:05:ef:54:71:25:8a:f3:92:82:6f:ac:3a:86:2a:
fc:2e:14:dd:02:45:ff:f8:c9:b7:45:30:9a:9e:70:
97:14:89:f3:60:5f:4f:66:7c:05:f6:12:dd:ee:4c:
2f:ea:2c:77:38:53:f4:98:a5:de:85:c8:a8:3a:ad:
67:df:29:f0:bd:9d:34:0f:44:d9:73:d7:42:82:e9:
29:db:a0:4c:de:31:14:2f:a7:43:73:1f:6b:99:be:
8d:4b:1a:b1:e9:59:69:55:9e:bd:07:58:4c:6f:80:
06:c5:a1:8f:57:55:e1:5c:23:e0:f3:45:2e:79:ec:
cd:4a:36:82:05:bb:48:e6:0c:2f:1d:a8:7b:b0:ba:
e3:a0:e8:d7:43:c0:ed:ca:36:fa:5d:30:67:ec:5a:
34:52:f4:5a:d9:e2:50:bf:f1:b1:5b:9d:ee:5e:39:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:88:68:2F:09:2E:6B:77:56:08:E5:88:8B:7B:3D:12:CB:82:3A:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:0b:95:7d:73:00:8b:95:cb:32:64:2e:5f:69:da:4d:1a:a4:
d1:e9:79:c8:00:cd:1a:7e:60:74:f6:c3:b8:fd:bb:22:3c:b0:
06:38:78:05:37:19:21:31:a3:f2:ec:05:46:ed:f9:38:ad:d2:
76:f3:bf:62:43:25:f4:21:5a:2c:ba:3b:48:fe:bd:92:ed:26:
c0:ab:4c:ab:18:7b:ee:dd:b3:a6:d6:01:70:d6:3d:c7:b9:a7:
a9:81:45:86:a8:24:9b:90:d4:95:39:ef:d1:7f:a2:06:ab:62:
d1:fc:e4:84:a5:bc:54:d1:d8:06:c6:69:38:ce:ab:00:4d:0a:
8d:45:5a:a8:fa:81:2b:d0:1d:54:7c:dc:ba:50:50:24:aa:7e:
fd:a2:30:d1:51:42:d1:67:15:01:aa:62:9c:27:3d:e8:30:65:
f0:da:d4:84:45:9a:19:c0:1d:d8:5f:15:b6:3f:42:c3:b4:31:
11:07:c8:62:5d:f2:ee:6e:ef:4c:a4:a8:0a:b5:0a:b2:a9:9d:
94:f0:61:79:01:1a:1c:3d:2c:dc:5c:34:da:af:22:61:54:94:
f9:49:21:85:57:71:d1:f1:b6:ce:7b:e6:d5:bc:19:67:c9:a7:
13:b1:ab:65:5c:62:b6:23:fa:8d:f7:30:33:69:2c:4b:61:9e:
30:06:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:27 2025 by rpki-client