Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa
File: 77d04699-fb8c-301a-a976-23c1eb398425.roa (raw, json)
Hash identifier: iVfd25lbAVvXjffs+jGIg4JfQZSt7htc9T6GugjjA/I=
Subject key identifier: 6E:90:F3:82:47:C2:66:86:14:D5:69:29:AF:08:2D:57:6F:E9:08:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E2D21ED187F8A85027C3E780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.225.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:1e:d1:87:f8:a8:50:27:c3:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=dcc304be-6362-44f1-9037-6a7dfda764f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:05:94:8c:81:55:02:49:fa:52:b9:b6:02:
98:d3:a8:07:a6:b7:76:69:a9:62:9e:4b:d5:fe:dd:
45:2f:96:4b:43:d5:52:33:d2:3f:fc:e0:48:fc:af:
88:0d:c1:d4:f4:df:80:57:8c:68:ed:66:39:da:1b:
21:95:98:95:a3:0d:bd:98:f2:50:0c:db:d9:c8:3c:
99:56:8a:31:d1:ae:ad:1d:47:da:2c:8c:5c:5b:f6:
34:f6:b7:51:1f:91:8c:46:e4:89:12:53:83:4e:3c:
bd:d6:71:f9:b0:d6:9a:9b:31:29:b9:4f:76:24:59:
e6:4c:3e:cc:3c:c7:f1:8a:76:f4:44:ae:a4:89:8d:
cc:c4:85:60:ae:7c:6e:d6:64:4e:a0:0a:77:e6:82:
33:cc:a9:a1:48:b2:ad:c9:14:f4:34:66:b4:a1:fc:
7e:c8:44:66:ec:4d:de:5b:c5:76:06:b2:15:e6:2d:
78:03:63:c1:7f:4b:16:db:4f:d8:3a:af:43:94:55:
bc:61:52:7f:ce:1f:38:e9:b3:d1:a3:74:02:ff:47:
77:e0:c2:34:60:9f:b8:f9:63:18:25:bb:fe:26:30:
9d:5f:f8:6f:eb:13:1d:5d:63:91:89:d5:e0:64:82:
56:2c:a5:9b:83:99:bf:c2:bb:2d:7e:73:7d:aa:00:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:F3:82:47:C2:66:86:14:D5:69:29:AF:08:2D:57:6F:E9:08:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/77d04699-fb8c-301a-a976-23c1eb398425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:33:a1:a9:99:88:2e:2d:ef:60:38:0d:55:c5:c5:86:5d:1f:
27:f2:c9:fe:21:1b:19:fa:dd:ba:7e:36:a2:e0:0b:aa:14:6d:
ab:54:b5:e4:3f:4b:f4:8d:e3:33:ae:1e:b3:65:94:32:87:3d:
8c:87:eb:fd:15:22:a2:3d:eb:d9:10:e8:f5:22:e0:13:a4:6d:
7c:1a:aa:47:f4:ce:e4:f8:b5:e5:e0:40:da:ee:55:26:ad:5a:
73:8e:16:f0:9f:a5:b2:b4:a5:4e:8b:0d:a5:a2:ca:3e:dc:32:
df:e8:43:8c:42:74:6c:65:ef:6a:5e:f0:c2:45:ae:be:6e:01:
59:3f:c6:2a:9f:1a:8d:c1:01:f4:13:f9:5f:bf:fe:ea:23:7f:
20:d9:1d:83:74:5d:4f:69:40:e1:55:48:a3:a3:1f:f8:e4:31:
b4:de:16:dc:57:6c:76:f0:f0:7d:48:87:c7:98:55:07:e4:4f:
bb:6a:61:79:17:51:43:90:52:97:90:d2:c8:42:d4:4f:73:eb:
41:93:90:8f:78:07:98:cb:af:6e:97:9b:de:c8:81:6e:4e:65:
53:f8:29:9d:d8:d3:a2:ba:56:39:50:36:06:64:78:1a:e6:3b:
a3:fa:ac:1a:42:a4:af:e5:c2:3c:e4:73:43:d0:04:b7:44:2a:
f0:17:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:43 2025 by rpki-client