Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa
File: 784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa (raw, json)
Hash identifier: v64M0FmICfbduAwTRU+FAMn1OoAY0aLlkwCUE+5xK9I=
Subject key identifier: F1:6A:36:42:63:29:0D:37:C9:6B:3E:B0:C1:2C:05:D6:2C:0A:92:29
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F65BF2F58D6FC0D5DEA5EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 36183
IP address blocks: 172.224.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f2:f5:8d:6f:c0:d5:de:a5:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=d469d362-8ee3-40e9-ad94-90d13a106a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:75:24:8a:b3:6c:5d:5f:33:0d:5d:18:08:
a8:e9:a0:4a:69:fa:4a:33:83:01:2a:33:9a:8d:fe:
61:31:87:a5:e5:cd:43:d0:6e:bf:4f:06:9a:0a:e7:
fd:1d:71:c5:b5:c9:20:ab:99:35:3a:68:e4:ae:75:
a8:15:bc:f9:4f:4a:54:dd:a3:9a:53:92:2d:16:5b:
5c:3e:5f:a0:a2:ab:a9:50:bf:08:17:b6:77:f8:d2:
11:1e:72:55:74:9d:bd:0c:af:64:0c:0f:8e:8a:49:
e6:66:08:32:8d:dd:d5:22:97:b0:ec:cf:68:ff:12:
8b:7f:f2:f0:b2:72:e5:80:a8:94:3a:7d:aa:09:cb:
15:7a:8c:84:9e:55:e8:c7:d7:fa:47:f3:2f:f6:cb:
32:a7:a0:39:cf:2c:c0:bf:cc:91:47:a0:b0:27:f7:
84:60:b0:7d:d9:73:d1:24:c8:b4:d1:04:0b:24:ad:
13:19:ec:54:1c:46:63:a8:40:94:8a:b2:59:f4:1b:
14:24:ce:53:19:f0:fa:0b:ee:d2:e6:5d:99:d8:d7:
59:22:85:82:f6:27:5e:9c:7e:b4:f8:c0:23:f0:4f:
77:a6:51:d7:fa:24:45:f3:8b:3a:eb:fa:5c:b8:e8:
db:39:85:00:c8:1d:56:76:e6:41:2c:ef:13:e9:f3:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6A:36:42:63:29:0D:37:C9:6B:3E:B0:C1:2C:05:D6:2C:0A:92:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784ecb4d-9a7e-3a62-9d22-ddff09f1d021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:be:2c:22:ba:a1:a6:8f:85:22:ae:ec:43:0c:d9:42:b1:f5:
3e:24:9c:14:68:3a:96:d6:6a:c8:18:70:82:d2:b4:e9:5b:a9:
4c:3d:89:3c:59:79:b2:11:64:d7:c2:08:b2:ca:ac:ae:35:d3:
77:50:91:0f:0c:e0:bf:e5:20:5b:36:f9:a2:cb:5b:f3:39:a2:
c1:21:44:92:c6:2e:ab:b5:25:75:b2:f0:4a:6b:c9:a1:89:72:
0a:1f:c0:8e:4b:37:0c:c5:71:2a:35:c1:d9:ae:3d:72:bb:75:
37:4d:31:0c:70:9a:b1:16:1c:d4:50:9c:ca:5a:94:43:79:ad:
d9:58:a4:6c:0f:fe:c2:ee:40:ce:f9:a7:01:cc:1d:cf:3d:03:
8d:17:fb:be:27:6b:e6:eb:56:80:27:1c:6f:a2:44:86:4d:11:
f4:5e:ac:00:d9:f4:30:97:8b:9b:0b:59:20:a1:93:8e:cc:b5:
60:42:dc:0b:c9:01:0c:2f:aa:3b:30:f5:75:3f:64:62:34:74:
1e:4a:e9:0b:30:ef:a6:b0:18:0c:f2:00:89:f9:0f:8b:47:d6:
a6:12:a0:35:01:09:3f:46:f0:73:6d:2f:d8:57:69:b3:c3:f4:
37:a9:66:bb:b3:9d:50:7e:16:8b:28:2a:08:49:cf:71:e2:83:
e1:2a:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:34 2025 by rpki-client