Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa
File: 79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa (raw, json)
Hash identifier: 3tmVCms6lfgQEXeWVceMkOshPCpqcDCPNsvCwQ04SIw=
Subject key identifier: B4:86:1C:98:8A:11:CA:3C:52:C4:1C:B5:0E:5D:B3:8A:B0:9F:BC:62
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E2D1A590D30CC156B8FB9E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.225.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a5:90:d3:0c:c1:56:b8:fb:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=526d0055-e0e5-42b6-9693-880878c2e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:54:b1:38:17:83:8d:b7:e6:3c:36:a5:8d:
12:42:f6:83:64:94:ca:70:df:23:0c:60:f4:60:ab:
3e:89:a3:4e:bf:bc:c2:b8:42:0e:ca:fb:4d:9e:6d:
6f:6b:dd:e3:ab:22:7a:6d:90:28:5f:5f:2c:78:87:
23:8f:74:0b:76:31:79:a0:72:b9:24:a0:27:93:34:
64:cc:a5:9b:d2:31:d5:51:20:cd:82:a3:39:d7:5d:
d2:78:80:55:01:69:77:85:7d:77:78:ce:f7:e8:3d:
e6:35:93:40:a4:17:70:44:10:29:ae:c3:3b:72:07:
7a:d2:08:40:54:57:a4:92:41:f2:48:36:e9:9a:9e:
50:00:77:cd:e0:33:15:ce:c7:95:70:b8:89:0d:f6:
24:7a:dd:4b:64:49:19:52:a9:59:3a:3c:aa:c2:e0:
db:2f:1d:31:03:03:68:e2:a8:d3:c3:f7:55:63:5a:
e0:6d:b9:76:3a:4c:b6:e9:5f:f7:57:64:3f:95:3c:
75:15:6d:d4:e3:e3:a2:6e:85:43:d2:06:b3:d1:c3:
58:f8:9a:9a:e4:d3:3f:c7:a1:64:1e:32:26:0e:a0:
da:8a:de:59:3c:12:10:7d:22:7a:67:c3:e4:14:98:
00:cf:f3:28:c5:fa:07:17:19:5c:b9:af:a2:4f:18:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:1C:98:8A:11:CA:3C:52:C4:1C:B5:0E:5D:B3:8A:B0:9F:BC:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:60:e9:c1:a2:61:79:a6:c1:fa:4c:b2:75:0e:2f:c7:c4:ed:
83:b0:64:cb:42:4c:da:c0:35:71:70:60:a1:79:83:e9:f9:e2:
37:1c:82:bc:00:e6:9b:d2:de:a8:e7:43:6f:09:22:31:ed:2a:
e0:71:93:a8:ae:b4:d9:0d:78:6e:fa:f5:57:ab:01:da:75:24:
05:70:f4:21:3c:a8:4e:64:4c:84:15:51:71:7a:48:7c:fd:c0:
05:00:23:ce:fa:49:6f:09:6a:e6:3f:c3:60:10:a7:8b:94:04:
f5:ec:e9:8d:5e:85:78:83:c1:02:db:8b:6c:5c:e7:20:a9:a4:
b3:05:61:5e:96:d3:ad:06:38:d5:41:3e:05:93:39:8b:07:6a:
12:96:af:8d:be:ee:61:a1:85:c4:fc:b5:7e:fb:8e:22:11:fe:
7e:f3:c7:ef:01:e5:0d:ed:c1:24:8d:4b:71:75:ea:ba:8f:a0:
e8:af:05:7f:d0:a0:04:27:cd:1a:54:35:15:f0:18:09:21:af:
a7:15:94:d6:ab:a5:1b:56:b4:b8:5e:13:84:6f:fb:31:a0:70:
ae:9f:53:e2:23:58:19:be:05:6c:cb:3f:58:2d:f6:56:c6:3b:
be:b9:70:f6:cc:7b:0e:a1:9e:ab:0d:25:8b:49:90:a8:3d:20:
f2:87:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:16 2025 by rpki-client