Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/847a4bbe-cce1-3bf3-a8f7-022168c5dcac.roa
File: 847a4bbe-cce1-3bf3-a8f7-022168c5dcac.roa (raw, json)
Hash identifier: z2Scss10fde19zBs4+RPdUMwa/5pcjZedLbjMcJOfnI=
Subject key identifier: C3:C2:86:1E:FA:F5:F0:0A:BC:67:3F:7A:AB:E4:94:E2:1E:1A:04:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF61731E995C030F4E4E6E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/847a4bbe-cce1-3bf3-a8f7-022168c5dcac.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:73:1e:99:5c:03:0f:4e:4e:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=6832014f-a327-47d7-86bc-41bc4bc5f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:95:58:3a:6e:3c:49:6d:b9:ff:ab:16:7e:
e9:47:66:a3:87:42:d3:09:b7:02:7b:bc:34:ba:89:
85:17:b1:ad:4f:1b:a1:62:b1:5b:83:74:9c:17:d9:
d2:c2:f3:9e:b7:1c:56:d6:94:5f:9b:8e:7e:d9:63:
bc:05:eb:c8:e1:d7:2b:50:69:85:6e:a7:0b:31:17:
a0:56:c6:1d:24:85:24:e2:c4:93:a6:54:38:2a:ee:
26:d9:2b:43:48:d2:8c:88:27:8c:8d:e8:02:3d:db:
56:cf:06:f4:97:f2:50:26:f6:ba:51:10:85:51:0f:
58:60:3b:96:40:7c:95:e3:ac:4d:39:6b:40:ea:9d:
cf:65:3d:5d:ea:d3:2e:e2:1e:d4:5f:23:85:20:7f:
d2:ae:db:af:64:39:27:c0:89:6b:ef:9c:59:02:bb:
bd:3c:fb:36:81:85:31:45:c2:d5:4e:fe:6e:f0:cc:
54:23:48:c3:2b:de:49:71:ae:b7:8e:a1:c6:38:48:
21:3c:ed:42:dc:0d:b0:9d:b1:ff:6b:4a:2c:3e:6c:
38:1c:dc:10:48:4f:b9:12:6b:53:71:5e:7f:ae:16:
97:57:e6:d1:22:28:9a:5a:e4:d5:dc:53:64:07:41:
99:1c:5a:b3:e4:b9:3d:7d:02:ce:bf:e8:0f:fc:96:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:86:1E:FA:F5:F0:0A:BC:67:3F:7A:AB:E4:94:E2:1E:1A:04:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/847a4bbe-cce1-3bf3-a8f7-022168c5dcac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:1a:ed:1f:12:3e:fb:80:2e:e0:e1:71:14:2d:53:a8:68:8e:
3f:10:b2:a3:a6:00:4f:61:5f:f7:24:55:1e:f1:e4:dc:c1:fe:
ed:98:69:85:d3:57:8e:63:83:62:fa:ef:c1:c2:6d:1f:dc:1e:
c6:9b:5d:f0:f7:75:fc:cf:46:4c:76:36:70:0a:51:5f:64:ff:
80:c2:74:e7:66:17:a1:16:e4:c8:d0:b6:fb:a4:7b:03:44:a8:
7c:ff:d8:96:a9:c4:50:b5:67:58:1f:21:fb:eb:de:70:65:6e:
2f:57:e8:8b:eb:92:3a:3d:4a:00:c6:9d:fe:e1:95:08:38:a7:
8f:4e:ec:b9:bb:f6:05:3b:e9:d6:fb:ee:a2:e9:41:09:19:55:
aa:1f:f3:5a:5e:dc:d6:c2:93:21:00:49:74:9a:3c:67:80:49:
1e:85:12:72:9b:68:fc:d4:36:33:cb:e4:eb:40:98:49:8c:c5:
e1:83:31:6e:18:64:20:f2:7b:48:89:3a:29:b0:b4:4f:db:48:
f6:fb:82:9e:70:5d:a7:13:f2:ec:09:11:6b:be:d2:b1:34:46:
1c:bb:e9:75:85:38:78:09:7d:4e:db:09:e0:74:55:eb:dd:e0:
42:c6:0e:51:c2:84:4c:05:ed:0a:e8:6f:9c:30:95:7a:cd:dc:
f4:7e:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:43 2025 by rpki-client