Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa
File: 88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa (raw, json)
Hash identifier: o05q7zuykgWo74HZ/x1LH6x/syCVJF5LA3YEBLfTETA=
Subject key identifier: D8:4B:40:62:4E:02:2C:9A:A0:5F:FD:8A:3E:46:09:BD:CB:91:00:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DBD674665224356207B9CE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 36183
IP address blocks: 172.225.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:74:66:52:24:35:62:07:b9:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=85b9cd3d-9ec8-477d-ba5c-cf0e862b0030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:79:ce:c5:e1:8a:6a:e7:77:6a:2d:4e:7f:
15:0e:a4:91:07:9b:21:0f:b7:e5:af:13:87:8a:3f:
37:3c:07:c7:34:69:3f:2d:67:cd:22:85:f3:9e:b6:
c3:5e:cb:d5:40:c2:00:93:83:39:fa:52:b2:a4:2f:
1c:68:7a:82:c7:d7:74:c4:68:e7:a0:59:1e:30:6b:
ce:d9:5b:2b:54:16:4d:03:d5:7d:07:7b:63:e8:de:
08:08:14:60:d6:40:62:8a:e0:47:14:85:50:33:21:
ce:6e:20:49:69:9f:e0:51:60:70:85:ef:9a:59:1a:
84:27:0e:9c:1b:91:41:e1:3e:d7:98:c4:9b:da:5f:
e0:3c:94:be:5f:04:c5:62:1a:20:a9:a6:4b:10:27:
1a:5b:e4:f0:51:1f:3c:b3:41:93:f5:d1:63:8b:18:
bb:ec:de:4d:71:c4:1f:77:45:b0:d9:76:cd:1c:76:
48:68:59:fc:bf:81:f3:bd:75:bb:2a:0f:9e:87:62:
13:5c:45:de:0c:f8:70:96:77:16:b0:45:c5:d6:7c:
9a:61:a1:44:94:a0:a9:74:79:ca:0a:da:08:4d:e0:
20:a4:88:99:d0:17:f2:b1:64:95:b4:8d:c5:e6:c4:
e0:2b:61:5d:ff:99:c9:22:e9:2c:22:7c:69:83:9a:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:40:62:4E:02:2C:9A:A0:5F:FD:8A:3E:46:09:BD:CB:91:00:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5e:13:e9:7a:ed:84:5e:48:5f:63:cb:2f:6b:8c:a9:b0:78:
7a:61:84:5f:cb:4e:dd:e1:50:d0:40:47:27:e4:24:db:9c:da:
2a:2a:53:a3:b4:2e:14:f5:d3:55:cf:f6:2f:dd:9b:58:c6:31:
3e:c2:52:97:18:5c:81:a2:4d:15:83:20:c2:39:e8:ab:29:ab:
6a:90:99:ea:db:96:82:dc:f6:4a:21:1e:42:85:08:75:93:36:
e4:ff:8d:0b:d2:a3:71:9e:c0:87:73:54:33:f5:8a:0a:06:b2:
83:7b:48:7b:42:51:78:e2:76:df:fd:4d:e4:bc:37:ae:01:80:
71:57:f3:0c:6a:3d:ee:f2:de:3b:60:8f:f4:3f:1f:d1:86:b2:
aa:02:4f:c4:cf:e5:2d:50:88:d6:80:90:ee:e4:99:e6:d8:d3:
50:23:00:fa:32:1f:7d:0c:49:3a:99:68:10:df:29:d8:27:a7:
05:18:f1:33:de:b9:f6:7c:26:fc:b3:89:58:1d:88:3c:1a:7c:
fa:a6:0b:32:ef:77:6d:b6:61:05:f8:35:fd:dc:f5:85:63:73:
cf:19:29:ad:93:41:de:de:8e:5f:38:dd:33:75:89:b8:1c:6f:
06:11:48:52:f7:5f:b2:60:bc:7b:52:e4:c2:82:eb:ba:8f:75:
68:83:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:54 2025 by rpki-client