Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa
File: 8b0de5f6-acb2-3523-be5c-014176085ef9.roa (raw, json)
Hash identifier: v1AafOzplRD0DWE1epnvxtLmeG/fRoiP2QkxRM2TQns=
Subject key identifier: 35:09:3E:FD:45:B0:4C:0F:FB:6B:C4:53:F9:3C:03:AB:51:E7:84:B4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E1850A759751032331DB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 20940
IP address blocks: 173.222.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:85:0a:75:97:51:03:23:31:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=c2b79752-b28c-495f-a0eb-2811fe6d819f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:f6:52:a0:cc:e9:24:75:cf:e5:d4:0e:90:
15:c8:3d:7e:33:82:7a:da:41:65:ee:58:cd:d3:a4:
ab:33:50:06:21:65:7c:94:9e:e2:56:3a:c9:45:c9:
0b:d2:10:40:5f:2b:6b:72:c7:00:f4:20:b0:45:fd:
fe:73:a4:01:fa:88:f2:24:86:a5:c9:03:6c:48:ee:
3f:7e:d6:d3:62:86:d3:4c:e3:8b:6c:66:9f:00:6d:
d5:28:f6:b6:31:a7:2c:b1:c2:b5:c0:b0:48:49:16:
94:08:16:c4:b1:7a:7a:0e:8a:b7:a9:e0:f2:19:62:
d2:44:a3:fb:46:29:aa:7f:41:ab:28:c0:ea:9b:df:
a9:04:60:b5:40:a8:0a:21:cd:cc:c0:e4:6c:79:ac:
8f:b6:21:f4:c5:49:e5:55:9a:6a:0d:84:0b:0e:e9:
6c:17:40:c5:fc:af:dc:62:85:1d:8a:54:d1:ac:0e:
8c:f6:40:b7:b6:d8:43:7d:a2:ca:3e:e6:f0:1e:b7:
00:94:e6:40:3e:3c:9f:66:13:68:27:0d:81:78:17:
86:ca:39:4d:32:3c:6a:3f:4c:9e:7a:cd:39:93:ca:
cf:d8:70:e9:3f:37:bb:c3:6d:d9:f6:96:d2:bd:6a:
10:17:6a:b1:46:ab:28:83:78:a6:32:2d:22:df:94:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:3E:FD:45:B0:4C:0F:FB:6B:C4:53:F9:3C:03:AB:51:E7:84:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b0de5f6-acb2-3523-be5c-014176085ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:9f:ce:fa:d4:f5:4c:2c:bc:55:9a:09:89:0d:9e:29:02:bb:
f4:f4:4e:e8:e6:ac:c3:4e:07:2b:15:eb:42:92:92:72:03:92:
b6:3e:4a:bf:b4:00:04:48:52:6b:bb:68:cd:86:42:b5:97:ac:
ab:dc:f4:3c:09:ff:15:60:d7:ed:04:41:2b:ad:fe:fa:e1:f1:
84:20:2e:d8:60:14:35:1a:55:e8:c5:da:10:3b:0f:36:ad:47:
2a:67:58:ca:f8:ed:fe:34:2a:09:e1:4c:09:0a:f6:c0:dc:f4:
0b:6a:92:52:93:60:e2:27:9b:1d:61:24:1e:94:0f:79:c9:50:
13:1b:bb:1f:e4:69:07:3d:5c:6a:cb:e0:86:d3:3d:39:6c:0c:
95:6a:82:1f:4c:69:8f:73:f0:d5:83:10:5e:c7:43:b0:d4:26:
a6:42:89:d8:84:e9:7c:9c:5e:06:33:57:30:fc:24:5a:ee:74:
f2:10:4c:dd:2f:0c:e7:85:51:ba:98:b3:19:1b:ec:c9:a1:5f:
7b:d5:59:f1:f7:46:0c:9a:e7:52:fd:d5:a9:45:2d:57:74:c3:
a1:64:b9:c8:7d:08:de:11:c0:27:04:fb:9b:d7:39:c5:32:06:
62:14:fa:b3:61:d7:f3:a8:bb:2b:18:7d:1a:e3:54:b5:7a:a3:
0b:f3:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:06 2025 by rpki-client