Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa
File: 914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa (raw, json)
Hash identifier: 5FWBkCq6IXadXaG0F+ay9GAQ3tD4h/XJDRcuKTlM8ic=
Subject key identifier: 89:63:6C:AD:BB:5A:AD:4B:90:4F:E9:DB:58:15:2D:69:C1:79:CF:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584917DC0381933A8EE5C0087060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 172.224.0.0/12 maxlen: 12
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:03:81:93:3a:8e:e5:c0:08:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=4183f050-8288-4af6-9364-d6b577de172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:18:be:4f:ae:11:72:0d:69:38:56:3d:74:
23:06:73:a1:84:e1:ef:5b:85:00:56:3c:f5:f6:88:
e7:f4:b0:40:bb:40:3e:9d:11:c9:df:45:87:52:5a:
af:01:1c:c0:3e:1e:a4:ae:5b:fe:4b:5e:76:38:22:
83:c0:f6:4f:fc:4e:0d:49:6c:bd:eb:49:2d:a2:dd:
b9:ea:b8:58:d0:85:b5:46:15:8b:97:6f:a2:5d:34:
ca:73:04:c7:2d:92:15:08:98:91:9e:5b:ac:7b:ac:
8f:0e:68:fd:fa:18:5f:40:f8:b9:50:39:90:ea:f7:
85:a5:1d:19:f5:71:20:2b:26:2d:56:e8:f0:b7:9c:
b1:4e:ee:fa:ee:a8:39:c5:49:9d:3e:f5:4a:f5:8e:
7e:7e:55:90:90:a5:ec:f9:44:65:d5:1d:9a:54:5d:
8c:cd:82:08:52:23:52:cd:17:9e:45:43:55:15:90:
81:bf:36:9f:18:40:5d:8f:e2:73:e0:08:44:eb:a3:
57:86:67:f5:ba:a1:0f:53:17:18:fb:43:9f:50:ec:
80:40:68:f8:8a:af:d3:b7:a1:f5:b6:56:80:38:cc:
88:f8:d8:85:2c:8e:12:54:20:97:f3:95:82:e2:fc:
cf:65:f7:c6:3a:60:ae:38:5e:c8:5d:70:18:d1:7b:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:6C:AD:BB:5A:AD:4B:90:4F:E9:DB:58:15:2D:69:C1:79:CF:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:8d:1c:7c:3b:4d:24:00:b8:78:5f:45:f4:d2:22:f4:85:0e:
cc:37:f7:4c:3a:e5:57:ac:d4:55:f0:41:aa:c3:21:d5:31:9f:
b9:66:8b:a6:47:7e:0e:42:c2:86:49:cf:d9:ea:09:34:07:8e:
39:76:b1:ba:b7:9c:68:21:dd:06:96:a7:97:4a:f7:43:28:eb:
d3:7b:db:99:c5:2d:f5:85:d2:62:fe:5f:26:6e:ea:17:cc:98:
6e:fc:b0:68:7a:94:06:e7:11:77:dc:5e:e6:e8:0e:42:15:50:
df:be:aa:9e:04:f8:0c:62:03:46:29:ca:cb:3b:af:86:62:8e:
c3:80:38:0c:e5:a4:a7:83:5d:e6:ec:8d:ec:0c:69:a6:d8:37:
20:85:e1:eb:64:ca:a1:ac:cd:a5:62:9b:28:eb:a1:30:b2:f0:
e8:23:36:b7:cb:95:d3:bb:ef:10:b3:25:64:bf:c5:35:90:94:
11:70:db:6a:1e:ee:b0:50:76:01:01:2a:dd:13:1d:1f:4d:ed:
0a:89:9d:5c:3f:5e:3b:16:32:0e:46:7d:2b:6d:f9:ea:05:ab:
5c:4d:c1:f4:b4:bb:2f:2a:f4:6e:09:8e:76:2a:ec:fe:14:53:
15:76:79:29:c2:ff:a9:03:9c:fa:f4:fa:9b:a7:b9:75:22:8b:
3a:24:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:16 2025 by rpki-client