Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa
File: a3d5b136-8b20-3a37-a607-c9809129af30.roa (raw, json)
Hash identifier: XD5AlY3nMT8vNQN4RgnFzKeIb9f83KzTJmT8vIfWLnk=
Subject key identifier: D4:CB:65:88:5B:E7:82:9D:DF:68:32:95:E6:47:DB:81:B7:BF:B2:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF617481AB4EB76F0F889480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:74:81:ab:4e:b7:6f:0f:88:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=ab365343-c7f7-4cdc-a916-1e943294f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:20:49:d2:5f:f6:6e:b3:16:e6:59:83:cd:
42:42:2a:f3:b8:6e:79:ed:ea:cd:78:30:0e:41:64:
85:ac:4d:e9:61:e2:82:5b:22:9c:29:69:3b:5c:56:
2b:7d:45:dc:38:88:69:b9:33:16:dc:6e:d4:95:ce:
de:69:d8:d9:73:66:53:d9:60:da:20:3e:8e:2e:af:
ce:a8:a9:d8:58:91:82:f6:15:5c:9b:74:1a:64:50:
5c:26:5c:5d:43:b8:dc:1d:a8:ac:2d:bf:72:45:d7:
f9:f6:a9:03:7b:47:18:99:b7:6e:d5:02:ac:29:16:
68:eb:65:3f:24:91:57:8e:f6:fa:8a:82:3a:04:53:
30:3b:7d:6d:08:60:01:95:6d:c9:40:ff:ec:e8:c1:
d6:0b:66:84:98:36:bb:bf:eb:c2:38:8a:d1:81:26:
ce:8e:25:6c:e3:e7:27:39:32:5f:e2:13:a4:8f:20:
de:bc:04:cb:44:2f:a9:c7:ca:f8:5b:fd:cf:2d:79:
11:aa:d8:3f:17:f4:b0:8a:35:d5:d2:13:e2:10:35:
14:99:6d:68:a0:b0:8a:9b:da:12:89:e6:c8:b9:79:
cd:1b:6c:bc:62:a9:1c:93:b8:40:f7:8c:04:0d:07:
0a:dd:8b:45:f0:ba:be:c6:a5:35:0d:55:f4:cc:59:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:65:88:5B:E7:82:9D:DF:68:32:95:E6:47:DB:81:B7:BF:B2:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d5b136-8b20-3a37-a607-c9809129af30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:74:e4:11:0b:0b:50:2a:45:f7:3d:61:11:f4:09:17:4e:d3:
3f:5a:42:c9:df:50:5a:3b:15:58:eb:3b:b3:9e:e0:e4:4c:b8:
d6:67:96:0b:dd:ea:51:fe:db:9b:f7:d7:05:af:e9:d8:e4:bb:
d0:4c:d1:75:8b:6a:bd:6b:7f:72:3a:b6:b9:c2:97:5b:bb:fc:
1c:24:58:d1:75:e7:9c:ff:8e:b7:af:fc:90:c2:4f:af:8c:3e:
29:4c:08:8c:d2:59:b5:a2:61:c6:71:02:60:63:32:83:f8:d8:
f5:68:ea:05:6a:7e:fa:75:ed:35:bd:32:d1:06:2c:a3:48:da:
ad:ab:c8:91:4a:93:54:eb:be:33:56:d1:24:54:e4:90:f1:1f:
5d:43:07:c2:86:ff:82:3a:d3:fa:2f:9d:61:cb:83:b8:59:25:
a1:da:af:85:d6:1e:34:ff:37:4b:65:37:cd:1c:ef:d5:c6:58:
9d:81:62:c9:7b:e8:31:10:78:e1:96:98:cc:70:f9:93:67:9d:
82:dd:46:27:08:7f:15:a1:b6:cb:d5:4f:ae:ab:d8:7b:54:fd:
36:28:98:1d:41:8d:46:30:3c:80:c2:d2:70:53:0c:e2:d9:c4:
fb:7c:12:2d:f8:c2:bf:65:de:71:18:ef:0a:f7:c7:24:10:e1:
aa:44:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:47 2025 by rpki-client