Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa
File: ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa (raw, json)
Hash identifier: +sKylZ3s7iqbCX0jQXLPfX7h314fNIiDtxgNJrZag74=
Subject key identifier: 8D:49:C3:F9:F6:74:4E:50:BC:A2:67:AA:A7:32:3E:94:A7:0D:7C:B4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E1860823E20C188F615740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 16625
IP address blocks: 173.223.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:86:08:23:e2:0c:18:8f:61:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=d528ca40-a5a6-4ab7-9fa2-793e3daafc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:28:7f:5b:1b:72:ef:a6:c1:3d:b1:0a:6d:
de:58:93:28:2b:72:71:14:4d:fd:5d:f1:d8:f7:94:
8a:be:49:a4:c5:ef:3c:2e:82:a6:22:fb:25:1a:3a:
db:c5:19:6e:01:92:27:35:2b:fc:15:76:8b:59:52:
bb:07:c9:f6:50:89:a0:5c:cb:57:73:19:60:c5:a7:
84:3e:52:5e:fb:5b:74:03:ca:4e:d0:69:69:71:68:
f9:4a:10:66:53:1c:7d:67:88:14:c5:0d:f0:c4:0a:
77:d7:ab:58:38:25:f0:22:52:5c:14:75:cc:75:85:
28:4d:b0:e7:4b:b4:c0:a3:47:3c:3c:2a:48:12:36:
02:c9:95:96:11:12:0b:5c:e4:73:92:d8:bf:03:70:
fd:0b:4c:fd:d3:6b:79:d0:2f:ee:e9:9e:26:52:c9:
30:53:17:a0:33:ee:62:0f:23:dd:9b:a3:e0:69:4b:
24:55:43:c3:54:c7:c2:ed:42:8b:d1:12:f4:ae:14:
5a:a4:1c:6a:6c:c6:69:8f:7d:00:72:9a:07:4d:35:
89:ad:ec:1d:8b:75:0f:76:43:6b:b1:83:98:46:8b:
cf:08:d7:1d:10:b1:91:10:63:ca:0c:c5:22:48:4c:
f5:70:52:d4:e2:ff:52:35:c6:7e:72:52:62:43:f6:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:C3:F9:F6:74:4E:50:BC:A2:67:AA:A7:32:3E:94:A7:0D:7C:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab8ce5ae-6be1-30e1-90ac-c7f5627a87d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:97:65:b9:66:e1:00:e0:fd:9c:74:4f:21:51:38:a4:dc:e1:
a4:77:68:cc:99:36:64:9f:4b:02:6e:fe:08:c8:74:d1:77:6c:
e0:80:51:de:c5:42:b8:8e:87:14:50:23:69:b2:d3:bf:e6:fb:
cb:63:28:68:73:5b:73:3d:f5:17:ea:2f:40:3b:29:c7:9d:d4:
1b:d0:dd:e9:f7:f5:bb:73:89:35:bb:af:2f:0d:fa:f3:bf:ef:
36:56:0b:d0:81:0f:4d:93:d1:91:d0:88:8f:56:c7:f1:ef:46:
50:9a:5b:e8:3a:22:97:14:bf:78:dc:9b:11:2e:fc:1f:b1:15:
ad:c1:dd:e1:46:3e:25:9d:a2:b1:41:3a:fc:b4:00:43:0c:e6:
01:fe:24:4e:de:90:cf:a2:89:5e:c3:b2:af:ce:2a:fd:1c:12:
a4:0b:3a:2f:c0:36:ea:42:c6:c8:2b:82:46:2f:41:7d:61:0e:
c2:70:13:1b:f3:86:3b:70:8c:b7:9d:56:72:77:4b:f6:83:a0:
ab:79:ac:ff:85:7a:81:6e:d8:13:b6:18:3a:0f:c6:39:a4:19:
5f:2f:2a:37:a0:5d:00:04:f9:f0:39:cf:b2:97:64:89:1f:77:
d3:87:b8:3d:89:e4:31:e1:ce:44:31:cc:1f:ab:36:53:03:78:
8d:53:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:32:42 2025 by rpki-client