Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa
File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json)
Hash identifier: Bxj9hE9WnnjGrK392yBflCqhJiPrlxOFEiwsP5TLGaI=
Subject key identifier: 9E:40:85:98:F9:00:3C:18:57:A8:07:0F:29:17:47:72:A3:79:9B:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F65BF2BDBD57CEBB3DB8C480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 36183
IP address blocks: 172.224.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:f2:bd:bd:57:ce:bb:3d:b8:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=4e6210bc-fa39-415f-9ee7-b358df92d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:77:dc:ee:65:24:49:a3:ea:7b:9f:b4:17:
c7:9b:e9:55:52:64:f3:87:1e:ad:36:d0:65:a2:94:
c2:00:64:22:be:59:37:4b:29:59:56:20:8a:43:48:
91:d3:8a:29:64:65:1c:68:a1:6c:92:5a:48:d4:27:
7d:ea:f0:e7:a4:4a:26:44:6b:0c:4a:82:20:cd:cf:
11:83:56:8d:60:fd:0f:85:09:e3:a2:d6:3c:0b:18:
8e:e8:51:8f:17:06:ab:c4:93:4c:be:41:89:1a:98:
e3:3d:ec:10:c4:45:61:90:33:bc:ea:20:0b:f3:6f:
4b:46:7a:7a:ec:c4:41:5e:bf:58:37:30:4e:0e:c5:
14:93:4b:02:4b:ba:a0:86:73:87:a1:7a:99:96:82:
6d:78:00:f3:df:00:9b:cc:a5:f5:ae:05:d2:d0:84:
0f:38:21:55:85:ab:4e:f5:99:19:af:0d:ce:d9:b6:
cd:56:d0:3c:66:42:57:68:8b:46:a3:78:0b:8e:b2:
f7:3c:cc:ed:6a:09:c4:36:ef:1f:1b:73:58:68:c8:
7f:b2:6d:ef:bd:e8:8e:f9:a0:e0:26:64:86:10:29:
1f:53:1e:96:5d:0c:b0:9b:10:ce:bc:16:68:78:32:
4f:54:16:9f:10:2e:30:1e:20:e2:47:bd:dd:62:90:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:85:98:F9:00:3C:18:57:A8:07:0F:29:17:47:72:A3:79:9B:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:30:db:b4:b0:08:19:ca:f6:a3:6f:0b:04:e5:cc:ed:19:d7:
82:66:cd:c9:9c:86:60:e5:d2:94:97:48:4f:46:d7:09:fe:6b:
4d:a0:2f:97:88:35:12:42:b2:15:1d:c6:75:7d:b3:f7:11:a9:
e7:38:db:87:4c:5c:d9:fd:6b:6a:15:97:b6:2a:67:05:10:1c:
8d:4c:ef:f0:4a:71:06:98:d3:b1:71:7b:74:a9:7c:4a:62:23:
cc:b6:3b:79:e7:8b:7c:e6:f0:0c:83:68:04:01:13:d8:03:77:
d0:da:58:3a:42:13:95:b0:05:40:6d:ad:1d:09:fb:b5:0f:b7:
a8:8d:84:c1:83:6e:e0:2f:36:1a:d3:ce:e7:4c:9d:ae:e7:4e:
8a:24:1d:76:5e:fe:93:4a:3e:e3:7d:09:f2:34:12:d9:09:ac:
3e:3b:7b:39:9d:c2:d4:20:c6:f4:07:14:19:8c:1a:95:ee:9e:
c5:1d:aa:e5:da:a3:7e:da:74:d8:eb:a6:92:a2:b8:31:3d:78:
c6:91:95:82:2a:0f:ce:a6:9a:06:c0:b8:95:cf:27:25:05:0d:
86:a4:46:9e:12:b1:23:91:ca:70:c7:9b:ed:c2:8d:de:23:bc:
1b:e8:52:03:0a:7c:70:a9:ec:90:4d:db:31:d7:b1:fd:c8:91:
d9:38:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:49 2025 by rpki-client