Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa
File: b520fbe5-cd59-3561-89ef-ae42073c89f8.roa (raw, json)
Hash identifier: Rz4rIlFXffa+pKFs2hXl1Bkb9RyVv/rgKxZoG26e2DY=
Subject key identifier: B8:74:31:95:43:D0:A3:69:BE:16:66:B4:46:72:D8:08:AA:3A:A0:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E16BF2964EEE3957C47CB640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.225.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:f2:96:4e:ee:39:57:c4:7c:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=e2481ef0-b112-4420-a6d6-20d698e38349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:91:fb:75:01:2a:e5:20:91:f3:0c:c6:e2:
bb:ae:97:e6:14:d0:aa:71:d0:69:ac:d7:8c:5f:52:
ee:90:00:8b:53:c3:da:08:c6:ba:db:6d:74:82:ec:
04:7e:af:41:c5:2a:74:e9:09:3a:86:8a:f9:9d:86:
6d:1b:24:ec:c0:40:c6:5d:f1:49:8e:77:42:da:21:
09:e0:3f:86:e2:6d:f1:92:ff:3d:9d:e2:84:b0:56:
7a:8a:a4:49:1e:24:c7:ef:b3:54:83:60:df:04:1b:
4c:05:da:cc:d2:4a:39:64:6b:da:aa:33:26:af:cb:
6d:b7:eb:0c:26:0c:45:fa:7c:23:d3:0b:ab:eb:4b:
1b:f2:9c:9e:e5:ed:96:93:15:24:a5:b7:71:f5:04:
fd:fc:c6:52:ce:22:bf:df:84:0a:3b:a2:d7:fe:d0:
42:f7:10:50:56:3d:60:37:4d:b7:e8:d4:32:96:05:
44:2f:3d:47:78:4d:95:5f:e7:69:9a:27:47:0e:03:
a6:ab:05:fa:e3:f6:5d:6d:0e:37:ed:f9:ed:00:03:
6e:6b:28:8d:c8:ed:97:ba:b6:27:0e:ce:a6:13:c4:
9e:f5:98:91:e5:36:d3:c3:c8:9e:63:b6:d5:00:c4:
87:08:d0:b6:57:8c:e9:1e:19:c7:87:81:44:e2:7d:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:31:95:43:D0:A3:69:BE:16:66:B4:46:72:D8:08:AA:3A:A0:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:68:59:e5:45:b8:6d:7e:a6:47:d6:3a:06:9f:25:2e:f5:23:
0e:e8:a9:b4:4d:53:ea:5d:2f:34:be:2a:fc:3b:d4:d4:c2:8e:
d7:22:48:84:e1:bf:49:99:f5:a1:b0:f7:65:c2:47:d7:8d:f4:
e7:d1:6b:66:68:9f:a1:c8:24:47:69:d9:db:a3:59:33:ae:79:
2e:42:60:d0:72:96:84:a3:5a:1b:40:3d:23:80:0d:d2:5b:3b:
dc:54:19:18:96:f3:fb:97:db:41:03:3a:0f:f5:1c:f1:69:e1:
34:84:cf:46:e4:cf:2c:98:2c:2c:04:bb:96:26:9e:de:86:e7:
ff:f7:50:c1:b1:73:4d:f5:36:b8:53:74:6f:2f:5b:ba:ea:01:
fd:74:21:96:91:0a:20:d5:46:6c:f4:b2:d1:a7:c4:60:1d:87:
3c:b9:a6:85:62:0f:7b:84:ca:7d:3e:a7:3c:e8:c4:09:0a:cd:
1b:d8:0f:03:34:fa:a1:ca:10:e6:0b:29:a7:c6:31:55:d6:42:
9d:49:ba:82:3e:e6:8d:be:19:7c:d6:5a:0a:05:de:fd:63:9f:
41:8b:f5:3e:64:44:00:77:dc:62:a9:86:e8:e8:8c:a5:e9:34:
33:23:c9:84:98:5f:3f:a7:d4:fa:1a:e1:b7:08:ad:fe:48:e1:
b1:c2:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:34 2025 by rpki-client