Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50a8872-a8e8-3c36-bc63-73583a91b3c3.roa
File: c50a8872-a8e8-3c36-bc63-73583a91b3c3.roa (raw, json)
Hash identifier: RP9USHohmfROwojRBM6vKboQ4XDVGGhTB+I/lN9ED00=
Subject key identifier: 8D:39:D6:29:E9:0B:5D:13:CD:59:18:09:09:9E:51:9A:3B:7C:E3:30
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A1362ABE77A483C5D2C84D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50a8872-a8e8-3c36-bc63-73583a91b3c3.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.224.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:2a:be:77:a4:83:c5:d2:c8:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=c023340f-f890-4cf4-9c35-f6c46d4d3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:8c:ce:32:c6:f7:fa:43:f5:80:e6:97:4d:
e7:3b:ee:f4:fa:c3:43:a4:62:f9:50:5d:ac:13:39:
7c:1d:b5:8d:9c:94:9c:12:ce:09:d4:7c:67:ea:9a:
08:c0:13:5e:e6:54:47:f0:00:be:a9:2f:4d:aa:77:
0b:b3:3b:fa:1c:a4:66:7a:e4:05:a8:4f:27:9b:27:
1c:25:18:90:ad:b8:2b:78:12:d2:b6:81:66:cd:e7:
90:57:43:68:6f:5e:08:5c:13:32:f3:53:33:4c:70:
6d:4a:d7:7c:bc:6d:99:ed:86:ed:65:15:b5:44:c4:
85:29:d4:b3:6c:5e:16:9f:da:36:5d:6e:14:de:e7:
f5:90:c3:84:85:49:ee:b1:2a:89:af:47:8d:bc:40:
a5:5d:19:4a:5e:16:f7:d1:de:ae:e4:d6:1a:f1:f6:
bd:ab:d5:b3:c8:ee:21:fe:37:16:75:df:26:94:3d:
d7:e5:76:81:9f:4c:c5:2b:10:c2:ac:44:23:b4:9a:
37:6d:4f:f6:bf:a0:a6:15:09:08:eb:2a:c7:ba:34:
58:54:9e:87:57:b6:3d:00:92:ad:56:85:43:62:f5:
80:03:2e:03:4e:91:d2:82:a2:a4:7e:08:18:3a:13:
35:db:38:20:a4:85:29:86:9e:ba:e1:78:f3:77:30:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:39:D6:29:E9:0B:5D:13:CD:59:18:09:09:9E:51:9A:3B:7C:E3:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c50a8872-a8e8-3c36-bc63-73583a91b3c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:36:91:3e:93:83:7e:05:29:00:6c:b9:29:0c:21:89:48:a0:
59:1f:6f:8e:d1:ec:08:d5:cb:62:00:7d:e2:06:aa:6b:e6:93:
fe:9b:10:e7:1e:3b:6e:29:c3:92:f7:bc:7d:7d:bc:85:da:19:
3f:41:17:1d:f6:cb:a1:55:ac:dc:1b:e8:7c:87:f6:77:14:c4:
44:73:a5:ef:0c:ff:67:67:7b:23:e4:cb:97:38:6c:78:7f:80:
41:a9:24:c9:d8:8f:c9:55:dd:d2:ff:00:ef:52:86:21:02:a5:
bb:ae:ec:3f:c9:43:47:c8:46:10:af:86:70:29:e9:01:d0:b4:
ad:58:dd:3d:95:23:9b:d7:d8:1c:44:3c:85:78:a3:3f:8a:d8:
20:84:9f:a4:2e:a8:c3:6b:cf:cc:21:0b:25:c1:60:99:91:99:
00:f4:e2:93:54:8b:31:fa:9e:2d:14:06:56:ba:53:0b:7d:e8:
e4:d0:d5:56:89:09:39:65:d0:af:ec:b2:de:b5:b6:c9:e2:03:
e8:5f:37:8b:03:5b:10:0e:bf:bc:a3:b7:02:aa:db:db:a5:ab:
0c:54:82:a4:a9:ba:20:6d:ad:a7:21:e4:93:7f:cc:bd:41:54:
06:55:11:f8:bb:7c:0a:13:eb:54:14:97:87:5b:dd:26:3c:e6:
2e:00:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:46 2025 by rpki-client