Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa
File: cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa (raw, json)
Hash identifier: INUsGrUCTK1fmBLLZ0jUdYS0XduvJUdwhRX79sEWo0I=
Subject key identifier: 9F:15:23:BD:A0:8F:3C:A8:B5:08:2F:05:82:FE:57:45:EB:BA:52:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DEA128EE4DEDFB407AD1AFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.225.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:28:ee:4d:ed:fb:40:7a:d1:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=f8ace9d0-70bb-4153-87be-b05a7e5d10bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:8a:92:a7:44:c8:e7:a2:4b:8e:3d:bb:4b:
16:c7:8c:f3:01:16:01:37:b7:61:f5:58:14:86:65:
62:43:09:4e:b8:59:e5:31:f5:28:cc:e2:54:a1:c5:
fa:28:ed:c4:21:02:9d:2a:9d:7b:30:bd:36:6f:5a:
df:c6:7b:6d:d2:ad:6c:48:1c:c7:45:e0:b3:6f:c6:
f6:e1:61:70:ba:44:dc:59:e6:ef:1e:13:52:6e:ff:
f7:65:b9:a4:26:19:3c:bc:6d:98:fa:15:ec:1f:ab:
06:04:99:f1:16:a8:e9:39:1a:f4:20:c3:3a:3f:1a:
aa:a7:02:ac:5b:a5:b4:24:f7:da:90:52:52:3e:48:
ae:1b:c0:f2:69:bc:26:52:f9:16:47:1a:cb:74:53:
18:c1:db:53:df:91:48:a4:9f:48:41:bd:5a:b7:84:
aa:f7:63:65:9c:56:25:af:38:e0:09:75:61:df:cb:
db:13:2d:03:54:d1:bb:b9:71:64:3f:20:f1:0f:22:
ae:44:e1:79:cd:44:f3:a9:39:70:bb:a4:08:ef:96:
c3:7f:5c:55:bf:3f:fc:06:e4:86:cd:38:c0:4c:4a:
c5:f1:6d:fe:cc:78:ad:3c:66:23:84:76:60:24:2b:
91:20:59:e6:d3:f9:61:de:6b:8b:6e:1d:ab:c8:76:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:23:BD:A0:8F:3C:A8:B5:08:2F:05:82:FE:57:45:EB:BA:52:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f8:02:65:14:b6:a2:8c:f1:8d:16:ce:99:af:95:ff:ad:be:
85:a3:3c:a0:2d:b6:b9:b0:0b:bd:18:e1:e1:f7:5a:92:d9:44:
15:ed:b4:b6:64:18:04:d0:38:8a:cd:56:92:98:f0:05:47:72:
47:f8:ce:b8:4a:34:6f:b3:9f:ea:38:8f:5c:e8:66:be:96:c6:
f3:75:a2:43:a9:08:14:2e:38:49:99:6c:b9:33:19:3c:28:5d:
15:a0:8a:25:82:3b:af:fd:99:83:76:d4:98:ba:9b:ea:57:43:
5c:76:45:b4:86:c8:f4:28:25:49:50:f4:73:ac:72:c0:77:92:
46:90:12:f7:82:27:37:03:40:19:c9:e4:36:d3:80:7b:f5:57:
b8:81:64:13:c1:98:a4:6f:d2:1e:da:db:16:64:48:e1:7e:4c:
c4:4a:f1:b3:08:5b:5b:e7:f5:dc:ab:c8:96:e7:39:10:4b:98:
90:64:54:45:e4:24:5c:96:67:9e:72:e5:fc:7f:a8:52:3f:fd:
49:51:9e:55:d1:7a:a4:03:c0:29:f0:15:87:45:ca:e6:d7:14:
d8:17:30:b7:48:93:b7:b0:55:71:27:40:6f:e5:bb:01:67:c7:
3f:0d:17:b3:55:b3:97:c8:30:37:e1:26:f3:ac:40:e8:bb:9f:
3f:f1:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:24:56 2025 by rpki-client