Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa
File: d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa (raw, json)
Hash identifier: 2XaP9PTuAJdgCG3L2Pn6uxVJzgnD9ozhWlPDq21zWRM=
Subject key identifier: AA:14:7D:97:43:36:92:E8:2D:2F:F3:CB:B3:3F:09:4F:83:6B:05:95
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490E16D2D0C276132B6AA71290
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 16625
IP address blocks: 173.222.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:d2:d0:c2:76:13:2b:6a:a7:12:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=0b2df94f-5682-43f1-b566-2c53da54e3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:31:fa:4c:24:67:eb:eb:c5:e8:ac:f9:1c:
09:f6:b2:cd:f5:2a:8e:86:36:dc:20:43:4d:3c:df:
f5:72:49:44:fa:f6:f5:9e:ac:1b:68:5d:e6:a4:b5:
e5:24:55:c0:62:8c:0d:0f:62:3c:5c:bb:8a:31:0d:
aa:80:8a:78:05:22:a9:cc:69:82:6f:5c:25:0e:8b:
ad:93:b0:f9:8e:f3:46:2f:72:2f:11:c9:de:25:ce:
aa:f7:51:e5:1a:48:f2:8e:27:fb:63:c7:dd:f7:9f:
09:6b:1f:61:91:a6:e0:36:28:79:53:f2:9d:d2:91:
5a:c5:dc:af:b5:41:ca:4a:44:4f:bc:bf:fa:d6:eb:
03:60:53:46:a9:4f:91:01:0c:37:ed:b7:1d:a5:a4:
f6:4f:7e:42:d9:23:0e:87:95:c0:76:25:a1:36:99:
36:1e:e9:d1:1b:a6:19:46:98:97:30:33:de:c2:c3:
fa:0d:e0:d4:c9:e8:da:9e:a5:cf:6f:52:68:21:72:
8a:fa:8c:5a:c5:6a:fc:16:24:0d:60:4a:1f:8c:0e:
0c:46:e0:a7:09:de:83:bf:a1:f6:fd:79:1d:93:69:
1c:3d:8f:fe:80:0c:87:29:c8:30:b0:1b:f4:9c:26:
ea:3b:5b:58:69:6e:03:6a:b4:e8:36:f5:17:e2:17:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:7D:97:43:36:92:E8:2D:2F:F3:CB:B3:3F:09:4F:83:6B:05:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2ecb18f-30e0-32f1-bcfb-664a4220edb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e3:03:e3:35:a4:7c:ef:a9:a6:a8:7c:0c:28:fa:c7:0a:b9:
36:47:8c:d8:c7:26:56:fa:1c:d0:48:28:3f:77:44:63:8f:e8:
29:ec:e0:10:b2:72:9f:3b:f4:f7:61:9c:47:36:ee:db:9b:a6:
cf:03:4f:70:1c:bc:2d:da:99:8d:2b:d0:a7:0c:a7:fc:9d:3e:
74:8d:fc:a5:8f:e2:f8:d7:a5:e5:0b:38:f8:0c:7a:b2:39:2e:
90:cf:43:67:58:60:d2:10:ae:8a:f2:6c:89:a3:71:2e:bf:f1:
66:7a:41:dd:db:e8:74:99:3d:c4:fa:8d:80:5d:b8:00:8f:b5:
7d:fd:c8:5d:dd:66:12:ba:cd:22:cd:ab:bf:74:34:84:b5:ff:
f7:b9:df:6b:3c:07:09:16:00:ca:6a:ad:e8:87:56:a0:e1:5a:
7e:8a:6a:46:dd:ce:f9:69:db:51:e7:16:a0:dc:68:52:83:39:
f9:90:e3:6f:7b:66:6d:84:98:3d:a2:50:44:61:c5:f5:0e:f2:
23:ab:38:90:ca:cf:32:45:5e:06:01:e1:9a:d8:d0:95:e6:32:
ff:8c:1a:55:b1:1f:1d:a8:43:c6:56:6d:84:7f:08:b9:f9:08:
54:a3:0f:e1:82:fc:e2:23:e1:db:17:cc:92:46:62:a8:24:ca:
46:07:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:12 2025 by rpki-client