Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7913f8-bf19-3ca0-a36a-6ce0df780913.roa
File: db7913f8-bf19-3ca0-a36a-6ce0df780913.roa (raw, json)
Hash identifier: NcAqr5aKfi2xtnk+ZtKjVIhSlq/Qquj14evQUXms+us=
Subject key identifier: BF:12:14:02:29:0F:BC:93:BE:7C:F7:88:B3:29:2C:84:8B:A0:88:28
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A1361FE28F68DB4F5AA2AD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7913f8-bf19-3ca0-a36a-6ce0df780913.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.224.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1f:e2:8f:68:db:4f:5a:a2:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=3df5d2cb-a3f1-4238-93c2-a42ddd2cd04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:68:22:1b:06:fd:fa:b9:0f:c9:e3:09:22:
35:e2:da:2a:e6:98:ae:a7:ce:0d:dd:8b:29:21:83:
53:7c:55:d4:9c:09:3b:4c:78:34:2b:e5:46:bf:c7:
c3:d7:21:5f:76:05:8e:09:9e:34:fb:79:32:c8:d7:
e3:5f:a2:71:1d:a6:4c:43:54:0a:9a:fe:3c:b9:4f:
78:76:81:2a:b3:a3:4d:4c:5a:08:61:f6:68:b2:56:
60:b3:61:5c:fc:cc:e3:57:e3:c2:33:5e:28:9b:fe:
76:d6:92:68:18:77:89:50:aa:82:c4:3f:f3:6e:cd:
27:bf:10:61:c3:a6:3c:cf:ac:a8:ba:fe:f8:39:22:
3c:e6:27:a3:75:29:69:fe:8c:96:7c:1a:4c:e4:e9:
81:72:ed:64:43:a9:48:44:bd:47:c9:1d:7f:83:7b:
dd:0b:c2:62:67:a4:5c:97:8a:dc:b0:57:97:db:cf:
89:52:09:1c:82:eb:e1:08:c1:50:47:50:71:66:32:
c7:76:24:f8:ec:2a:d7:fd:a4:71:f6:7d:97:36:12:
e7:97:be:bc:d2:a5:25:1a:30:0d:7b:5d:8c:b8:52:
4a:71:7c:dc:9d:04:0e:81:35:b5:73:d3:30:33:f1:
a3:25:eb:72:ac:00:bc:7f:a0:b4:e0:68:1d:b6:76:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:14:02:29:0F:BC:93:BE:7C:F7:88:B3:29:2C:84:8B:A0:88:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db7913f8-bf19-3ca0-a36a-6ce0df780913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:1c:a9:0d:7a:31:3e:4a:cc:94:ce:69:33:c2:20:38:89:a8:
93:3d:f4:f6:d1:2b:51:d2:7e:df:c6:d2:b5:8c:97:ff:5b:54:
77:21:6a:21:23:1a:0a:88:2b:2b:de:11:3c:68:44:77:fd:9b:
ff:f8:5e:65:46:66:10:1d:ba:25:f4:56:98:a0:02:1e:76:b6:
92:b8:c1:5c:50:02:03:84:cc:c5:33:94:ec:92:0a:89:ad:7b:
c9:4b:47:c2:0f:33:0c:a9:46:7c:32:0b:e4:f5:9c:57:62:39:
b2:2f:76:35:2e:59:97:4c:fc:4c:be:29:b8:e9:ce:ae:f8:01:
d5:0c:59:ae:ba:60:67:30:00:5c:85:38:55:bf:3d:9b:12:dc:
c9:c1:a9:b6:b0:ef:07:76:31:c5:23:26:1f:70:46:33:c1:a8:
76:19:3a:bd:6f:1e:2c:0f:34:30:b1:b3:a3:46:f2:e7:9c:4a:
91:39:a4:5c:f5:79:93:b2:b9:a7:19:bc:69:b1:0a:95:28:57:
92:d5:e4:93:84:ea:78:57:a0:96:a5:48:6c:e9:8e:4b:d1:0a:
d7:91:e5:e5:e6:54:2e:b5:74:ed:04:c8:49:e8:e6:af:95:54:
29:53:96:9c:f4:5b:22:bf:c1:0c:9d:75:14:1e:9e:fb:38:62:
1a:ef:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:24 2025 by rpki-client