Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
File: e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa (raw, json)
Hash identifier: z6d2RtanZv9k0Ui9BiCIb3dgqOJbkc89TRgFUAaDn8k=
Subject key identifier: D2:B3:9E:9D:62:BC:BB:FB:3A:8D:13:3C:F1:43:31:8C:EE:DE:6B:52
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F4F6A7EB825B706B4778E990
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.224.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a7:eb:82:5b:70:6b:47:78:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=6d8f5701-957a-4b54-a878-9286644eed07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:51:af:96:4a:20:92:6f:07:7f:31:e4:88:
b1:3d:c0:8b:35:be:46:cd:cd:e6:3b:ad:5b:87:c8:
a7:90:b4:e9:a9:cb:4b:5b:ce:d9:97:db:b3:8e:41:
d1:75:9f:ce:39:cd:68:df:e1:8a:82:fc:9a:ea:50:
55:e8:40:85:ac:e7:a9:98:cd:30:dc:bf:be:65:c1:
d8:98:e5:32:19:33:03:22:11:61:5c:f3:d7:13:7c:
b0:b1:d7:90:59:a8:83:29:a9:4e:e2:21:40:d4:c3:
05:49:07:5a:32:2f:cf:4c:74:b0:67:75:84:c2:72:
50:95:54:bc:87:ec:db:05:c1:d9:14:c0:75:2e:37:
67:d5:59:2c:1a:f5:43:6d:d1:3c:5f:f6:a1:69:09:
59:65:ba:2d:12:85:4f:16:8c:ae:72:83:7e:6a:3e:
8a:be:7f:56:86:19:ee:af:13:81:57:54:d3:0b:b4:
12:73:e0:ee:36:31:ee:ca:08:17:54:ec:07:9f:2b:
c7:6a:c4:18:18:c4:2b:28:71:7c:e2:d8:1e:11:91:
82:d5:78:16:c3:90:14:1a:32:95:d1:8c:75:a5:38:
a6:ab:98:81:a3:df:a7:d4:e5:5d:b5:cf:d7:05:2e:
76:cc:6e:29:08:f7:59:4c:8f:96:51:5f:92:1c:e0:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:9E:9D:62:BC:BB:FB:3A:8D:13:3C:F1:43:31:8C:EE:DE:6B:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:f6:ec:50:fa:67:a3:ee:b1:3b:a5:d9:61:b1:80:4c:9c:82:
33:c0:c9:b3:67:34:4c:03:53:22:17:cf:76:38:7f:d0:88:7a:
4d:b7:77:27:6b:7a:fc:f7:5d:ea:56:01:62:0b:6a:e4:17:1e:
9f:57:92:27:7c:25:a8:b7:45:d5:7b:d4:62:81:1f:18:c8:7d:
f7:74:07:d7:66:5a:21:21:f8:5e:0e:e8:16:cf:7b:11:0c:d3:
7c:af:e5:2b:93:d4:3f:2c:f6:82:a9:b4:e8:75:e0:a1:5f:be:
6f:ce:0e:83:5d:e0:63:b8:1c:87:54:33:93:20:4f:ea:f5:19:
35:99:7a:8c:7f:62:ea:1d:03:65:7d:55:c6:d3:12:38:a3:9f:
f7:12:1a:5a:c4:ce:cf:d2:44:69:c3:6f:fd:f4:3b:b6:46:55:
0f:86:6b:17:a1:81:a9:ac:1d:ac:e9:a5:85:7d:62:4d:26:f8:
0d:f5:14:8a:f5:79:d3:4f:3a:5c:dd:48:67:fe:25:e0:ec:e6:
68:92:81:21:69:30:b7:67:f6:ce:04:1d:bc:8f:d5:9c:7e:86:
8b:c8:8c:a6:eb:a1:dc:ca:52:61:f1:90:77:35:bc:c9:8d:6c:
7d:b1:2e:e5:b0:5c:b9:b1:f9:9e:3a:f8:d1:ae:4c:9b:84:97:
09:71:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:39 2025 by rpki-client