Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a1ee15-2414-338a-ae02-8fc78bc2b826.roa
File: f2a1ee15-2414-338a-ae02-8fc78bc2b826.roa (raw, json)
Hash identifier: zqSsRsGVOj+2unn6trFTOAJusLI9ueBRACsUIx2KnRA=
Subject key identifier: D6:1E:B0:46:A0:61:AF:90:8A:7A:B6:DE:A9:E8:10:81:FF:B4:80:AF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E181D862549BC9436F8C30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a1ee15-2414-338a-ae02-8fc78bc2b826.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 20940
IP address blocks: 173.222.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:81:d8:62:54:9b:c9:43:6f:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=28fe346b-7508-491b-b602-db83469f6b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:e7:ff:75:4c:ea:a1:d8:f9:41:cd:6c:8c:
25:0d:8d:33:33:ff:fc:94:df:ed:7a:9f:0e:35:31:
a6:1d:fa:fe:19:00:49:2e:2a:62:ad:91:25:59:ed:
23:b1:2f:42:1f:ee:af:8e:82:4d:87:75:dc:be:56:
a9:18:80:9c:d3:76:b8:2a:da:3a:8a:52:e2:d1:ae:
15:be:dc:d2:f9:22:0d:da:61:30:24:85:dc:fb:e7:
19:7b:1f:28:fa:d0:b9:27:5c:cb:97:9e:04:03:76:
61:99:d9:cd:13:d4:c3:43:09:72:2b:05:d0:0e:f6:
4e:8a:00:c5:f5:c5:93:d7:3a:d4:cd:43:6e:13:f9:
d4:30:e2:fc:cf:3d:ec:a0:59:f1:ab:aa:77:5c:a8:
3d:ac:f0:6d:0e:2d:5c:22:48:a0:c6:ab:f9:1e:7e:
10:7c:5b:89:23:06:be:6f:52:9e:65:37:45:75:ec:
7f:87:0e:c9:4c:d1:9a:92:a8:86:6c:64:81:21:9a:
6c:a4:b8:d0:5e:d7:ac:bf:c0:87:a4:04:6f:b9:00:
8b:f3:7b:e1:99:2c:75:07:20:ce:34:ae:a7:ce:d2:
e8:bf:2c:42:6d:54:86:32:c2:70:18:7a:5f:44:4f:
96:66:ed:2f:74:fd:82:f5:d1:c5:2a:12:1f:c2:42:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:B0:46:A0:61:AF:90:8A:7A:B6:DE:A9:E8:10:81:FF:B4:80:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a1ee15-2414-338a-ae02-8fc78bc2b826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:e9:75:cb:37:f6:6c:12:60:5b:d9:df:44:9b:00:fe:12:35:
ab:74:75:9d:c3:11:49:22:41:59:02:40:52:3c:4d:e2:79:67:
62:9a:19:f5:07:2d:63:72:57:87:8f:c8:b5:a7:9d:97:8c:3a:
27:10:bf:a1:6d:4f:bf:00:2d:4b:3f:13:1b:e4:7c:97:59:fd:
6e:a1:8c:59:9c:63:e4:96:b5:a1:ee:a8:a4:bc:01:f9:cf:1a:
14:a8:45:55:94:50:a8:3f:8b:78:6a:76:e5:0c:cb:8a:57:21:
03:e0:38:19:1a:cf:54:02:a5:b0:f4:3e:57:61:89:eb:06:13:
97:76:72:2b:34:4b:ef:58:88:bf:e9:53:0a:30:42:01:94:a4:
9f:e0:2e:5e:cc:69:63:2d:c9:df:fb:9e:25:64:0a:d9:90:0a:
45:7b:3d:f0:2e:40:1d:a3:7e:40:95:29:be:47:05:ee:70:6a:
be:3b:e8:f3:cf:e4:82:46:99:70:68:b4:d0:e9:05:a9:ef:20:
ba:28:5a:78:a4:df:f0:3b:6d:8b:4d:97:4f:dd:08:ff:4f:39:
1d:8e:c0:5c:12:5b:13:77:02:78:c4:2d:93:83:59:32:5f:11:
2c:17:c8:1e:6a:da:cc:c4:7e:82:4e:e9:7d:47:7a:27:fa:78:
fa:4a:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:47 2025 by rpki-client