Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa
File: f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa (raw, json)
Hash identifier: O9JQM2UMX1VfxPjthhsxYsEb4naeRzJzoiCYM6Tz7VQ=
Subject key identifier: 35:8E:28:CC:3F:FA:6C:96:C8:BF:B5:2F:82:72:3B:78:9B:EA:FD:1A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DBD671E6A061864E04B9F240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 36183
IP address blocks: 172.225.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:71:e6:a0:61:86:4e:04:b9:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=61ecf9ef-8e83-4e98-b96f-15276645565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:6f:1d:61:a2:ce:38:6b:de:2c:78:f2:a1:
e8:68:75:41:14:36:a0:0c:4f:f4:27:2b:ac:20:8c:
00:c4:d7:d3:88:ef:5c:a1:26:f7:09:6b:81:9d:4e:
1e:cc:a0:45:ad:c5:21:6a:1b:6b:63:2b:9a:7e:63:
9c:8f:ef:e0:04:98:f2:c3:b7:b6:f5:08:60:c0:ef:
7b:f1:09:65:de:e9:1d:d8:b7:df:ea:61:7e:a8:c2:
a6:1b:9e:16:d4:f7:61:8a:ec:0d:78:41:ea:29:2a:
5f:19:4b:d1:1f:d7:04:33:f8:5d:16:8e:91:08:8d:
8b:e9:68:07:e3:90:29:d5:90:a3:a0:86:b5:6a:da:
d6:85:d9:fd:6d:e8:2c:a2:2b:78:3b:3a:13:6f:ce:
c4:a9:bf:e5:b0:a5:ea:fe:af:46:33:6d:d0:dc:de:
36:6e:3a:c3:6a:53:e5:0a:d5:5e:b6:c4:f9:49:00:
8b:2f:f3:f9:e8:9c:ff:4f:19:e9:32:10:c0:c6:34:
84:d6:cb:63:d5:b6:f7:ce:60:12:41:40:3c:05:91:
31:48:04:76:e4:27:41:ca:c4:f5:13:b6:a0:a1:50:
db:f0:27:84:58:56:da:a5:dd:c7:e9:b8:cc:1a:47:
ff:c5:1a:69:b2:73:40:16:de:8e:af:3e:f1:81:1c:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:28:CC:3F:FA:6C:96:C8:BF:B5:2F:82:72:3B:78:9B:EA:FD:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3fc2a7e-e68e-3d9d-b43c-4ffe97f03670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e8:81:13:26:88:0e:20:f9:f4:51:1d:aa:b8:38:d8:06:85:
cd:f1:01:08:65:c9:66:b2:6a:fe:1d:78:f5:9e:20:c0:3a:c1:
db:00:e8:4a:03:45:98:9c:1a:bd:e5:7b:9c:48:72:94:96:69:
7d:12:b6:9f:7b:6a:4c:86:61:52:24:4f:26:74:7c:95:1e:54:
97:fb:3e:b4:63:2a:04:07:ba:3b:3f:40:23:06:85:20:57:2c:
0a:2b:1d:0a:07:17:c8:68:bd:c9:a2:26:0d:78:43:a3:83:15:
09:c6:20:7e:4c:7b:da:67:d0:a5:fa:86:81:45:ac:b5:3d:1c:
f1:db:a4:e9:ec:1c:53:e3:d0:3c:38:b6:2d:c8:21:26:c9:4c:
54:50:53:bf:15:4d:ce:b7:13:e4:2e:f9:9c:e7:5e:29:68:b9:
40:bc:1a:b6:9f:96:2f:cd:63:9d:ac:88:d2:32:bb:f9:04:80:
cc:f1:82:9e:05:0c:97:15:c2:3c:40:bb:c0:54:82:a8:75:95:
28:4e:2d:be:fa:fc:15:d2:e3:2a:c9:e8:c3:e7:64:c0:e9:21:
1c:51:47:f1:84:95:9e:22:c8:9c:6c:29:45:83:82:c8:90:25:
ab:a8:9e:9f:49:0b:03:4e:c4:6c:ad:a9:15:84:66:3e:02:57:
37:9e:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:02 2025 by rpki-client