Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
File: 127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json)
Hash identifier: BKcZvABujVfW4vTQNZ5JL3U6VRUlukIjWtkUwarfD0w=
Subject key identifier: 03:20:DE:6D:06:59:82:14:AA:AE:A5:1D:99:83:42:0C:C7:50:CF:52
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584902EC1016E9FD0812C58BE600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 3223
IP address blocks: 172.94.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:10:16:e9:fd:08:12:c5:8b:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=e0770e18-5d5d-423c-b7cc-1c07d2dd6541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:5b:2b:73:20:a0:f1:5c:a4:35:66:29:a8:
b2:11:f4:1e:f0:06:39:5f:68:8f:75:d3:8a:97:2c:
bc:dd:76:8a:bd:6f:cf:fb:00:74:83:06:2d:1e:ed:
45:cd:e1:0b:22:ea:19:c9:99:6e:e9:13:d9:2b:8f:
f4:cd:0c:b8:ba:ca:41:75:b5:e6:a5:30:1f:53:91:
25:b7:dc:93:a1:a9:1d:ef:55:15:24:1b:63:88:a2:
ec:2a:38:fd:0a:84:62:c9:40:8a:43:68:79:9f:78:
2c:31:f2:f2:d2:59:bc:a6:59:b7:cd:c9:f3:ae:33:
81:56:57:ed:03:f3:95:1c:4b:c1:c1:78:5d:63:34:
ec:ee:5e:48:b1:07:60:2e:3c:80:b9:2b:7a:99:ec:
e2:95:bc:b4:b8:ed:b8:97:d6:41:b1:d6:10:94:58:
0c:b7:23:0f:e6:34:67:50:7e:4f:53:88:02:f4:f3:
6a:e0:c4:d7:2f:8e:c2:ab:17:08:b2:1c:75:23:87:
dd:04:f0:ca:9d:e2:7f:c6:78:5d:da:c3:b2:8a:d9:
b9:0e:6d:1c:e2:1f:85:b5:0d:37:e7:ad:64:2a:19:
d2:b0:9c:b2:03:53:69:66:8a:b1:ee:5b:78:0b:ee:
de:b7:4d:24:7a:74:56:93:41:4e:18:33:bf:fb:5b:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:DE:6D:06:59:82:14:AA:AE:A5:1D:99:83:42:0C:C7:50:CF:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:93:52:96:2c:70:7f:21:5d:57:fc:3f:c6:d2:0a:2b:c8:5c:
5c:0c:14:57:cb:b8:bc:2e:3d:85:4b:16:ff:b9:37:7c:d4:17:
17:76:97:54:64:69:12:b9:2f:b7:3a:c8:4a:e0:71:7e:61:b8:
e7:de:00:4e:ed:5c:dd:8a:64:04:a4:a7:0e:01:ec:a9:ba:22:
c1:2f:2c:f1:4f:a0:0b:e2:53:32:9d:15:b6:9f:25:66:27:8b:
f3:26:3d:27:ac:7d:b1:1c:36:87:3a:74:ae:6e:d7:bb:dd:be:
dc:db:ba:85:bd:1f:d7:b2:6f:95:e1:bf:a2:b3:3c:32:0c:df:
bd:a8:ac:29:40:a6:3b:96:92:55:4e:cd:31:4a:e8:81:52:30:
5f:04:3f:a6:d0:23:b3:9f:82:c4:c9:cb:3b:fd:d4:0b:41:99:
74:66:41:f0:0a:c3:2e:76:06:34:3c:3a:40:e3:04:f7:9a:bd:
f4:b7:47:2e:d8:dc:6d:2a:fd:7a:d1:43:b3:37:1b:b1:74:62:
04:4e:30:86:65:22:74:b1:8c:bf:51:0c:c2:7c:de:55:3b:ca:
7a:78:57:91:a2:74:1c:d7:d7:b8:3e:4a:f7:53:8e:78:06:55:
44:75:6b:48:3b:cf:34:c2:0b:a1:87:6b:e3:1d:35:3e:08:a5:
26:a4:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:31 2025 by rpki-client