Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1423e91f-722a-31e6-b2d6-7b5a13d196f4.roa
File: 1423e91f-722a-31e6-b2d6-7b5a13d196f4.roa (raw, json)
Hash identifier: 0KaLKsVAzAEv3aBMRCcNiqbFA9bwzN0DMPIfz5dm5rw=
Subject key identifier: F4:71:35:F9:DE:1F:9B:A7:C8:13:A7:24:C0:53:19:1D:18:74:38:FB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858488F9833429C0408DDAA74D180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1423e91f-722a-31e6-b2d6-7b5a13d196f4.roa
Signing time: Thu 16 Jan 2025 06:34:09 +0000
ROA not before: Thu 16 Jan 2025 06:34:09 +0000
ROA not after: Wed 16 Apr 2025 05:34:09 +0000
asID: 329007
IP address blocks: 172.94.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:98:33:42:9c:04:08:dd:aa:74:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 06:34:09 2025 GMT
Not After : Apr 16 05:34:09 2025 GMT
Subject: CN=72f22440-26a3-40fe-89a5-42b84f44e327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:12:d7:7d:53:ce:27:f4:bd:31:9f:54:8a:
8b:10:a1:c7:e2:25:c2:d2:5a:9c:05:93:80:a2:78:
1a:48:02:9b:33:35:65:e2:c3:6d:e7:8c:67:cd:43:
7f:2f:c6:bd:db:ba:04:6f:c5:75:f6:9f:67:c2:a2:
25:7f:36:01:f2:a8:1a:43:8d:ee:b5:4f:06:52:db:
76:6a:11:98:b3:ad:bc:cd:ea:5c:d3:b1:55:2b:c7:
59:9d:6d:d7:eb:70:6b:f5:4a:43:12:9b:f1:3d:d9:
e7:7c:10:84:4f:ce:05:15:ec:95:08:4e:86:2d:e7:
05:f4:a6:37:0d:14:ca:e1:73:7d:5c:26:75:94:a5:
20:be:3d:26:90:28:92:9f:a4:8e:77:13:1b:fe:aa:
07:25:52:14:b9:d9:9d:28:73:6d:c6:ef:4e:51:e6:
35:9a:ba:e6:18:75:25:34:62:da:7b:4a:55:3a:e4:
fe:c3:f8:8d:17:0f:92:59:96:21:c1:79:61:c9:e7:
21:d6:2e:dd:79:5d:32:f2:e5:56:ed:ec:9e:41:91:
51:dc:e1:78:71:ae:df:74:9a:72:6d:5d:7e:73:0e:
6d:72:b5:a5:37:b3:0b:58:cd:48:fb:6f:65:54:bf:
ed:4f:e0:59:33:70:4c:5d:b0:96:98:f2:07:94:35:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:35:F9:DE:1F:9B:A7:C8:13:A7:24:C0:53:19:1D:18:74:38:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1423e91f-722a-31e6-b2d6-7b5a13d196f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:10:dc:ce:6e:e1:49:20:e2:d2:ff:ef:a8:7a:92:da:96:ce:
71:7d:28:3d:b0:29:b5:b1:24:c7:60:18:f0:a9:c5:d8:93:2d:
40:60:ba:8c:86:46:be:37:99:eb:aa:61:6e:c2:e4:1a:df:7e:
f9:88:8f:a5:1f:60:a7:93:b4:6f:2b:cd:42:7f:14:de:18:ce:
0d:a8:05:e8:41:c9:67:9e:99:42:00:f7:a9:00:41:b7:ea:d9:
5a:e1:32:be:bb:66:38:4d:84:6f:b7:9b:30:98:c1:f0:53:db:
85:40:48:41:27:98:52:28:85:e5:3b:d2:a8:9d:ae:06:a7:38:
4f:eb:19:a5:84:99:2c:2c:9c:91:39:e9:74:09:40:9d:47:7c:
e3:15:4a:66:b4:15:ad:e9:49:6f:9b:1e:36:14:e9:2a:0f:98:
ab:d6:b7:f8:fd:e6:ed:d5:35:a6:0d:d6:f3:f4:b5:23:6b:71:
99:58:4d:f7:b0:ed:55:a1:ca:73:47:db:55:23:c3:9c:23:2b:
47:dc:ab:04:1d:3f:03:d9:af:f4:31:3d:53:60:63:9e:d0:af:
4d:23:c5:ec:50:4c:a8:f8:5f:5e:ca:f2:36:1d:22:d5:5f:9f:
46:73:70:42:90:84:07:e0:7b:be:17:ce:08:99:a2:7e:50:83:
bc:8f:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:53 2025 by rpki-client