Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa
File: 1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa (raw, json)
Hash identifier: Tx6aWPD4oTFPdMw2j4so6zXoesGvfDAZfJHq/Kj22Sg=
Subject key identifier: 78:56:28:CE:D4:4E:12:E1:F5:CF:96:D7:82:2F:B8:9F:17:43:05:7A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584944693FDFA4683E527846F6C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 9009
IP address blocks: 172.94.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3f:df:a4:68:3e:52:78:46:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=baca7e04-a7d5-46ed-8353-4e5743afa892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:7c:a8:e2:f8:e5:9a:50:d8:e4:91:a2:df:
ee:4a:c2:3e:a3:c4:26:58:d4:32:b0:40:7a:eb:bf:
a5:63:c8:7e:24:5e:4d:4b:b9:6a:6e:1e:ff:da:f1:
76:93:22:57:83:b2:25:90:a3:14:0c:9f:1a:8e:ac:
48:e4:a1:cc:67:1d:b3:a0:75:d7:a7:90:f1:d1:54:
d3:82:b1:5b:47:dd:d3:af:48:7f:c5:ad:00:b6:39:
62:01:fd:1c:d5:4c:be:79:ac:82:2a:2c:06:64:dd:
93:d4:51:f6:a9:96:c9:02:2e:9b:44:41:7d:ae:5f:
54:0f:90:e2:7c:30:21:35:07:36:13:45:a0:1c:e1:
50:b5:2f:b8:99:34:59:52:43:86:77:72:fb:7d:26:
28:c7:22:68:6e:ab:94:8d:4a:75:df:78:39:22:75:
a9:8c:c8:4c:1c:39:33:f6:66:0a:15:57:a5:51:51:
eb:d7:2a:1c:e8:4a:44:34:1b:ed:26:fb:85:97:a2:
32:7c:1a:f1:29:60:1a:7b:8a:90:32:18:f9:14:1b:
96:ac:70:15:d1:a8:65:a2:62:4b:e3:f2:63:97:a4:
81:d4:e8:9a:9f:d7:c0:fd:eb:a9:3c:80:c5:a4:db:
71:55:68:36:fb:4d:a2:f1:36:83:ea:ef:25:42:f9:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:28:CE:D4:4E:12:E1:F5:CF:96:D7:82:2F:B8:9F:17:43:05:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:c8:a8:bb:ee:54:4d:07:9d:a0:8d:2a:b7:a8:96:2b:06:4f:
75:a5:38:22:74:c5:78:d4:4a:e6:7f:04:41:90:9c:5e:a9:67:
03:0e:eb:4f:cf:8e:f1:3a:82:5a:f1:69:a0:f4:2e:3c:a7:ba:
8c:0a:cd:85:ba:46:55:70:16:9b:12:02:f2:bf:86:b2:db:93:
3a:49:60:47:e1:67:42:ea:5e:8a:00:b2:65:7a:19:0d:a7:bf:
d3:05:6f:56:4c:e2:22:48:e8:0e:0b:8e:1f:f3:86:94:58:7b:
f3:20:78:6b:e5:dc:8d:93:2c:cc:62:48:96:86:d4:10:56:71:
33:86:54:12:c2:35:f6:15:e2:36:b6:08:c6:8a:a8:0c:30:6c:
c2:76:0c:5b:07:a5:e6:62:d2:13:6b:99:80:87:b6:63:9c:f3:
0d:68:d2:43:dc:b3:5e:da:8a:91:c3:0e:fb:46:d1:03:30:99:
86:61:fd:d5:4a:07:8c:54:63:1f:a5:db:37:91:47:c4:31:56:
24:b9:08:a6:c6:46:e2:ac:71:7f:8b:6a:a4:c1:1c:29:dc:b9:
72:5b:b2:67:10:9e:b4:a7:35:05:26:67:85:dc:46:3b:78:b8:
3e:0a:bf:af:f9:ff:e9:5a:03:d8:d9:a1:85:e9:10:09:df:77:
58:68:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:22 2025 by rpki-client