Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
File: 224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa (raw, json)
Hash identifier: CvQ6igLHNySdaBBaTZN9jI45x7Yl5biOPEgaD9xOO7o=
Subject key identifier: D5:32:CE:B3:C4:B0:A3:4E:A1:75:DB:A2:5E:68:D6:1B:1C:7F:89:B5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848F9268621DDFD0F87958EA380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 212238
IP address blocks: 172.94.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:86:21:dd:fd:0f:87:95:8e:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=97768b83-f200-476c-a000-391554712366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:31:47:c8:db:4b:b2:7c:5f:24:f2:e4:86:
4e:a3:db:13:da:1c:7e:3e:89:17:39:9d:4e:ce:04:
33:cf:51:fc:d2:42:a9:7e:34:ee:f6:d1:93:40:54:
8b:9b:68:46:09:4a:33:e6:e3:54:c6:60:ff:68:d7:
a7:91:83:d7:f5:6e:e6:c7:19:7a:70:03:3c:0c:4d:
fc:a4:4e:4e:3a:ea:0c:b1:fd:92:bb:b7:9e:87:fa:
65:d6:f0:2c:8a:74:e0:c1:f4:1c:62:17:c0:2c:00:
76:98:14:99:66:63:78:35:d7:be:3c:c9:df:ec:f2:
85:00:a3:42:d3:80:c2:9c:2b:83:1a:e4:d4:9a:1b:
75:44:3f:1e:56:fb:d7:4b:ce:89:87:a2:b9:4b:90:
9b:f5:a2:f6:06:ee:68:0b:92:89:8e:85:e4:ed:0d:
4b:21:ba:a8:85:b6:60:e9:aa:0b:ae:67:20:3d:74:
11:c5:74:39:6f:ea:68:2b:02:be:1c:22:f3:e4:20:
15:2c:54:8c:a4:bd:fa:43:09:7b:02:f3:f9:64:22:
dc:a6:cb:14:c9:96:e2:b2:3e:92:ba:f0:b2:d7:ce:
12:40:ae:83:20:49:88:8a:25:34:e5:26:71:b9:22:
c9:dd:35:ad:dc:cd:11:86:9d:2e:4a:20:f9:2c:d8:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:CE:B3:C4:B0:A3:4E:A1:75:DB:A2:5E:68:D6:1B:1C:7F:89:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:70:ba:f5:b8:fc:fd:43:ff:9e:2b:81:cd:c5:7d:d5:33:66:
97:4e:a7:64:fe:7a:50:75:4e:6c:6f:27:5d:44:9a:db:55:60:
b7:5e:6a:5a:18:7f:fa:0f:03:9c:b1:77:ed:21:d0:23:d1:81:
3a:4a:78:2c:e1:7b:8f:e0:42:bc:5a:7a:41:92:9d:da:ee:cc:
d2:3a:7e:41:e8:56:b0:17:c6:d3:8a:85:e2:8a:cb:d8:cf:98:
79:f6:9f:2c:4b:17:18:3f:3d:a7:2b:45:85:03:73:c6:84:be:
d4:c9:e6:f1:f0:cb:fb:ca:9a:ec:d0:67:34:a7:21:0d:5a:59:
9a:96:62:d8:8f:49:fd:82:c9:70:23:1a:1e:6d:4e:0c:b7:e1:
66:05:4e:24:71:69:44:ed:a9:a7:86:5c:1f:d6:7b:5b:e6:74:
89:f4:8a:79:be:0f:52:e8:89:82:5f:c7:19:61:6f:3f:e2:8d:
07:99:c1:61:e2:c9:9d:84:b1:bf:b5:f1:03:55:97:fa:2c:1f:
14:60:35:cb:85:3f:f4:c7:41:50:ba:8c:09:b2:8d:55:d7:7a:
80:31:a0:c6:d5:1a:b9:bd:96:82:77:20:a6:7e:c6:48:00:d3:
21:40:a7:54:92:84:d0:51:90:18:3b:16:0c:cc:1f:a3:3f:1c:
72:b9:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:51 2025 by rpki-client