Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3fb3b00b-d5d3-355f-8b97-c88c2cfa2bc3.roa
File: 3fb3b00b-d5d3-355f-8b97-c88c2cfa2bc3.roa (raw, json)
Hash identifier: iG/mRmVQvoKvaRpTUB3Tr5mJyfGsutR02B0YilBrv7w=
Subject key identifier: 20:17:F1:A1:38:22:73:F1:04:D0:A9:2D:94:EA:7E:5E:10:AC:B0:D0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FF94C723D5C8B19C9E3F9A70
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3fb3b00b-d5d3-355f-8b97-c88c2cfa2bc3.roa
Signing time: Tue 25 Feb 2025 09:17:47 +0000
ROA not before: Tue 25 Feb 2025 09:17:47 +0000
ROA not after: Mon 26 May 2025 08:17:47 +0000
asID: 329007
IP address blocks: 172.94.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:94:c7:23:d5:c8:b1:9c:9e:3f:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 09:17:47 2025 GMT
Not After : May 26 08:17:47 2025 GMT
Subject: CN=09985ade-21e1-44c5-b6d5-5eb5aba4846a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:2e:ec:09:cf:ce:02:e8:2e:ee:30:42:32:
60:0c:30:69:70:04:4c:af:af:79:5c:92:94:d3:c5:
7c:36:81:2c:10:6b:36:e5:a1:79:77:d0:48:83:a4:
4e:1e:db:1e:ce:32:5e:6d:03:34:15:d4:a4:b5:ff:
89:f9:be:38:1f:28:d7:b2:d3:bd:db:fd:3a:b6:3c:
d8:7a:2e:63:57:94:0c:da:ea:c0:fd:2e:37:3a:ba:
d8:02:4e:f3:e7:77:ce:88:64:d6:54:b5:54:0b:ef:
7b:f4:d2:ab:68:43:fe:de:3f:79:44:87:30:d7:01:
35:ee:36:b3:ae:9e:1b:34:81:75:62:a5:dd:06:c0:
35:70:e8:73:b2:02:f5:6e:37:ad:a5:f5:71:b4:cc:
e0:94:10:fb:8d:a8:df:33:06:7b:a5:cd:3d:b2:4a:
aa:65:68:0e:8b:02:2e:b9:5e:03:20:11:02:c2:79:
21:e2:7a:f4:81:b7:7f:ec:c1:f9:5f:9c:0e:9b:49:
4d:89:c9:18:7b:81:5f:3e:df:82:9e:fe:41:10:a9:
cf:a8:27:3b:a4:22:a7:8f:4e:2c:7b:a8:98:28:95:
96:e0:56:f3:de:09:b2:52:09:f9:59:4f:c9:42:ea:
cd:ee:a1:a4:d0:33:cf:1c:34:d0:d1:d2:47:c7:bc:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:F1:A1:38:22:73:F1:04:D0:A9:2D:94:EA:7E:5E:10:AC:B0:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3fb3b00b-d5d3-355f-8b97-c88c2cfa2bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:7f:65:54:e1:01:83:84:12:cf:6f:8d:d0:55:83:02:54:a4:
7f:53:5d:da:59:1d:89:6f:ba:ba:a9:55:78:df:04:ef:d6:bd:
d7:19:36:05:57:41:12:40:5b:46:40:96:f3:0d:28:6d:ab:1c:
24:92:14:c2:11:74:47:af:86:20:2e:af:7b:0f:1f:d4:2c:b4:
14:92:98:7f:82:be:19:8d:c2:94:1e:33:06:8b:ed:77:8a:04:
e2:41:4a:d9:ea:fd:94:f6:31:59:83:fd:6f:7b:a2:ce:6c:11:
9c:8d:e4:bd:79:27:20:09:df:7d:35:42:27:b1:d8:0a:9c:f6:
05:2e:9a:d6:21:9e:79:f2:2c:ce:7e:8a:a8:1a:35:5b:7c:b0:
16:7d:a1:1b:49:2b:14:01:2c:06:8d:28:54:23:17:16:55:db:
a9:e1:75:59:c1:ea:54:7d:78:0a:41:ad:f1:b3:91:7a:a5:39:
d4:db:8c:5e:69:e9:8b:90:38:fe:35:20:c6:ba:7f:4a:0a:eb:
86:5d:78:43:ed:6d:7e:a2:0c:9e:15:95:07:30:f7:68:52:0d:
71:d2:e9:55:ca:d6:c2:3f:66:69:24:5f:13:e0:43:30:81:60:
64:61:28:2e:35:6a:13:66:7f:ef:be:a4:0f:ae:cd:93:52:f4:
4f:31:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:12 2025 by rpki-client