Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa
File: 444c752c-17be-3988-8d19-da817f43ea78.roa (raw, json)
Hash identifier: 3b5ZK1UfFzmUE848TOqB4Uia3UeMOGLqwXiW2BCaCSE=
Subject key identifier: 58:E8:97:CC:D6:CB:FC:9B:61:05:75:75:C3:CE:7E:68:57:46:47:9E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D376576C961492EE93B67840
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.94.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:57:6c:96:14:92:ee:93:b6:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=eaba9cf0-4aaf-47fb-bab5-f11847a5b965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:7e:cc:0e:cb:0a:4d:68:48:8d:8c:bb:ea:
9c:5c:4f:8e:41:7b:46:a0:4e:3e:bc:5c:bd:fe:55:
02:00:fb:6e:74:a6:a7:4e:59:f1:3d:01:9d:fc:c4:
9d:9d:db:1c:1b:26:48:4b:a5:a1:ff:6f:66:32:1b:
73:93:75:40:4d:b1:7b:83:ab:4c:97:29:6c:6d:38:
9a:c8:04:2f:39:3e:b7:4c:69:d3:f5:26:72:21:0d:
4b:2e:d9:1f:e7:71:f1:f0:66:57:77:9b:87:3c:ab:
14:fc:a8:39:1a:b1:4e:9e:1c:49:fe:fc:cf:f0:b8:
e8:cc:f3:d0:8a:08:3f:36:39:a9:e3:07:01:9d:e5:
cc:d8:9e:7b:4a:93:6d:c4:11:0a:ae:78:e6:08:6d:
f0:2c:2e:91:e7:97:d0:1b:fa:ef:49:c6:5f:80:14:
81:bd:2c:09:55:cc:4a:f9:79:20:a3:91:d3:0c:3f:
e5:4a:74:71:5e:be:62:ab:a5:3e:a8:16:31:4e:ee:
e9:f3:7f:69:c1:e6:32:2d:30:6b:a6:82:db:25:c2:
18:a4:35:58:91:31:36:67:70:0e:23:9c:6e:9f:4f:
9a:98:a9:17:09:9a:37:db:ee:fe:53:4e:bb:35:16:
8f:8b:b8:d6:d4:61:1c:6a:48:c6:44:2a:f7:24:91:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:97:CC:D6:CB:FC:9B:61:05:75:75:C3:CE:7E:68:57:46:47:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f9:65:63:dc:dc:5d:8c:28:1d:e1:8e:75:45:67:b2:94:37:
27:9e:f7:96:c8:9d:dd:82:93:d1:8f:05:f5:39:f4:71:0a:81:
82:69:40:e9:86:40:0a:92:8d:0d:d4:2c:60:4b:50:c6:8a:c3:
45:2e:f3:71:44:19:c5:06:33:e5:bf:cb:04:1e:28:d5:e0:6b:
49:dc:01:d8:c5:72:9b:30:4f:ff:3b:6d:68:95:bd:3b:0d:3d:
bc:89:75:51:83:9c:91:1b:de:45:14:de:70:cd:44:2d:41:be:
44:39:d1:3f:b6:1b:dc:e3:37:b1:9c:da:57:23:bb:b9:5a:b2:
c7:29:8f:23:e4:11:55:5c:ab:de:25:67:c0:9e:62:da:f7:d4:
ab:07:be:18:c3:4b:56:c3:0e:a2:c0:1e:2d:f1:24:fc:be:8d:
e0:89:cf:30:af:dc:6d:11:99:04:39:07:1a:9a:7d:a8:29:db:
94:71:23:d7:32:f6:c9:26:d7:66:4f:d6:7b:6b:c3:d4:73:fc:
f1:1d:5f:92:94:5c:bc:1a:df:06:b3:df:b2:ef:6a:5e:f1:e8:
b4:48:42:08:22:06:84:38:25:38:10:be:ab:e7:e3:bf:ea:3b:
d8:40:cb:29:0a:34:0b:e3:4a:a0:00:a9:f5:0a:a2:2e:54:a3:
51:f4:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:21 2025 by rpki-client