Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44e06dfa-ee81-308e-b00c-07d4d1c47d2a.roa
File: 44e06dfa-ee81-308e-b00c-07d4d1c47d2a.roa (raw, json)
Hash identifier: kHtEJ/B18ZH/9ZuulfxaFuuxlcmuhV4TQQ81MEbSOuQ=
Subject key identifier: 1D:6E:BC:96:7F:CD:0E:B7:E9:FC:6D:A2:78:61:5D:03:8A:AF:F8:56
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489B090FC6D2D43FF8467F9EE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44e06dfa-ee81-308e-b00c-07d4d1c47d2a.roa
Signing time: Mon 20 Jan 2025 08:55:26 +0000
ROA not before: Mon 20 Jan 2025 08:55:26 +0000
ROA not after: Sun 20 Apr 2025 07:55:26 +0000
asID: 329007
IP address blocks: 172.94.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:09:0f:c6:d2:d4:3f:f8:46:7f:9e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 20 08:55:26 2025 GMT
Not After : Apr 20 07:55:26 2025 GMT
Subject: CN=e2330183-44e6-4d71-87dd-8f0c5d123b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:72:2e:3a:dc:82:d2:cb:f9:1f:4d:05:92:
fe:4c:7f:ab:c2:64:82:3b:fe:3f:b2:62:a7:8e:88:
7a:0f:56:e4:b9:e8:b4:a9:68:01:e8:5a:f3:69:45:
7a:ba:d5:0a:45:1f:11:72:82:40:ab:bf:c3:29:08:
73:15:96:18:24:9d:c0:dc:a9:a4:5d:dd:6b:d2:80:
d8:6b:ef:68:06:fd:83:7a:73:f9:71:b8:d5:78:d6:
34:d5:f4:fd:81:fd:1a:a4:55:f2:bf:5f:f6:d4:36:
13:ac:ec:c9:22:83:ea:56:3c:5c:89:f1:55:e8:02:
a5:c5:8d:af:a7:97:93:c6:27:b9:75:61:be:5c:49:
50:5d:61:b7:1e:75:05:d1:43:20:db:b6:0f:d3:f9:
e6:08:29:d0:e9:8c:cd:41:d6:69:c1:d6:cf:9b:39:
01:a3:b2:9f:27:cb:26:4d:48:b3:b3:a0:eb:6c:76:
70:4c:d8:34:8d:a1:ed:30:d3:7e:ee:71:47:e9:21:
83:be:aa:51:85:f1:a1:f0:47:e3:47:1e:ea:3d:0c:
71:ce:22:03:42:15:e2:48:5b:cf:75:e7:46:d1:16:
df:58:6c:70:bb:d5:8e:99:af:99:c8:35:2f:8b:ea:
3d:40:fe:9c:3b:96:64:c5:c5:74:c6:5d:4f:bf:d8:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:BC:96:7F:CD:0E:B7:E9:FC:6D:A2:78:61:5D:03:8A:AF:F8:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44e06dfa-ee81-308e-b00c-07d4d1c47d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:bc:f2:79:35:a7:bc:38:04:b0:55:9c:96:62:91:8b:ac:3f:
53:02:0f:63:ea:c9:7b:96:d0:9f:e4:b7:b7:67:54:26:a0:dd:
d7:a8:c4:3e:7d:13:7c:06:cc:1b:1a:9e:5e:1a:31:6a:2b:6f:
c4:3d:9f:64:97:3e:2a:89:38:66:45:06:9d:11:3b:fc:3a:85:
dd:40:84:e3:6d:21:cb:87:1d:a0:e7:72:24:2f:a0:bc:35:9f:
2d:df:57:07:7e:3e:04:f9:bc:c2:69:a9:38:9c:b9:a1:cf:88:
1a:86:0e:89:7e:8b:48:ab:09:42:dd:59:b4:cd:85:a4:3d:4e:
91:7a:f1:f0:58:af:5a:77:9c:a4:24:a0:d9:f2:c2:91:4b:fc:
3c:ef:c9:f0:34:db:ba:f5:a1:ad:74:24:f1:4a:7a:51:bc:5d:
51:8a:82:8f:09:ad:d1:12:30:79:6e:40:4d:95:0f:07:8f:21:
fa:62:cd:58:17:78:a9:ea:81:54:4e:d7:82:ef:2e:c9:f6:03:
42:99:11:3f:25:74:9d:d4:97:44:93:4b:fd:bd:5a:2a:a4:8c:
02:46:ee:f6:7d:30:2f:01:c5:1d:c6:95:34:93:a1:32:e2:e7:
0e:53:b9:f8:9c:f9:88:15:52:fa:d3:b0:9d:dd:ac:9d:a7:9a:
22:77:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:29 2025 by rpki-client