Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa
File: 4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa (raw, json)
Hash identifier: fBg+lsY2hIeZYFQI+DxdeMWRGcl+oGSPjZCe1+yRPk4=
Subject key identifier: 22:2A:D3:77:90:CF:4E:6D:95:5A:18:6B:9C:E9:62:F6:A5:51:BA:B8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D3765781BF956BAACB50FE00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.94.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:57:81:bf:95:6b:aa:cb:50:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=6b325787-bc6c-40fd-b50f-73bfcff19c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:a7:32:79:6f:ee:7e:62:25:bc:bc:f8:79:
3e:71:99:5c:07:00:cd:72:14:9c:49:f6:db:ab:ff:
6a:54:34:17:ac:d9:f2:5e:a8:5f:27:13:ec:17:40:
40:4f:c2:2e:71:77:52:43:b9:f3:d1:37:1f:06:9e:
09:3b:c5:58:71:2d:c9:28:e2:f5:fa:e2:ee:b9:b5:
11:70:9f:de:1d:48:88:16:44:75:68:22:1e:2e:cd:
d5:d4:3a:0e:ec:32:ec:d7:da:34:8b:79:da:61:6e:
1b:95:61:1d:e3:30:9f:eb:8b:03:9d:84:98:0f:8d:
fe:b6:1c:3a:d0:f2:bf:a2:5f:11:85:ea:72:53:bd:
04:e2:d3:c5:1c:7a:b2:f6:a3:d3:9a:70:72:56:fb:
d9:1f:3a:ad:fd:d6:fc:f8:5d:de:3f:c8:d7:a0:63:
17:50:e6:9d:55:24:62:43:8c:ac:04:a7:4e:5c:4e:
99:11:40:80:b1:01:e6:ab:60:7c:52:54:fe:e0:15:
8f:72:df:67:a4:9a:3d:e3:cc:c6:f4:b6:fa:9e:e4:
f8:1a:69:e9:56:23:fe:ef:67:5a:25:94:cc:9c:31:
0a:28:e9:30:14:9f:14:e8:cd:c8:ea:50:de:6a:1f:
a1:cc:3b:b7:01:d9:e2:ea:c9:71:42:cc:75:b8:03:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:D3:77:90:CF:4E:6D:95:5A:18:6B:9C:E9:62:F6:A5:51:BA:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4a:37:ee:d9:47:5e:95:00:24:0d:81:a2:ca:a7:a8:d0:db:
43:c8:99:0f:5d:6d:53:59:db:5b:20:4b:e8:af:0a:1a:03:e9:
58:6d:30:bd:1c:c1:7e:d0:1b:a7:40:54:64:58:bd:85:3f:27:
4d:41:0b:aa:fd:fc:ae:57:d1:b3:5e:31:00:0a:cf:a2:4f:b4:
0c:14:d3:a7:88:ab:ca:17:15:ab:c8:3c:6f:23:0d:1b:35:97:
9f:7d:cf:76:f1:f9:40:1c:02:cd:bf:38:f1:33:af:d4:17:ec:
c5:52:66:ba:b9:a3:3f:ef:63:40:33:64:c2:a4:3a:94:0b:6d:
82:06:6e:e3:29:c3:df:d5:14:fa:3c:0a:de:d7:d3:a6:5a:88:
61:60:03:e7:a1:56:58:d4:6c:50:d2:2d:07:17:42:dc:58:c2:
82:2b:c4:76:00:ce:b4:dd:15:df:21:d5:a7:e9:7d:67:c0:24:
d6:b8:99:d8:71:3a:3d:7e:b7:00:b8:7e:8f:39:72:e7:0b:ab:
11:04:a7:b9:7d:55:3f:60:2e:ef:2d:dd:81:69:d8:ee:ee:6e:
a0:0c:8e:a3:c7:c6:b4:d7:65:dc:1b:0d:86:e8:b4:60:10:1e:
48:c9:1a:15:79:33:d7:79:a5:ae:e1:22:82:5a:96:9b:78:06:
c1:47:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:06 2025 by rpki-client