Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c7d1b2c-39f1-31b2-bd41-1a909d0b1757.roa
File: 5c7d1b2c-39f1-31b2-bd41-1a909d0b1757.roa (raw, json)
Hash identifier: RvtiZBd2EDnABrLfmmeH7RY4VAQhVZXKZI4MANxTz20=
Subject key identifier: B9:6E:08:53:8A:34:1B:7E:C6:48:9D:C5:2E:79:6E:94:B7:67:6D:D3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848C2745E18B1321DC446CD5500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c7d1b2c-39f1-31b2-bd41-1a909d0b1757.roa
Signing time: Mon 03 Feb 2025 11:48:10 +0000
ROA not before: Mon 03 Feb 2025 11:48:10 +0000
ROA not after: Sun 04 May 2025 10:48:10 +0000
asID: 43260
IP address blocks: 172.94.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:74:5e:18:b1:32:1d:c4:46:cd:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 3 11:48:10 2025 GMT
Not After : May 4 10:48:10 2025 GMT
Subject: CN=d4e70f06-a609-4457-9378-3eb455feb7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:74:63:d3:84:ed:b0:68:ab:9c:95:66:f1:
f7:31:7c:21:f8:85:93:51:52:e1:c7:0b:d6:12:63:
0d:f1:9a:01:bd:9c:31:70:fd:85:03:da:a2:c5:e7:
43:90:10:47:57:43:98:ed:19:4f:a9:b9:f9:d8:32:
a3:d1:4f:f2:56:96:00:af:8e:c6:5a:b2:fa:99:bf:
c9:87:87:f7:c2:3d:52:c0:dc:e1:6d:20:21:36:5d:
d2:33:f3:ad:08:d3:ed:5e:26:49:c5:86:5d:68:01:
98:c5:8b:49:8a:9e:96:b3:e1:ac:b3:79:5c:fe:f1:
10:06:88:c5:63:5b:5e:4e:70:43:5b:e0:cb:61:ae:
f3:bc:cf:53:66:2f:9d:ab:cb:47:a6:42:62:44:16:
8f:84:e1:7a:80:58:f9:53:04:a8:ba:43:9e:1c:78:
10:69:31:4e:88:ff:08:65:bf:98:c4:a6:f5:7e:ec:
2f:a2:c9:df:8d:50:a6:97:a5:b6:02:29:c8:73:86:
4e:15:22:b1:0c:ab:11:dd:40:a3:7b:09:3f:ae:c4:
72:3c:be:3b:e8:3e:42:2d:a2:43:2d:d4:39:36:5b:
5f:74:72:81:de:2b:fd:59:ca:34:61:96:8e:ef:34:
19:f7:c7:90:2d:a0:cd:93:a3:6c:94:1a:81:45:eb:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:08:53:8A:34:1B:7E:C6:48:9D:C5:2E:79:6E:94:B7:67:6D:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c7d1b2c-39f1-31b2-bd41-1a909d0b1757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:51:0c:3d:b6:d1:58:bd:75:5e:0f:41:63:c5:b1:15:a9:df:
f8:ac:14:4b:7d:9d:cc:59:af:4a:9e:78:da:76:78:35:b8:f3:
bb:ee:d6:8a:20:1d:99:30:00:54:bd:65:55:f2:74:51:ac:b1:
58:bc:72:29:6e:7b:88:37:ca:6b:34:b7:76:fd:ed:f3:55:21:
06:80:8a:46:66:78:b7:02:8c:f4:f4:f8:1b:b2:a9:0c:1d:03:
28:9d:88:ee:40:da:e7:6b:f4:bb:71:07:55:f5:12:4e:ed:2f:
c5:4d:76:d6:c7:7c:e6:6a:f5:58:ec:4a:28:2b:b4:7e:65:4d:
c7:cc:fe:c4:51:cf:62:3e:2d:3c:b1:fb:59:c3:26:91:c8:32:
9a:cb:99:df:05:f0:b2:e3:34:22:1a:05:56:05:1a:c3:9b:3c:
64:0e:d2:a5:78:d6:d9:ec:02:9a:2d:cd:12:6d:84:4e:c5:e8:
eb:a3:9b:68:ee:67:1e:4e:b8:51:a9:fe:e6:27:ce:27:76:2f:
b4:cb:de:e3:16:61:d0:96:c2:43:24:cd:8f:94:40:05:cd:00:
d6:90:40:9a:e8:98:30:7a:11:46:ad:36:b3:c8:d1:cf:4a:f7:
69:8b:d4:a8:2c:79:a1:72:d4:c2:5e:49:e7:8b:9a:3f:76:2c:
4e:cb:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:34 2025 by rpki-client