Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json)
Hash identifier: DWceSPNIPs3yxCx3J8TM2wScGyxS+TEpZ9VxXQZBjfQ=
Subject key identifier: B9:07:01:B4:81:61:5E:91:0C:3B:86:DB:F8:E7:40:05:A7:4F:7B:59
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494733EC893781C45FCF48A500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 212238
IP address blocks: 172.94.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ec:89:37:81:c4:5f:cf:48:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=451e8a03-87e7-4ef7-b244-6060ec30e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:c1:4a:36:3a:31:2e:a9:7b:db:b4:74:e7:
82:54:13:83:fe:97:b7:b8:f2:44:f6:58:4c:d6:7b:
fd:14:a8:39:14:20:79:c9:ab:33:eb:82:48:c3:e8:
ae:46:9d:e8:e6:ae:d3:de:74:9d:01:99:68:78:95:
59:0e:09:5e:6d:0e:be:5a:80:08:92:f3:7a:81:72:
53:38:89:de:e7:87:40:89:72:48:01:2a:10:4f:8e:
23:19:98:c5:86:f9:f3:06:77:4b:32:fd:8c:c5:a4:
1d:02:0a:4a:7d:f6:8d:0e:e3:b3:36:72:05:be:c2:
16:48:d5:f2:02:86:7d:ce:ce:2f:48:6d:d4:28:22:
64:81:80:aa:04:bf:9f:fa:9a:31:83:14:39:6d:46:
9a:f4:85:87:a9:2d:68:0d:10:dd:9e:9a:18:92:3c:
b3:dc:b8:df:81:3e:43:01:93:e6:6d:51:47:0e:96:
02:d0:ec:36:6f:a4:1d:23:1c:ee:f4:8d:7b:2f:e4:
ad:49:47:b0:de:2c:93:b4:49:e7:76:f9:03:97:11:
62:40:89:73:ef:49:5a:59:d2:c6:b6:50:39:85:e3:
03:70:4c:4a:71:51:c1:0d:30:20:83:1d:c4:d4:da:
3c:76:08:46:3e:0f:76:df:d4:0e:3b:63:af:0a:bd:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:01:B4:81:61:5E:91:0C:3B:86:DB:F8:E7:40:05:A7:4F:7B:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:19:55:db:92:0c:62:dd:da:ec:3f:d9:73:a2:ae:f9:12:78:
e7:18:92:46:1c:d2:d3:3d:58:3b:02:a9:2d:7d:af:ed:6f:dd:
5f:cb:9e:c2:e1:5b:34:4f:c8:17:d5:11:19:6c:b0:20:5a:58:
0d:88:96:72:b0:c5:bd:07:2f:20:f3:9f:f6:38:af:52:c6:2c:
2e:cd:65:1e:f0:c4:e6:55:94:9e:e7:27:53:2b:1b:f4:07:97:
c8:9e:37:09:42:99:71:ac:64:1f:33:29:8d:83:b6:a3:75:96:
cf:cc:20:43:d7:60:ce:87:ae:10:6f:2f:cb:b7:fa:ef:95:60:
1d:ed:07:f0:83:fb:49:20:2c:f1:94:e3:9f:f7:8d:13:d0:77:
76:85:ab:c3:cf:98:22:b9:d7:e9:d0:2b:49:34:33:19:95:38:
79:3a:35:c7:1a:61:50:9a:72:44:0a:eb:40:aa:dd:d8:7a:56:
ba:0f:9f:28:91:79:a2:9f:41:41:0e:88:09:5c:66:96:09:28:
7a:66:cc:30:90:ca:8d:5a:85:c2:18:f7:90:04:fc:7f:82:c9:
72:6d:27:38:9f:cf:d1:b8:cc:0d:34:e7:2c:be:9f:3f:24:e8:
89:8c:55:f5:79:02:63:ff:87:f7:64:eb:7e:9f:c3:37:c7:e5:
6e:cd:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:16 2025 by rpki-client