Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6330a477-54b0-3a2a-9788-aeecb6a820f9.roa
File: 6330a477-54b0-3a2a-9788-aeecb6a820f9.roa (raw, json)
Hash identifier: OekUQVHPBOmu5Wn23bEKvl7sV+7DKkXDuW1JSYbPKwQ=
Subject key identifier: CB:F8:5D:2F:A5:74:C3:E4:EA:94:91:43:68:D4:38:F8:C5:FE:FC:19
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FC3BE6F186727294BB385A80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6330a477-54b0-3a2a-9788-aeecb6a820f9.roa
Signing time: Mon 24 Feb 2025 04:31:17 +0000
ROA not before: Mon 24 Feb 2025 04:31:17 +0000
ROA not after: Sun 25 May 2025 03:31:17 +0000
asID: 36352
IP address blocks: 172.94.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fc:3b:e6:f1:86:72:72:94:bb:38:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 24 04:31:17 2025 GMT
Not After : May 25 03:31:17 2025 GMT
Subject: CN=ba804283-9ea9-4a6c-a16d-8cb72af9f017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:8f:0c:8d:1d:eb:23:2a:12:49:24:60:7d:
36:ea:b0:4d:f0:e4:a0:14:c8:a8:56:da:d0:14:10:
a3:13:8e:52:1b:dc:01:f8:bc:25:c3:56:93:93:8e:
9f:de:ae:cf:30:65:6d:34:c9:d8:fc:35:c6:1d:43:
fa:29:cb:85:75:97:51:b2:1a:6f:6d:4c:57:59:61:
3d:98:3c:d7:d3:fc:4a:3c:ef:ad:38:fd:cf:84:75:
59:45:c5:7a:3e:60:7b:4f:7d:55:1c:29:70:e9:1e:
f4:7e:46:ac:28:dd:5d:be:0d:85:dd:2f:ae:6f:29:
a4:f4:b9:b9:92:1b:db:09:fa:c5:5e:af:c3:df:da:
fc:b4:ea:40:e9:5b:cf:fe:dc:f5:a1:b9:6a:ea:ad:
1d:a3:49:84:9a:4e:6d:ef:ca:b8:84:d6:e7:ae:f3:
40:43:b1:de:06:7e:0b:1d:03:42:db:1e:81:4c:51:
ba:d1:a9:84:57:86:9f:5d:97:9a:76:6d:ab:35:25:
c0:ff:19:38:3b:72:ab:43:f4:3b:3c:4d:b1:c2:57:
f3:1a:db:10:b1:f0:89:cf:0c:a7:ec:79:df:bc:28:
c7:2c:b8:6f:e3:da:a2:3b:4e:8a:a0:b7:04:d8:82:
6b:a0:ef:f6:8f:37:c3:cc:35:98:69:64:03:60:bc:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:5D:2F:A5:74:C3:E4:EA:94:91:43:68:D4:38:F8:C5:FE:FC:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6330a477-54b0-3a2a-9788-aeecb6a820f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:77:47:12:ae:1d:58:21:f8:3d:af:f6:51:6f:e6:8a:6f:12:
93:4b:92:41:3b:d5:fc:1d:cc:1f:27:69:b5:29:92:a1:2a:7e:
98:ac:48:19:31:cb:0a:42:fa:39:8d:22:57:e2:a8:df:cb:37:
30:b0:61:95:c3:18:4d:a2:f3:b4:3a:51:d3:0e:ee:fd:b9:e5:
ec:2d:fe:de:0a:fc:f4:38:5d:93:4e:be:d8:c5:83:1b:9b:eb:
14:d6:c0:b6:8f:f9:b6:7c:6b:d6:b1:a4:f2:3a:9c:fd:ec:41:
e8:75:24:c9:ac:9c:92:91:70:32:e5:65:f0:a2:ac:62:e6:93:
b5:2f:db:78:12:9e:f2:d6:d5:76:76:0b:b9:80:21:9c:02:c3:
ab:4c:57:a1:68:15:fd:6c:a1:91:61:8a:d3:71:cb:7e:ed:d5:
55:07:a7:77:6a:cc:30:9a:36:e3:4e:ed:a3:b5:b7:22:1d:71:
01:be:9a:10:00:5f:8a:4d:10:09:fb:06:b1:ef:e4:a8:2b:1e:
1e:01:1a:01:59:50:be:ce:92:f7:72:35:61:11:81:4b:b7:83:
d0:b8:61:a3:7d:16:48:9c:54:8e:43:8e:6c:59:08:1d:35:8f:
35:73:4a:97:0e:b2:12:0b:7d:20:39:e0:19:ca:56:ec:99:c0:
f7:78:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:08 2025 by rpki-client