Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
File: 79033610-1a65-35fc-b61f-1ebcb23beb94.roa (raw, json)
Hash identifier: 0UV8368DUbkv9pI6wnWKfKIJ+lTzEyH/AXWAUeYLBSQ=
Subject key identifier: CD:7C:B4:04:0A:58:2E:64:7B:2E:53:FE:E0:2F:EE:9D:18:6B:99:6D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584944693AA27F34184B8D1113C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 3223
IP address blocks: 172.94.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3a:a2:7f:34:18:4b:8d:11:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=02b9fdf0-839b-467e-9ca5-4946b6d3e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:da:72:0b:ff:a0:40:c1:cc:23:35:ad:7e:
a8:f0:25:63:8d:f9:a1:e8:fd:c9:9b:ff:ed:c4:5e:
48:31:d0:87:83:5a:68:17:39:af:a6:25:0e:eb:f9:
e8:60:fd:60:8d:93:35:77:d6:d4:5f:ab:58:3a:a0:
f6:9a:b8:98:7b:40:d2:d6:41:cc:80:b3:5a:58:e0:
66:62:b5:eb:78:c9:2f:ea:19:d4:c5:49:fb:88:4e:
33:97:7e:dc:d9:bb:15:8e:c5:0c:de:86:9c:2b:8b:
56:05:ab:a1:4b:2a:40:bc:81:ba:60:aa:e1:fb:da:
83:97:34:92:92:8d:c1:78:88:57:40:65:c3:72:20:
ff:ed:25:2b:d0:35:d0:a8:f2:be:36:84:0f:df:83:
b4:63:cf:51:9e:07:96:d4:b3:20:52:85:ad:ce:a9:
ea:28:6d:99:20:31:bd:45:38:8e:f9:11:0e:c0:cf:
b3:08:05:d5:7d:1a:ff:45:a6:63:5d:cb:95:d1:80:
5d:a7:3a:aa:2a:e3:8f:8c:b6:55:ed:51:23:c1:5a:
28:8b:88:48:ec:0f:cc:cf:d4:f7:4b:9e:06:93:8e:
ae:49:57:79:ef:1f:78:f3:1b:c7:dd:1f:39:8b:6a:
d6:33:6f:ef:c2:60:f2:b7:8c:74:94:89:e3:9f:5d:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:B4:04:0A:58:2E:64:7B:2E:53:FE:E0:2F:EE:9D:18:6B:99:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:89:72:d8:1e:53:3c:fe:92:5d:8c:11:2f:f6:c2:5d:cb:7d:
f5:54:77:d2:c0:b6:ea:69:8c:20:f0:35:83:59:80:07:0e:c6:
0d:42:4c:f2:c4:56:b8:a7:2c:92:5d:ce:7e:c3:c3:ad:fe:bb:
0c:c7:4f:a7:0c:fb:d3:a3:43:1e:a6:9e:2f:10:f1:bd:03:3b:
92:c4:8b:c1:1d:ca:97:79:e8:a7:df:04:49:40:0e:29:2d:09:
0a:62:61:69:b6:3e:ed:30:fe:ce:b5:9e:c7:68:07:76:7c:08:
af:d9:9b:25:81:c0:cc:27:75:fa:1d:82:84:93:51:00:94:56:
ef:d8:b4:bc:5d:6e:a7:1c:2a:88:2a:8d:27:1d:aa:1b:bc:02:
eb:a9:cb:b6:5a:8d:c2:23:4a:26:f6:59:75:dd:ef:0b:e3:03:
50:4c:16:03:fb:5b:fc:f3:c2:58:ee:56:f5:99:78:cc:94:a7:
7d:72:ac:a5:ce:ea:c0:89:3c:27:6f:c2:f4:d4:d9:6d:49:e8:
d3:fc:c1:30:05:fe:a8:6e:0e:11:51:b5:88:a7:1b:56:0d:1f:
f6:bc:c8:d5:e8:d0:7a:23:cb:fd:51:bc:98:77:d2:b0:81:75:
8a:b0:45:58:2f:0d:e8:65:65:b7:c6:f3:ec:8f:43:ab:b5:3b:
ea:e8:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:09 2025 by rpki-client