Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
File: 85beb1b8-b364-349e-8940-19989e438bc7.roa (raw, json)
Hash identifier: dKpsUQQkLYRH8Bf7AjqxNwln/LD9XKwD1kJ0bVZ7N7E=
Subject key identifier: E0:17:01:F3:4A:F6:94:FD:05:26:54:53:94:85:10:48:88:74:15:E0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494733F151473B194372439000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 172.94.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f1:51:47:3b:19:43:72:43:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=e892a749-64ab-4fd9-bc5a-b41967e3b3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:35:2a:be:52:d5:05:cd:4d:ea:82:39:72:
9a:e7:27:5c:43:42:61:87:b2:ca:4e:70:4d:bf:46:
2b:9d:13:46:63:1c:28:c1:4c:26:8f:16:c4:ba:c5:
91:f6:dc:29:9e:33:1f:e9:ca:8f:78:f6:94:3a:a7:
e1:9a:df:c3:53:ef:1e:07:40:54:bc:36:e2:f8:a1:
14:19:0f:79:3c:5c:9d:74:e4:89:2e:13:ec:40:14:
32:d8:ad:12:b2:18:a5:ee:a7:aa:d9:08:10:a8:e9:
45:a3:86:cd:7c:40:0f:44:df:4a:4b:4e:af:27:59:
a0:20:be:61:7c:63:84:18:cc:37:ee:cf:58:9c:b2:
3a:e0:27:53:63:5c:5b:e5:ac:a1:c8:a5:e8:3d:d5:
15:4d:ef:c2:37:9e:1e:0d:2a:71:20:ac:57:91:03:
63:d9:36:31:9a:f9:84:c2:a0:14:dc:93:4e:b6:8a:
25:f4:9e:80:bb:ce:46:f0:22:39:37:47:3e:95:ce:
f0:dc:cb:ec:9c:4b:e2:23:3d:80:17:38:2d:dc:e2:
d4:25:e8:07:eb:95:a8:2a:9e:3e:6d:92:c0:a2:8b:
20:68:71:68:89:16:8e:85:4d:fd:9f:3b:5e:2e:ed:
b1:a2:b1:21:52:b4:a6:98:fc:ca:d3:df:52:d2:67:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:17:01:F3:4A:F6:94:FD:05:26:54:53:94:85:10:48:88:74:15:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:0e:9b:8d:08:83:71:be:14:92:1b:14:fd:68:dc:5c:b7:4e:
3a:10:e4:c8:a5:4d:21:e2:cf:3b:2a:c2:05:c5:17:32:f9:f0:
45:12:49:bf:d2:4f:cd:e3:36:4d:40:5c:3e:79:e2:10:92:b6:
41:07:8b:3a:51:16:70:98:e2:a9:bb:cf:80:08:8f:43:24:81:
62:3e:bc:21:c5:35:10:3e:83:c5:3f:0c:ec:95:ee:31:e2:5b:
b0:ef:85:38:6d:79:cc:36:07:d5:48:9a:34:14:0e:76:ac:7b:
e1:fe:7f:91:c7:24:87:15:24:79:3f:77:2e:32:5f:be:1f:fe:
52:19:5b:4e:9f:f6:fc:b4:ba:51:12:30:3f:df:92:2d:57:04:
db:9d:9f:1f:a7:0a:a5:e9:56:11:bf:62:c7:3f:db:12:73:6b:
ef:5e:96:25:39:8f:2f:5f:ca:e8:13:b5:60:c1:77:0b:15:33:
d1:7e:bc:f4:c3:ec:bc:6d:b4:b2:62:96:3f:4a:75:76:6a:a0:
11:b4:ac:a1:5e:23:1a:7e:45:2a:eb:8f:93:96:7c:0d:0f:12:
31:57:02:d4:3b:67:50:46:e3:48:7b:90:e8:a6:92:95:94:c4:
4b:bf:4f:ea:bd:a5:9c:c8:6f:39:e9:6e:56:ac:4c:52:4e:7d:
03:d4:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:44 2025 by rpki-client