Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json)
Hash identifier: CAXFr+gzQ/wRVqq+K08EwOh5r/ZHnQnH7jm6bEiRQUs=
Subject key identifier: 5C:A6:E8:08:B1:88:AB:C5:CE:FA:17:08:B2:66:80:E3:18:90:3D:B4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584900216DD87E5C81130FCEFFE0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.94.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6d:d8:7e:5c:81:13:0f:ce:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=8eb69607-6e5b-47c5-8fcf-40c3dce9de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:ef:7b:40:c1:56:cc:c8:17:0a:00:35:49:
f3:31:bd:57:01:38:c2:7c:a2:76:ba:0b:37:cf:d8:
ec:4d:18:79:b3:a6:f2:ca:d8:f9:87:37:6f:e6:c2:
0c:af:e6:f5:46:4d:a0:2d:31:dd:26:c1:98:08:d1:
4a:1d:71:77:ac:b7:21:6e:d7:a2:cb:d0:ed:1b:9f:
6c:0c:49:9a:ab:f0:26:d9:cb:3e:44:5d:62:27:2f:
42:0d:38:a7:13:d3:a3:96:6a:b0:ed:0e:29:2b:10:
d9:cf:aa:c7:19:01:f7:2a:b4:ac:21:95:1e:ee:3f:
b9:80:c2:bf:9c:76:1a:51:dc:c4:f2:e8:15:16:42:
81:5a:ba:cb:6f:2d:5a:f1:a3:68:08:ab:de:fd:1f:
92:fb:d3:6f:96:bc:b7:4c:2f:f9:46:7a:b0:38:3f:
9d:2c:cd:f4:73:31:54:88:2b:6d:44:a5:a7:83:bb:
b1:e1:79:0c:c4:c0:dc:26:0c:3b:f3:fc:f3:26:0e:
69:62:ac:02:da:10:7a:f2:a3:41:2c:db:cd:2f:50:
1c:8e:b8:d2:fe:2e:d2:62:29:4e:de:90:f7:36:5e:
d1:bf:70:1b:fe:e1:56:90:ff:de:38:0c:48:c6:8c:
3d:95:66:0b:73:aa:a7:bb:e7:56:72:bc:77:f5:a2:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:E8:08:B1:88:AB:C5:CE:FA:17:08:B2:66:80:E3:18:90:3D:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:76:84:11:c8:fc:ba:67:53:85:0f:0a:b4:cb:5f:77:c1:c2:
d7:b8:b7:a5:b3:c3:8c:a9:06:21:3a:2d:a4:34:3d:90:f7:69:
a2:14:b5:f7:86:8e:90:e0:32:1b:a9:f7:4f:fd:e0:82:1f:56:
fc:ed:e8:7e:f5:83:05:74:6d:81:22:db:55:5d:3e:76:5c:20:
32:0d:7d:ed:0d:58:e7:b6:a5:61:80:cd:13:67:10:c0:af:d4:
03:dd:69:a2:db:95:b9:88:7c:7a:20:c1:87:21:75:1b:49:8e:
5e:13:81:ad:7e:66:c1:d2:3c:62:3d:db:b4:a5:53:f7:70:54:
2e:ce:85:de:17:99:4f:22:20:b0:0d:e2:c5:bc:ad:15:ee:fb:
bf:bf:98:74:b7:cc:35:41:c3:2b:31:11:15:bf:a7:9f:c3:ca:
c3:5a:ce:f7:9f:ae:48:4e:64:21:86:00:53:7e:2d:95:6b:90:
b7:bf:88:a7:10:de:c9:56:34:20:a5:ab:4d:69:73:a0:67:31:
a5:41:ce:da:5a:94:d3:04:c7:2d:26:de:20:44:03:a4:dd:97:
e9:36:ea:e7:a7:23:4c:20:96:fd:3e:e1:5f:f9:d5:a6:9a:2f:
4a:b2:4f:4c:d7:69:50:2c:27:46:9a:5f:b6:22:1a:c2:60:e6:
71:61:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:28 2025 by rpki-client