Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa
File: c9575200-c843-3805-a2a1-6a268b2c9334.roa (raw, json)
Hash identifier: qFm5jtDEcXBEEFjLkijcbxHbKx6pGVSfevKvwT+hm7w=
Subject key identifier: 7E:FB:3C:85:FC:85:4F:C1:04:A3:FF:B4:DE:8D:61:0D:5D:B8:1A:BA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858491D717D8DC55A57C4513575C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 172.94.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7d:8d:c5:5a:57:c4:51:35:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=76831239-3bf6-4297-a3bc-53a7c4fdfb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:8b:26:5c:47:21:d0:a7:d5:91:f4:39:2f:
f6:61:e9:08:7e:5d:29:e4:38:49:7c:ca:7e:11:cf:
c0:53:5e:22:ea:ba:7d:91:6b:78:63:db:a0:9d:ab:
4a:7f:27:cb:2e:aa:82:54:3d:1c:7b:ea:42:33:9d:
4a:82:8b:9d:71:39:90:6f:71:29:52:26:81:20:ad:
f2:c6:2a:7a:cc:a0:c7:75:90:31:59:ba:eb:31:62:
e1:1e:82:a2:fa:40:dc:2d:3f:7d:ba:83:5e:8c:68:
26:9d:5c:2b:08:bf:1c:e7:36:7a:ea:49:75:34:0c:
d2:e1:65:f5:77:63:a6:d5:70:06:fd:5f:56:1e:e3:
91:54:de:fb:df:b0:2d:f0:0f:3c:60:21:b0:86:dc:
b2:1b:f7:1f:7c:f7:76:95:20:9a:61:cc:eb:c2:ad:
a2:e7:fb:ae:ef:e8:3e:00:51:57:4e:0e:d6:16:22:
10:22:c3:ff:15:3a:70:8e:10:0d:6f:8e:11:93:b2:
7d:91:75:24:2e:15:dc:b7:df:3f:a7:f5:16:7a:8e:
0f:86:37:b6:8e:4f:19:fe:b4:a1:bb:0a:33:62:3c:
f9:9b:3e:5d:8e:82:74:ba:6a:61:a8:18:c9:3d:a2:
18:f1:d2:99:cf:ae:f1:8e:de:70:6d:a4:70:f9:5d:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FB:3C:85:FC:85:4F:C1:04:A3:FF:B4:DE:8D:61:0D:5D:B8:1A:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a9:78:99:a8:3c:bb:f4:cb:75:7f:4b:e6:96:de:ee:3d:f4:
72:2c:fb:43:0e:85:4d:4b:b5:e1:5c:68:0f:3a:4a:c4:39:4a:
a7:c1:f7:44:17:58:e8:8d:5e:ce:a4:62:98:22:1d:ab:6a:8d:
42:7d:f5:46:f5:6f:8e:a8:c8:69:87:27:34:2c:63:76:e5:0f:
b4:4c:9c:6c:e9:f3:d2:2b:5e:4e:65:3b:87:e3:96:a0:23:28:
0e:1e:77:0c:f0:9e:d1:90:bb:f5:c8:25:51:51:e2:cb:62:27:
d2:9c:f4:eb:cc:d5:1c:1a:c8:4f:cd:5f:80:c0:53:0c:00:60:
bd:a9:8e:c3:f5:0a:37:64:97:64:f7:58:63:1f:51:d8:ec:8c:
db:ae:46:87:1d:28:02:1f:65:19:1c:ec:93:fe:35:f3:40:99:
ae:ff:04:d5:19:27:10:6b:8c:45:12:b0:31:77:55:43:59:da:
27:20:9f:7a:5f:8f:73:97:5d:bb:ab:90:fb:6c:af:50:dc:9d:
ca:f5:d0:8c:78:5a:ac:6e:0c:f3:0b:32:c9:be:dc:2e:d5:8a:
ef:59:2c:b8:bb:5b:cd:6a:37:1a:5a:3d:84:01:49:16:3c:49:
7e:60:52:a0:80:40:34:45:22:e1:1d:11:ae:f9:5f:1c:6e:32:
41:2a:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:22 2025 by rpki-client