Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cac4c769-c899-3502-935c-c0f237fbd41c.roa
File: cac4c769-c899-3502-935c-c0f237fbd41c.roa (raw, json)
Hash identifier: 6KCpHCztErdvOXvX9CvuHGpadeb8YBpAf03xAFAtdgU=
Subject key identifier: 84:0C:8A:8E:40:35:37:CC:79:6F:01:E7:E0:55:80:28:FD:1E:64:3B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FEBAB8DC54586520B4F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cac4c769-c899-3502-935c-c0f237fbd41c.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 45671
IP address blocks: 172.94.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:eb:ab:8d:c5:45:86:52:0b:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=66bb5a51-4975-4b0d-96a6-abd9ff36a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:b1:6d:78:df:e7:3f:16:0a:56:dd:4c:0f:
ca:23:ce:6e:e7:1a:1d:13:d1:b6:d9:2b:28:ea:17:
f5:77:53:ea:fe:79:fb:a8:5c:8e:37:e9:ea:c3:7e:
00:56:b4:ce:77:ad:f9:23:8d:d3:a3:73:23:5b:84:
e6:53:6a:3a:36:2d:90:12:dc:73:a4:9b:38:61:ff:
50:98:d6:b4:93:33:ea:1c:52:58:ea:ed:53:f1:ef:
14:f1:31:cd:21:cb:d4:5d:9b:97:64:d1:95:8d:ec:
6c:05:b9:34:19:f9:e3:78:e3:be:a2:22:8f:bf:51:
b5:fd:1d:6f:9b:44:45:79:5c:e6:b6:7c:f6:53:c9:
92:09:56:a1:a8:cc:e0:5e:0c:ef:1a:f2:2b:f3:ff:
45:2b:55:36:54:87:3c:c5:f2:cf:62:a8:30:eb:8b:
1c:91:26:1e:16:a0:5d:51:5b:4a:35:b2:76:41:f6:
e3:63:16:5e:ea:d3:ec:c7:b0:a3:af:74:da:0a:ee:
c6:d2:64:6c:71:ab:56:1d:13:ba:eb:13:60:77:65:
5e:08:59:3b:e9:09:e6:4f:5c:c5:f5:e8:99:13:c9:
dc:8c:8e:84:e9:6e:d0:27:53:42:94:b0:e2:05:80:
c0:51:a4:a3:bf:d4:2d:47:6b:04:da:8f:97:fa:4d:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:8A:8E:40:35:37:CC:79:6F:01:E7:E0:55:80:28:FD:1E:64:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cac4c769-c899-3502-935c-c0f237fbd41c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:81:e5:dd:31:c6:d0:d5:d3:1e:0c:57:13:ac:fc:18:1f:5c:
b7:53:84:28:93:96:54:d8:7c:65:be:4d:38:f4:fe:44:32:21:
1e:12:00:28:d5:06:ad:ce:4e:5e:a8:a8:56:67:67:e8:a1:df:
84:8e:55:7e:fc:e5:ad:3e:14:dd:25:54:09:1c:42:b5:1b:c0:
19:31:98:bf:91:d4:32:ba:fc:f8:1d:d0:d7:3c:d4:f3:c5:f1:
2b:61:cf:b4:46:f1:71:f4:f5:80:6b:53:72:47:32:ae:35:f2:
98:c1:6d:dc:bd:9a:97:bf:97:5b:b0:d3:3d:00:4a:99:89:72:
87:28:d4:eb:9f:8d:92:b1:31:8f:94:9a:26:ff:d0:33:02:91:
ad:88:1b:ef:8a:09:42:d7:a1:a9:00:ad:60:ff:8f:1d:53:1e:
76:8c:3e:86:0f:c1:be:f3:b7:24:12:53:57:c6:59:23:04:40:
82:0d:0f:fd:c9:4b:32:78:9c:59:81:dd:9a:9f:da:fd:2b:5b:
f7:a5:73:7e:c8:68:1b:82:d4:8c:87:0b:6c:12:20:c2:de:95:
b3:f6:71:3c:f1:e7:d9:0c:46:e7:42:2a:54:05:62:9e:86:05:
5b:7f:e8:e4:62:4a:91:27:74:b0:eb:73:0d:53:f0:48:39:47:
58:7c:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:32 2025 by rpki-client