Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce1a2f-ba68-3bb8-8ef5-1e39cdd0ab7b.roa
File: d0ce1a2f-ba68-3bb8-8ef5-1e39cdd0ab7b.roa (raw, json)
Hash identifier: hM8X72lqqv4CR3XR/ThlY/LKt1YP9/FPiiLVGkcdYn0=
Subject key identifier: A3:6C:1C:03:E5:8A:5D:E0:70:45:13:67:4F:43:88:34:E7:75:4B:65
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489B0BF1D041384886402B7700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce1a2f-ba68-3bb8-8ef5-1e39cdd0ab7b.roa
Signing time: Mon 20 Jan 2025 09:01:15 +0000
ROA not before: Mon 20 Jan 2025 09:01:15 +0000
ROA not after: Sun 20 Apr 2025 08:01:15 +0000
asID: 329007
IP address blocks: 172.94.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:0b:f1:d0:41:38:48:86:40:2b:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 20 09:01:15 2025 GMT
Not After : Apr 20 08:01:15 2025 GMT
Subject: CN=4ddd9d6e-3e10-4656-91db-29862490aca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:0c:d6:15:6d:dc:b1:ab:a9:99:76:7e:62:
e3:26:26:87:66:46:f8:ec:1f:83:17:e5:6a:81:10:
e1:4b:2b:88:94:2e:7c:91:b8:2a:f8:af:c3:93:d1:
59:c3:42:50:b0:4d:e0:77:7f:97:80:bc:d1:b2:46:
18:57:e3:6c:57:12:43:3a:95:16:67:2c:35:23:60:
a4:e1:b8:8b:08:00:44:28:e2:ad:77:6a:cf:e2:31:
e9:d7:34:1d:0e:0c:8d:6f:01:b9:60:02:74:ed:9e:
55:8f:41:e4:70:81:26:0d:51:98:81:20:b7:07:0d:
0c:80:81:e7:8c:64:3c:c5:65:71:9b:57:f8:cc:97:
11:5b:84:07:40:9f:ec:3a:b0:e1:ec:28:50:7a:6e:
27:19:7e:39:10:57:ca:bb:9f:10:ca:58:32:69:2d:
98:99:1f:45:ac:af:01:7b:31:0f:4a:95:be:48:85:
fe:6d:e4:6f:6c:54:14:e8:bd:0d:e0:88:fb:92:1e:
30:6e:74:99:5a:42:d4:f8:11:4f:5e:2c:8a:8e:89:
69:17:00:58:2a:b5:9b:03:e7:7d:9f:e9:c8:2e:f5:
21:00:12:80:13:52:c7:32:6d:1a:7a:0f:e1:58:86:
a6:33:d5:7b:11:49:cc:cd:90:9f:7c:9e:0a:d4:58:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:1C:03:E5:8A:5D:E0:70:45:13:67:4F:43:88:34:E7:75:4B:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce1a2f-ba68-3bb8-8ef5-1e39cdd0ab7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:38:65:f5:96:ec:03:11:68:89:60:7a:c6:9e:ed:3b:f9:dd:
e7:cd:4f:fd:28:04:dc:1e:77:30:02:7f:f3:c8:1d:e5:c7:30:
90:fd:af:48:57:f6:e2:7d:28:1e:ee:a7:a9:87:cb:7e:bf:d1:
6f:2d:45:67:17:ac:0d:c3:08:2a:27:43:75:ae:36:26:32:f5:
3d:a8:fc:db:cb:ed:4c:9b:30:4b:70:64:9c:15:3c:8b:c9:09:
5b:71:8d:cf:06:54:8d:5c:9b:ed:40:60:69:10:7d:bd:0a:77:
de:20:80:86:44:db:b8:5c:79:c6:cd:10:92:e9:a3:51:db:a2:
22:51:10:f5:03:39:76:d0:8e:cc:04:72:ae:fb:fb:15:9e:55:
90:60:43:f3:10:fb:f6:97:7b:18:07:d0:51:4a:69:da:a6:35:
4a:c3:e5:86:8a:56:28:03:de:92:35:7d:13:93:a3:61:98:e5:
c0:d5:a0:5f:ae:b3:02:ed:6f:27:89:c1:c5:7d:e6:a7:e7:9c:
23:d4:1c:e5:f8:9b:af:b6:c9:b7:f6:30:95:f3:ff:7c:fc:fa:
46:88:57:37:7d:0a:a4:ce:57:9b:1b:24:75:03:dd:36:c1:3e:
5f:4b:59:f9:6e:e6:7d:67:3a:1d:eb:7d:e0:c5:ea:d9:15:57:
79:4c:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:39 2025 by rpki-client