Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d193041f-ba39-340d-a7c6-5d48a7cec510.roa
File: d193041f-ba39-340d-a7c6-5d48a7cec510.roa (raw, json)
Hash identifier: ix8aQvsJvterNq3JhlwRZeGlOov2q07FqwK2uzYHCss=
Subject key identifier: 78:FA:3D:40:22:18:B9:C2:93:09:94:23:EB:A3:36:16:F8:43:19:56
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858488F970997F5B55FC6CE13F5E0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d193041f-ba39-340d-a7c6-5d48a7cec510.roa
Signing time: Thu 16 Jan 2025 06:31:48 +0000
ROA not before: Thu 16 Jan 2025 06:31:48 +0000
ROA not after: Wed 16 Apr 2025 05:31:48 +0000
asID: 329007
IP address blocks: 172.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:97:09:97:f5:b5:5f:c6:ce:13:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 16 06:31:48 2025 GMT
Not After : Apr 16 05:31:48 2025 GMT
Subject: CN=86192afd-20ac-40f9-a488-a72a2ec46d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:60:4b:64:ab:d5:05:c7:5c:26:6f:51:b5:
7b:72:07:b2:19:a4:93:7f:88:67:34:ec:95:77:3a:
0a:df:91:be:b8:99:e6:14:35:e5:2a:cb:b1:32:3b:
9e:4b:e5:b7:89:c9:dd:2b:dd:f2:fd:89:39:2c:0e:
54:b1:35:93:40:1a:86:77:2a:ff:99:1c:b6:02:31:
94:86:f9:97:54:24:e6:94:02:e8:61:72:d0:72:d6:
49:05:78:64:c5:ae:7c:88:68:f7:be:ad:12:7d:b6:
f8:a3:07:9d:69:4c:08:d5:5b:11:18:bf:15:44:24:
b6:01:e0:4a:f7:f9:bd:86:06:43:50:89:b5:00:d1:
7d:62:48:21:57:b4:9b:03:8b:ef:27:bd:d4:80:49:
06:8a:74:98:fa:04:9e:9e:84:6c:a1:91:c9:d6:11:
1c:7e:61:43:0a:19:6b:37:9f:26:58:03:3b:f0:8f:
06:91:96:25:fc:82:e4:34:6c:25:d3:b0:e5:21:37:
93:81:33:74:73:71:76:36:51:48:da:b0:09:23:65:
a2:0d:79:32:68:11:92:31:f9:6e:7d:ec:bb:23:27:
b4:bb:1b:c4:10:6a:92:23:f0:cd:7f:10:b5:96:f3:
ed:9d:77:34:a2:f0:92:e2:7b:fc:b3:3b:1a:b9:42:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:3D:40:22:18:B9:C2:93:09:94:23:EB:A3:36:16:F8:43:19:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d193041f-ba39-340d-a7c6-5d48a7cec510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:84:56:b4:0e:df:77:01:56:4b:05:1e:05:c0:a2:32:d0:42:
a7:a5:79:ab:31:5f:3c:c5:d2:98:59:b4:b3:3a:a8:ab:d5:c9:
99:80:57:15:ec:dd:17:44:83:b5:f5:59:d7:69:7c:1f:44:33:
f9:1b:79:29:05:d2:b9:98:cb:93:5b:cf:0e:16:a8:0f:4a:c1:
fe:1c:8c:79:98:3b:45:5d:0b:d8:ee:c7:92:c9:9d:4c:4d:c4:
67:ad:95:79:27:e2:29:c4:6f:97:12:33:9e:ff:9e:53:d1:c0:
7b:47:96:c8:ab:11:4c:ff:5b:d4:37:e6:ad:b5:bf:b0:81:c9:
ba:29:29:b3:1d:50:ed:54:59:55:4f:e4:b3:51:5d:de:cd:02:
e5:cf:66:14:d9:5d:a2:25:32:1e:77:cd:b7:03:73:7f:c8:c6:
49:18:e6:13:98:01:3d:78:87:25:2a:51:3e:57:2a:29:84:6d:
67:3d:d1:b0:89:a6:5d:91:2c:f9:2e:85:08:c1:67:a9:6a:af:
90:7e:5c:89:87:e3:97:7f:59:ed:05:a6:68:d3:6e:f0:5f:de:
69:ef:a9:32:16:63:37:98:99:31:8c:c5:8b:5c:bf:7a:3c:3a:
1e:0a:36:50:fc:96:22:52:51:f6:ef:c4:6a:27:5d:fa:c7:19:
b1:31:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:34 2025 by rpki-client