Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa
File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json)
Hash identifier: yia83a4c5YQwCV0a5zoYNkst2TD9+IpNoLD1HMPga8c=
Subject key identifier: F5:73:5A:65:CB:63:BB:1C:5C:90:C8:5F:C8:82:53:3A:19:4D:91:E8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E9CBEFFD521E5136A44A7980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.94.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ef:fd:52:1e:51:36:a4:4a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=09ad85ca-6516-4575-88f8-eea1f335402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:ee:12:59:c3:9c:67:bc:f2:4d:c2:01:b8:
65:b5:1f:2f:0a:f2:c6:28:40:d7:ad:0d:25:cc:b4:
30:e8:ca:de:ce:a6:d5:47:c4:a6:ce:46:73:a7:c9:
89:ed:83:0b:15:6c:11:34:61:b4:a4:52:7d:e9:3e:
45:6a:a9:07:16:24:5b:5f:7e:14:90:90:c4:12:71:
e4:b8:a0:bd:27:c0:6a:20:9b:47:9a:19:2f:06:32:
45:8d:4e:90:16:06:ef:3b:5b:0e:e3:c0:e8:ec:91:
e1:64:20:7d:c5:8c:02:73:4a:4b:e7:1e:58:46:19:
38:f8:3e:3e:f5:47:87:0e:23:e9:d2:40:96:50:ad:
4f:9c:e8:30:92:46:01:16:49:39:2f:59:af:2f:d6:
3e:bf:be:36:eb:a5:dc:84:8d:53:4d:ff:b7:d0:ee:
a0:5b:78:53:84:bb:1c:49:12:54:12:ed:89:e8:f2:
05:b4:b8:6f:5c:6b:fc:1c:87:7a:6d:96:a2:d5:a6:
37:01:30:03:e7:13:ea:03:d1:2c:67:ae:30:9a:c4:
48:d5:09:a5:de:31:aa:82:7f:a5:45:55:30:72:a0:
d2:fe:db:12:87:c9:39:9e:3b:f1:87:db:76:78:80:
a3:d6:17:81:9a:6c:ab:aa:8d:20:38:40:8e:a3:29:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:5A:65:CB:63:BB:1C:5C:90:C8:5F:C8:82:53:3A:19:4D:91:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1b:40:27:63:f4:c2:74:27:84:86:61:66:8a:72:1e:fb:e3:
b3:ab:93:03:24:9b:c6:9b:6e:97:69:18:aa:15:3b:9b:53:61:
6e:08:45:e8:56:64:39:69:fc:7a:2e:cb:bf:2a:26:9b:79:14:
71:2e:83:6e:b7:55:d9:9c:b0:22:64:66:07:01:86:9e:8c:8a:
f1:26:df:ee:fe:31:96:04:e9:60:f8:85:77:21:f1:b3:13:5a:
8a:18:a7:c0:e1:01:98:96:07:cb:f9:31:53:5d:78:0b:44:48:
f9:45:ea:15:80:a2:88:89:7b:70:2e:4e:74:54:ba:6b:57:3e:
83:8a:87:49:ae:6b:c4:c4:e0:4a:0b:ca:21:09:7e:73:25:7b:
2a:f3:20:01:90:17:74:28:53:7f:6e:9a:98:15:f6:ba:99:7e:
98:52:ae:fb:9a:8f:82:5b:9f:0e:88:77:05:90:73:5c:56:5f:
d2:42:21:7c:46:5d:ce:59:0b:0c:60:4e:33:14:87:b2:7d:f7:
55:5b:37:10:e0:d3:ba:83:80:91:8a:66:32:f9:22:3e:89:49:
6c:ff:3a:2b:c5:62:9f:27:6d:bd:0d:c2:85:27:59:d7:4b:29:
47:7d:d4:69:82:85:d4:7e:44:68:b1:05:43:a8:42:14:75:d8:
0a:33:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:32 2025 by rpki-client