Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e385e4b5-507c-30bb-a738-e6daa94c56af.roa
File: e385e4b5-507c-30bb-a738-e6daa94c56af.roa (raw, json)
Hash identifier: XVrQwkPk3cX03vAhDJX3Lf66iTqOL2Irgz+uAcUwlO8=
Subject key identifier: B1:D4:06:7B:24:55:AC:BC:63:70:EA:63:62:F6:D5:B8:B8:0E:9A:5E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858489B0BF196CAA4B69BF9492000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e385e4b5-507c-30bb-a738-e6daa94c56af.roa
Signing time: Mon 20 Jan 2025 09:01:15 +0000
ROA not before: Mon 20 Jan 2025 09:01:15 +0000
ROA not after: Sun 20 Apr 2025 08:01:15 +0000
asID: 329007
IP address blocks: 172.94.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:0b:f1:96:ca:a4:b6:9b:f9:49:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 20 09:01:15 2025 GMT
Not After : Apr 20 08:01:15 2025 GMT
Subject: CN=f15d960a-08ff-4588-9e62-d432ebbad96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:34:50:05:79:e2:e7:80:be:3e:2b:25:94:
be:4d:7e:95:8b:15:1f:d3:d5:93:a4:d5:4b:dd:36:
84:3a:1c:c1:5c:62:d3:85:da:ac:4d:1e:20:52:94:
6e:57:73:c6:9f:67:2f:76:c0:63:8a:1f:59:c0:3f:
e9:b7:3e:e1:a1:15:89:fb:dd:df:7f:ff:53:15:22:
7b:38:cd:a5:44:b3:5b:11:29:bf:03:1e:a6:9c:c1:
87:d3:8a:7d:94:c5:20:50:9b:8b:db:42:ad:05:0b:
59:24:b6:aa:d2:a1:b1:35:83:74:2e:b8:31:9c:f1:
b1:82:eb:d0:b0:87:90:fa:19:64:91:bd:5d:9d:37:
99:09:03:b2:b5:7f:a6:25:c8:30:b1:a4:31:89:ea:
86:87:64:ce:3b:ee:6d:cc:69:17:a7:0c:0e:d2:d0:
97:1f:97:eb:08:33:0f:19:70:ef:ff:5f:85:c9:7c:
3c:d4:c4:34:46:88:39:b6:46:62:41:ba:ec:12:04:
86:91:c5:f9:87:81:a8:53:75:5c:51:c7:42:ce:16:
39:6b:b9:d3:42:2c:29:2f:ad:e2:f1:0c:81:dc:80:
3f:7b:aa:63:76:e5:ea:b0:61:90:24:2a:c7:96:ef:
63:a8:90:d3:e2:33:00:7e:93:a3:7b:86:63:ce:23:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D4:06:7B:24:55:AC:BC:63:70:EA:63:62:F6:D5:B8:B8:0E:9A:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e385e4b5-507c-30bb-a738-e6daa94c56af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7d:a1:92:0c:ee:3c:c7:27:4a:b5:48:2c:15:d2:53:76:11:
ab:61:5b:f2:c2:d9:c1:13:30:df:cb:5a:0c:23:0e:86:63:b9:
e4:c4:b2:98:a7:18:71:6c:86:df:47:d4:20:b8:aa:4e:2d:21:
55:c0:ac:86:86:c8:cf:06:80:58:c9:e1:f3:27:db:cd:a6:bb:
66:95:f2:0d:ea:39:0f:fa:9a:db:53:a0:f8:71:ee:e1:fa:55:
89:92:d5:90:1b:d9:55:0c:e4:2e:62:eb:ba:7d:20:6f:4c:5a:
a5:89:6b:84:64:d4:54:bc:06:73:40:98:77:df:f8:d5:95:d0:
8b:80:cd:b7:05:8d:82:36:4c:b7:d0:ce:fe:24:66:1f:f7:2e:
45:0f:99:f9:73:05:22:31:98:f4:b7:56:0f:bb:d8:e6:9b:ec:
05:6b:29:d6:0c:dd:97:c6:68:af:52:b1:8d:f5:31:ee:90:47:
45:35:84:f8:bb:3a:58:69:54:b9:6b:69:14:45:61:63:f4:21:
81:5c:fb:c7:d9:9c:8a:77:b3:ae:59:17:ff:0c:71:fc:57:16:
25:5c:25:54:15:69:46:8b:f4:58:a7:14:6f:e2:13:c9:de:8e:
69:a0:4c:8d:b8:db:39:ad:7e:2f:38:d3:bf:22:67:88:ce:67:
8b:78:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:24 2025 by rpki-client