Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
File: e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa (raw, json)
Hash identifier: 6RxQu8Iv9lgfeKlrYdZfiUO/P3OaJpQjbSoeMb1dKhU=
Subject key identifier: D6:58:99:5D:9C:7E:5C:3D:7D:31:DF:ED:28:B2:55:7F:63:54:4D:AA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584930DE740BB2DD635FFC91C740
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 212238
IP address blocks: 172.94.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:74:0b:b2:dd:63:5f:fc:91:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=1dcc6d49-afc9-4d55-a667-8a2b728dd685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:c4:08:2d:36:62:ee:59:5b:2c:a7:a2:b1:
ca:e4:0d:bd:e7:b2:9d:ee:53:48:ea:df:45:89:c5:
dd:53:4b:cb:32:fc:e3:e6:a4:ef:72:af:90:39:61:
45:0a:35:5d:84:8d:7c:19:be:48:1d:9b:c0:88:31:
67:b7:f6:65:fe:6d:35:18:42:1b:11:99:84:75:6e:
4c:8b:4b:87:dd:de:a7:10:6d:c7:5e:11:f4:4c:39:
e2:9c:88:cc:dc:d4:d3:c0:2d:e5:77:84:40:26:4c:
f9:6d:fe:c3:e9:86:35:4b:a9:be:52:11:dc:27:08:
7b:ec:61:ff:17:21:ec:88:cf:cf:b7:0e:ba:62:71:
f8:9d:28:b7:4e:a5:09:d0:ea:23:64:3c:29:99:47:
02:5e:86:7e:86:c1:1b:72:ae:a2:0e:75:88:f4:d6:
9b:e1:54:4b:41:6b:03:d2:db:b6:93:5c:da:da:86:
5b:c0:8d:19:40:68:0e:e3:d5:22:3a:9e:12:80:c1:
9e:1e:13:c4:c8:cb:a3:45:e6:50:4e:05:f7:0f:13:
8d:08:25:ff:d0:cc:a9:75:58:fc:ae:d6:6b:e6:cd:
99:24:5e:28:8b:a2:8e:f0:1f:34:35:b2:a5:70:b3:
bf:ff:ce:5d:61:80:83:80:47:16:e9:d8:ca:46:61:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:99:5D:9C:7E:5C:3D:7D:31:DF:ED:28:B2:55:7F:63:54:4D:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e457ae0e-30e3-3ac4-a36b-d8bfacee2ba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:09:35:22:e9:50:55:96:f4:ec:d7:1c:d1:14:32:a6:e6:80:
89:ec:01:c1:ac:47:58:41:4c:f4:8f:66:58:12:a5:29:49:11:
3c:1d:5c:e7:a2:23:07:a0:43:7f:cb:63:74:bf:54:1f:2a:39:
e1:d2:a3:6d:20:ac:34:2d:47:0e:5f:91:d5:1c:8a:30:79:af:
a9:e2:ce:08:8e:c3:f1:b2:d1:d4:7f:87:bb:53:0b:10:dc:ee:
60:f2:8a:87:00:e2:2a:0b:39:1b:6d:55:85:88:19:d9:49:ef:
44:b1:d5:9e:17:9d:cb:1a:e6:44:13:d0:1f:08:c9:ff:51:e2:
fe:0f:dc:ec:fc:1c:a3:82:f9:ae:ea:9d:47:09:fc:4c:b7:07:
8a:dd:e9:a9:b7:6c:7c:5e:34:1a:d8:43:97:36:c2:f6:7e:82:
ce:cf:10:8c:4a:c5:31:b1:83:88:80:4e:28:ce:cb:32:c7:3e:
5c:6d:7b:ae:81:2c:fd:99:43:4c:db:3c:66:3e:44:8c:e0:c4:
83:ba:76:d8:15:fd:d9:5d:30:ac:04:03:18:b2:7a:66:93:0d:
54:5f:5b:a0:87:86:ef:c1:8d:a3:51:8c:94:43:db:98:6e:78:
b1:07:bb:3b:1a:ba:c7:94:85:c9:e4:ca:99:dd:99:31:3b:30:
e1:09:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:33 2025 by rpki-client