Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0b4ba24-2c7e-3387-8fb4-4ed629ef83fd.roa
File: f0b4ba24-2c7e-3387-8fb4-4ed629ef83fd.roa (raw, json)
Hash identifier: JEjaOT6UmrThduMmSmbrjsFPVJeI6GV3g6LgP8BvEgE=
Subject key identifier: 1D:24:E3:A2:A2:B5:6E:F1:FF:A1:73:60:28:45:E8:F1:D9:57:E5:9D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584898D60C39032B7E86ADB05600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0b4ba24-2c7e-3387-8fb4-4ed629ef83fd.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 46475
IP address blocks: 172.94.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0c:39:03:2b:7e:86:ad:b0:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=648fa83f-c3d6-4af3-a3ff-bf3629c24885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:8b:21:7d:2a:a7:47:0b:ad:91:be:80:cc:
65:f5:2b:a3:f1:d3:fe:73:3b:c9:f1:07:2a:77:64:
68:4e:65:7a:de:d1:4a:39:62:14:9c:94:2d:75:8a:
c7:df:94:98:3f:66:17:62:87:a7:27:0a:b4:35:f6:
3e:22:c4:ce:27:e7:cb:12:61:c7:a1:05:ad:00:d1:
90:fc:17:da:ad:6c:fd:7f:c0:6b:f4:2d:78:8f:5f:
2c:eb:b3:d9:8a:89:f5:7b:44:67:b2:80:92:39:61:
e4:87:fc:e1:6a:9c:61:59:0e:9c:87:bb:d0:c5:e8:
51:0d:7c:fc:4a:25:f8:0d:50:57:7d:f0:b3:eb:2a:
13:8d:b8:d4:88:52:7f:65:c4:86:dd:dd:29:1a:39:
31:9f:bb:a7:17:46:94:51:b9:00:6b:05:b8:c4:a8:
18:29:79:53:b7:c9:f3:e8:89:e3:3a:3b:d4:ba:aa:
93:9b:b5:f6:42:7a:e3:70:4a:68:e0:8b:86:50:79:
aa:9e:b2:7a:c5:5f:aa:91:39:73:68:b2:92:91:f0:
27:d6:d5:8a:88:6a:44:a4:45:1e:4f:b3:f9:6a:70:
d4:5b:b9:7d:6a:f6:2a:20:93:fb:51:0b:f5:12:ba:
dd:38:39:e5:b3:9c:e1:43:3b:6f:74:04:6c:06:15:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:E3:A2:A2:B5:6E:F1:FF:A1:73:60:28:45:E8:F1:D9:57:E5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f0b4ba24-2c7e-3387-8fb4-4ed629ef83fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c4:c1:59:b5:2e:3d:73:14:81:ee:2f:f1:2e:8c:c0:8c:32:
ba:4f:7d:fb:50:f5:37:04:af:6f:d7:0a:52:d8:1d:02:47:32:
00:9f:9b:03:a0:f1:b8:e3:c0:93:af:fc:5d:9d:a0:33:ae:e6:
df:dd:04:47:23:84:3c:ae:8c:67:cb:67:a5:a2:6d:53:97:5b:
b9:27:3a:04:de:4c:65:70:b7:a1:78:6b:f6:2f:e1:fb:18:72:
92:e5:ff:f1:2f:eb:de:5d:61:11:32:4e:e6:97:07:7d:15:ed:
c2:93:36:67:dc:37:f5:0e:d5:6c:bb:79:2f:83:14:f3:3d:5c:
5a:0f:b7:b7:f3:4a:df:89:65:39:83:d6:b5:9d:6c:f2:95:cd:
d9:ad:b8:f3:88:c8:48:88:53:99:dc:c0:3c:b0:a1:ba:7c:76:
f3:30:2f:b9:b2:1f:be:53:0d:39:ff:23:ea:d5:2d:53:e8:34:
d8:57:ff:cd:d6:96:c2:e1:1e:23:5c:53:b0:a6:3f:6e:2b:d9:
3b:32:09:7c:59:b2:35:2a:20:10:73:de:f3:fd:7a:da:2d:22:
76:bd:2b:67:cb:8d:57:d3:c0:dc:5e:23:44:76:0d:18:05:38:
79:bf:11:e6:ae:46:ed:6a:09:3d:af:ec:da:d8:3e:62:f1:1c:
b4:2c:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:20 2025 by rpki-client