Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa
File: 27d6ace2-7e42-3857-a6df-5915cab5768a.roa (raw, json)
Hash identifier: O7vT4ZGbeE5Xwh9K6CO3owaitrjI2LcRzV/UJcx2Bi0=
Subject key identifier: 1B:CF:1D:DC:84:64:2A:C8:15:4F:AB:ED:2B:F5:53:0A:74:4C:4F:3D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB1252781736CA8B4CD669
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.94.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:12:52:78:17:36:ca:8b:4c:d6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=9d369c3f-7798-4fe2-a8f4-7a1d7c14e364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:6a:c8:87:0d:8d:cf:83:c7:72:ce:a4:31:
b8:05:b8:1b:31:c2:1d:0f:48:80:49:7f:f0:b4:6a:
2e:4c:b4:e5:54:89:be:92:30:c8:46:e3:6b:06:23:
a9:f6:77:59:a4:82:92:6c:b1:8e:f5:49:61:11:9c:
4a:fb:c9:bb:89:d9:7b:99:12:d9:2d:cb:ea:bf:54:
b4:f3:50:bf:67:32:d2:ef:91:1c:79:b1:f3:3f:f0:
fc:59:54:c3:dd:9a:85:8b:c0:c4:2d:42:ef:7e:20:
82:ae:05:fd:eb:62:a8:ce:29:8a:7f:f5:e0:e1:0f:
ec:9d:4f:8e:bf:77:c4:89:3a:40:88:09:83:3f:b3:
6a:84:b3:2e:ef:00:bf:7a:6b:e5:da:8d:6b:33:f8:
fc:09:0f:ba:30:be:52:0a:5b:02:a5:bf:70:ba:a4:
81:53:ac:df:d5:e4:da:d9:7a:dc:b1:60:38:c9:2a:
db:6f:9e:d6:9e:57:65:3c:9e:a9:fd:33:c8:c0:e1:
78:28:1c:35:5e:dc:47:24:45:89:db:34:b2:82:e8:
d1:1f:29:07:95:22:00:2a:bc:81:7f:3f:b8:12:6f:
a0:52:77:a0:c5:72:f9:e0:23:3d:05:19:50:70:7d:
ad:69:83:30:ba:71:a2:ee:df:0a:b3:c5:30:89:26:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:1D:DC:84:64:2A:C8:15:4F:AB:ED:2B:F5:53:0A:74:4C:4F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:ed:c1:1d:72:71:60:92:ef:bb:46:98:2a:0d:31:e6:3e:82:
0c:26:52:03:14:af:5f:74:dd:73:f4:65:a4:05:04:88:64:c0:
91:c1:6e:85:cb:61:6c:f0:d8:4b:fe:d5:e4:e8:9f:5e:a1:c8:
a1:7f:54:b6:10:39:a5:24:43:20:1a:31:a7:f9:8d:0b:3c:4b:
75:7d:d8:23:05:50:42:fd:f5:45:40:8a:82:f6:02:f1:b9:33:
52:e3:e0:fa:39:66:91:61:55:f3:d6:22:58:b6:62:da:c1:5d:
53:85:9d:1b:2a:10:0f:2f:51:12:a6:7c:ed:5b:ab:69:b7:3a:
b3:5e:16:52:18:a4:b5:93:db:89:a1:cd:e3:bc:f9:62:84:cf:
e5:15:e3:b6:40:11:47:de:f2:c4:a9:5e:f9:15:bd:a0:76:b4:
ff:65:5d:b8:0f:ba:50:68:4c:65:39:ce:05:04:11:b5:29:cd:
e7:15:d3:7e:62:9e:a4:4c:6d:1a:d5:a5:bc:bc:38:d2:af:ad:
1c:f3:3d:c1:5e:3f:52:80:ab:1b:d1:c9:d8:e4:03:07:d6:9c:
c8:56:0f:86:02:20:06:e0:ea:0c:ff:49:23:26:79:da:0c:2e:
c7:d7:57:e9:7c:95:e7:2d:49:35:3d:55:25:ea:8f:88:2a:31:
e1:08:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:04 2025 by rpki-client