Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json)
Hash identifier: 0oIl+yR5ESsO8mdCY5BQtCzz4EkX/5XyJzSnQ+Mp6dY=
Subject key identifier: 48:26:F4:9B:6B:79:1D:6D:A4:56:19:0A:2B:20:34:98:81:F8:11:15
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858487CEB27ED7A29B9D4B9F6EA00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.94.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:27:ed:7a:29:b9:d4:b9:f6:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=6c394485-2dfa-45e2-b599-6e3934161424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:c3:a7:ca:f2:41:5e:74:e0:45:f1:1a:8d:
6d:91:6c:24:0a:0e:ad:f8:bd:e9:08:e5:19:a1:10:
46:21:03:e7:39:f9:28:4d:41:00:80:2b:b0:b7:c1:
86:11:74:35:07:53:94:aa:7d:69:8a:61:03:47:69:
59:e7:73:5f:4e:97:d5:25:6c:f9:81:aa:81:14:bd:
ce:a3:68:d6:86:84:76:67:99:c1:c3:0b:f2:5b:c5:
12:4d:3c:ea:5f:6c:39:88:99:aa:3e:86:14:02:55:
f1:66:69:56:a6:70:b8:33:91:20:6f:f8:ee:7f:61:
67:44:c8:9e:8b:f5:87:14:08:53:65:29:39:fc:95:
b7:a4:27:f9:6e:64:27:b9:63:a8:11:bf:3d:db:4f:
7b:6c:50:92:06:0c:9f:ed:e2:29:54:d5:9f:35:ed:
4f:0c:01:d6:ca:de:04:fb:6e:9c:fa:1f:ce:c7:91:
5a:63:c5:3b:ce:5f:72:14:2a:3a:ab:73:f6:ad:ba:
61:84:83:9b:47:d1:eb:0b:29:6c:33:82:4f:9c:6c:
cb:77:b3:cf:90:31:a6:15:6e:53:06:19:a6:37:c7:
0f:3a:9d:bb:4a:0d:2f:9e:e1:af:4c:fb:d1:8b:a3:
ef:28:54:bc:dd:72:3e:53:e1:65:db:af:e1:2e:19:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:F4:9B:6B:79:1D:6D:A4:56:19:0A:2B:20:34:98:81:F8:11:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:87:86:0d:b8:20:99:eb:81:6b:31:9d:88:fa:ad:43:e1:40:
bb:07:cd:c7:8c:d4:6d:70:6e:8a:62:2b:56:57:22:3b:7c:64:
51:b3:cb:8c:13:f6:e7:67:ae:eb:a2:55:63:94:d9:7c:c2:99:
49:36:ae:f5:dc:92:ee:61:b6:a4:e0:e1:96:66:77:33:ee:b7:
76:c5:2e:b7:06:eb:1c:50:45:ed:a3:14:be:09:47:d3:ff:f3:
98:39:d7:11:29:17:93:ac:87:3f:4c:bc:da:15:09:46:cd:30:
d0:02:90:77:39:2c:b0:3b:04:f7:90:61:d0:c3:b0:4c:10:b2:
f6:c5:04:b7:97:92:ff:1e:29:c8:18:e3:30:5c:cd:be:e4:85:
20:8d:f5:ef:6c:65:c7:1b:3e:ae:fe:bc:42:8f:03:f4:fe:b8:
1d:a4:53:15:d3:44:36:b6:78:5c:77:aa:92:37:e1:db:60:55:
b6:7f:b9:bc:09:33:be:cb:30:8a:32:e1:5d:6a:7e:58:d9:ea:
8c:21:78:66:a2:83:05:87:75:bb:43:20:23:33:26:f9:57:07:
33:cb:55:f9:42:a8:2f:54:0b:e2:f5:22:c4:d8:b3:51:e3:89:
02:44:05:89:b6:79:0a:6c:22:14:f1:74:98:af:95:41:c5:91:
de:c6:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:55 2025 by rpki-client