Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json)
Hash identifier: 703v+G+DKGwj869fIw6uZRBIpOOJ0Dfhi2ThYWUbBNg=
Subject key identifier: 64:2E:33:31:71:36:6C:7A:0F:7A:73:D6:82:CD:B0:B5:29:2F:8A:F4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584820CA8ECF34DA9BEAF255D000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 9009
IP address blocks: 172.94.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:8e:cf:34:da:9b:ea:f2:55:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=08bafa39-1220-41ff-9dde-cf52e54f4cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:2d:aa:28:c5:2d:a1:98:3c:02:15:71:18:
eb:c9:a9:f1:be:46:31:ae:5d:e2:6f:46:39:74:9a:
b2:37:d6:7b:f4:74:b7:70:d0:d3:fd:6b:dc:8c:54:
a7:00:cb:10:29:51:be:ca:e1:bc:d3:70:57:0e:27:
1f:0b:fa:ce:fb:54:41:34:0e:04:c9:9d:aa:d3:05:
91:97:f3:8a:00:c5:90:22:d4:d6:8e:8f:7d:4a:27:
c3:4a:25:c5:bf:86:75:73:bb:5e:fd:27:4a:83:bb:
09:71:a0:16:5d:07:c6:2d:1c:09:6f:bc:cf:64:f7:
47:10:97:ad:fd:08:45:f6:b9:20:6b:93:86:dd:68:
85:e8:0c:c1:6f:62:de:7f:af:d2:44:f2:57:53:1f:
78:e1:ea:e1:f9:46:cf:1e:07:55:15:5a:52:f4:d5:
97:97:d4:7e:b3:d8:31:63:a0:32:a1:c5:83:ee:31:
65:1a:81:8a:f6:3a:4a:f3:fb:ab:ec:f9:87:3c:ad:
45:07:5d:aa:8e:ed:aa:be:0f:95:0d:ee:4e:3a:fc:
d3:ba:4a:ae:be:ee:bb:5a:f3:52:d2:64:94:80:72:
7f:12:34:10:dc:6f:cd:21:04:ca:5f:fb:03:c6:97:
e2:aa:26:53:6d:dd:01:85:58:f9:b2:39:93:e4:f8:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:33:31:71:36:6C:7A:0F:7A:73:D6:82:CD:B0:B5:29:2F:8A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:65:96:05:27:ff:cb:bb:5a:91:48:ae:c4:cb:d1:c3:2d:a3:
5e:c6:08:e6:df:0a:7a:d9:57:17:df:1f:6a:0b:c6:cd:69:24:
1b:0d:a1:c9:90:33:19:18:8c:e5:96:cf:7e:44:83:38:6f:bf:
62:b2:d1:9f:a9:d1:63:61:cd:7d:db:5d:32:75:1f:72:9a:a0:
4c:8e:db:0a:62:32:f1:56:52:f7:61:8f:96:62:53:52:a7:9e:
1a:d6:31:f5:cd:06:bc:81:37:dc:57:c3:12:a9:4e:52:a9:e1:
63:91:70:12:a2:9d:c5:c0:73:a6:75:10:6d:02:df:bd:a9:29:
7d:ee:94:b2:f6:35:a1:f4:2e:0d:51:c7:1b:0a:9f:ba:af:f6:
42:c1:b9:10:0e:fe:22:8e:17:d8:2a:fa:6f:7b:88:15:eb:ed:
83:69:12:cb:84:5e:95:b9:86:3c:27:37:fa:75:c1:76:6d:d4:
8f:ff:60:1f:48:0d:d9:f4:30:c6:28:fe:8b:52:74:c6:4b:74:
a8:fe:45:cc:00:4d:58:12:9c:de:51:c6:20:2a:d7:c2:55:b4:
26:5b:de:fa:ae:0f:f2:5d:36:80:fb:8b:a0:02:e8:cc:43:a8:
14:64:4d:ff:09:a7:60:03:ba:78:bf:12:0f:0a:b4:92:d8:c0:
4f:19:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:18 2025 by rpki-client