Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa
File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json)
Hash identifier: z682BOpo8EkQIIJUWju/G3e/OLYW4qlERX/VwAHv0NM=
Subject key identifier: D8:1E:37:84:F9:1B:70:F5:BC:81:5B:16:C0:35:71:AE:24:71:7A:05
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584827C54932C0BC25197832CA80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 3223
IP address blocks: 172.94.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:49:32:c0:bc:25:19:78:32:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=6e990771-7fae-49b8-bcdf-feaaca26059b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:0d:fa:20:fa:94:20:ab:ca:d0:d8:99:92:
b3:37:55:90:dd:58:14:55:c3:1e:4e:13:d0:1d:3e:
04:78:09:98:e5:ba:5e:fe:38:03:20:58:64:4d:06:
21:c5:f7:43:e2:26:98:11:39:cb:ed:f2:7c:ca:d1:
25:ab:d9:75:eb:27:aa:5f:bf:5f:3e:be:9e:4d:13:
15:0e:26:29:df:8c:84:df:3e:b3:a2:9f:63:9d:24:
11:e9:fd:80:52:81:58:34:04:8e:3a:e6:e9:be:e8:
61:cb:71:02:a3:b0:2e:26:64:23:4f:7c:4e:14:ae:
f7:08:2a:54:95:83:18:6b:ae:98:76:4c:7d:a1:a9:
6d:e8:56:b7:00:6b:b5:f3:ca:d0:95:96:0c:63:14:
6e:8b:af:94:ed:22:c6:69:9a:20:4b:73:4a:0b:84:
5f:ae:3b:e3:a1:4e:1d:12:82:b2:19:26:b7:8e:62:
12:a9:d7:3e:e4:26:04:4a:34:86:8b:b2:bb:a6:d2:
af:b4:81:71:15:99:19:cd:be:c9:e3:be:04:58:4b:
84:20:fb:ea:06:70:a1:3b:d9:1f:ae:3e:17:94:9a:
99:58:f0:97:50:87:6a:93:ad:ed:8e:dc:63:e4:a7:
ed:0c:c9:2c:21:04:63:60:4e:40:61:85:3d:b9:3a:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1E:37:84:F9:1B:70:F5:BC:81:5B:16:C0:35:71:AE:24:71:7A:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a4:9c:b7:97:c8:dc:a2:54:34:e7:41:43:4e:ef:56:a2:ca:
7e:f2:39:60:76:48:19:d5:3c:56:ad:e7:ce:b5:59:7e:bd:d5:
ca:05:db:d3:0c:0b:6a:67:72:a5:e6:55:ea:45:3a:6c:a9:d1:
bf:7c:60:a6:82:67:fc:84:42:82:be:69:42:8b:fa:e3:d7:e0:
62:40:1d:24:ef:f9:70:cc:1e:74:18:3a:70:d7:26:43:8b:ca:
10:b7:73:7e:2c:40:cd:47:da:0b:87:c1:80:a2:45:1d:d5:e1:
86:cc:ef:57:dc:0e:8f:91:da:b5:56:9f:3e:ba:12:94:1e:90:
28:9e:71:eb:5c:83:69:9f:13:a4:fd:b6:44:57:a3:b0:37:d9:
de:71:c2:d6:84:fc:ed:91:0b:f3:77:4c:af:ae:10:90:cf:3e:
63:35:b5:66:2a:fe:c5:a5:50:71:16:9f:a6:84:07:6f:00:d5:
33:d3:f3:8e:4b:cc:a2:e3:3d:3b:8e:d2:64:0d:9f:9c:08:6e:
15:0b:40:ee:ed:63:bd:56:e3:a3:cf:2f:01:f7:b4:cf:1f:84:
e3:79:a3:5e:0b:60:8c:dd:29:3c:5b:31:ab:bf:eb:4c:55:2a:
18:34:22:27:a0:65:91:bb:a6:31:68:ba:a4:37:35:64:82:fc:
15:91:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:36:51 2025 by rpki-client