Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
File: 4e14254d-55fc-35e4-8793-8e34aa78e99e.roa (raw, json)
Hash identifier: J5DaYzMfod5puItYXrCH/oFVAI2Kfjkv0jqz7bMFOqk=
Subject key identifier: 1B:9B:75:EB:3D:6C:22:9E:76:42:82:65:79:05:CD:93:85:F3:BA:39
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C24BE85B675CE3420000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 212238
IP address blocks: 172.94.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c2:4b:e8:5b:67:5c:e3:42:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=5779d032-457d-4baf-87e3-831336f46340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:30:75:82:82:bf:1a:61:b3:25:ca:48:a4:
0c:22:68:72:cb:9c:27:76:0d:ef:26:7c:41:ad:ce:
35:63:45:82:59:cf:70:6b:9d:7f:e4:b6:e5:5b:98:
a5:06:89:db:64:32:83:54:56:1f:7d:c9:58:71:72:
83:91:00:06:37:b5:2b:78:c3:79:d5:c0:94:37:4c:
8b:20:54:3d:24:6f:57:7c:33:fb:66:f4:48:a2:7e:
fa:75:4c:77:eb:1a:6a:61:67:e5:b1:a5:0d:b3:c1:
5d:59:2c:0d:5f:59:c6:41:ff:86:89:3f:4e:16:b7:
96:0f:36:d9:21:21:0b:d9:80:a7:e2:fb:ad:39:87:
07:4a:c4:ce:dd:20:70:0b:27:15:3d:4f:e6:fc:45:
4f:f9:2c:d9:94:dc:32:ad:2e:3a:1b:9f:19:06:79:
6b:c9:13:0d:f1:a8:8a:04:cf:ac:ef:d0:d7:13:d6:
2a:db:c5:41:d3:66:ca:5a:95:f5:d7:a5:62:ec:5b:
c1:cb:da:1c:1c:9d:6b:0e:72:4d:e2:f7:7a:cc:75:
de:d6:d0:d7:98:91:21:4c:1f:55:9b:92:a9:38:fe:
68:7b:ce:7a:2c:cd:52:34:1c:cd:b7:02:c9:86:c5:
c7:90:8d:fd:de:ef:59:41:f2:d5:d0:b7:66:f6:f1:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:75:EB:3D:6C:22:9E:76:42:82:65:79:05:CD:93:85:F3:BA:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:95:a6:be:05:5f:5c:e7:80:ab:d4:a3:44:28:59:4a:81:c1:
c4:ee:30:6b:24:b0:fc:b7:c7:d0:ee:62:db:34:4b:d3:8f:c4:
84:47:3d:a9:d2:95:5b:89:68:e0:f6:ff:92:52:de:b4:02:c1:
8f:47:43:3a:48:8a:6b:0a:8f:e5:66:0f:e2:0b:77:52:c5:a8:
43:43:0d:51:a1:64:85:0a:65:f2:c6:90:6b:30:40:42:b3:4e:
56:a8:eb:bf:ed:c5:c0:cb:9d:ce:22:d8:ee:16:5b:d4:ed:66:
6c:90:a7:14:2b:d8:b5:34:4d:74:8e:19:4d:b9:c1:e6:29:13:
05:69:38:53:82:cc:9f:7f:b3:9e:27:51:e4:9b:c4:2c:57:53:
00:fc:df:16:af:55:26:95:a9:b1:f0:21:8c:03:88:57:f8:b6:
05:92:69:6b:7a:09:4b:c9:d7:aa:48:21:67:40:45:5b:df:3b:
1b:28:61:85:20:fb:79:70:17:c1:e2:e8:c4:2e:4f:71:33:fb:
a3:b4:71:ef:06:8f:25:12:6a:a4:e7:4e:70:41:25:84:86:37:
5d:7f:90:70:80:8c:bc:d7:39:4b:15:4b:99:fb:f0:87:03:df:
66:ac:d2:52:34:93:fc:c5:64:e2:30:a8:c4:84:8d:ad:bd:ae:
85:09:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:17 2025 by rpki-client