Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5010435c-3c59-3e89-899b-fd96db277d8b.roa
File: 5010435c-3c59-3e89-899b-fd96db277d8b.roa (raw, json)
Hash identifier: A6p7MYdbdi4VoAm4Az7yxhYy1UrILhORQX0b55ki73o=
Subject key identifier: B9:B1:A5:29:5B:EE:1D:C9:3D:29:60:11:DA:DD:EA:72:65:E8:59:C7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB12B0D1E19CF124F40400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5010435c-3c59-3e89-899b-fd96db277d8b.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.94.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:12:b0:d1:e1:9c:f1:24:f4:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=c348b40d-5d95-40da-9e1f-81b823726eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:9f:d4:40:ec:74:b0:3d:76:7e:79:66:ab:
4d:08:06:ed:08:af:17:ff:a3:bd:bf:cf:6d:ff:9a:
58:31:35:59:9a:61:96:a1:70:88:b9:44:72:cc:bd:
db:06:cf:e7:5d:b6:2e:f3:8e:7a:2e:fa:a2:6d:00:
53:32:ab:ac:2d:fd:75:c4:bb:76:ca:a5:61:03:b9:
44:50:f4:31:84:2e:90:ae:22:52:f7:27:1b:4c:a4:
90:d4:bd:8a:9d:bc:ec:fd:3f:1c:e4:c6:18:ea:af:
1e:23:48:fd:5e:81:0e:7d:d0:a7:d1:6f:f6:6c:2f:
e8:be:52:42:b5:c9:cb:80:b4:79:ef:d0:e5:8c:42:
97:77:57:1f:4b:26:8b:34:d6:e9:f3:36:e1:bf:95:
32:34:41:38:b5:b7:87:7a:84:a6:6e:c5:e7:94:a7:
97:37:eb:42:8f:d5:ee:ce:42:c1:f9:2a:b3:2d:4a:
f9:53:94:3c:49:2c:fd:d1:6e:7a:34:ff:1c:57:1e:
18:f7:a0:09:b3:18:fa:67:73:10:4f:eb:e2:17:eb:
c4:22:ea:9f:ea:50:c5:0a:c5:40:82:e4:0e:b7:5e:
8b:f1:29:36:34:15:44:cf:d2:15:df:49:33:b4:89:
de:0a:38:3d:3e:75:5d:88:b8:8d:bf:7b:cb:79:f5:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:A5:29:5B:EE:1D:C9:3D:29:60:11:DA:DD:EA:72:65:E8:59:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5010435c-3c59-3e89-899b-fd96db277d8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:0e:c3:b7:fa:73:37:62:2e:1c:56:4b:ef:5f:39:d1:c4:10:
59:63:4c:0e:e1:cb:de:e2:6f:45:aa:18:b6:f9:5b:db:3a:ae:
3e:7f:90:4e:03:3a:55:88:f4:69:39:c9:83:02:67:ea:fc:14:
71:98:eb:4e:51:4d:92:d7:4c:55:1b:2f:15:2f:5b:f6:90:5a:
f0:51:f1:0b:d3:83:52:36:22:1c:9e:13:af:ca:54:64:a1:2a:
45:7f:a5:08:f9:62:a9:61:b6:69:4c:57:d4:36:9c:e8:68:f9:
a1:a1:ed:c7:a5:4a:69:a2:a7:24:74:14:b3:ca:38:6c:3f:86:
f7:46:56:9f:a3:fc:1b:ae:73:d9:e6:cd:1c:7d:02:6a:86:c0:
7f:d4:eb:38:fe:8d:f1:72:e1:d8:ba:b2:24:ef:d9:48:fb:a1:
37:48:c8:ec:19:78:fd:a1:2a:38:d2:60:8e:63:52:1c:7c:20:
78:00:24:49:49:e7:6d:2f:c4:c9:5c:da:fa:be:9d:e5:2e:32:
63:5d:94:60:2c:04:f8:a2:8e:7d:b0:92:3e:e0:42:ff:92:0d:
5d:73:4e:e1:ab:50:1a:52:fa:54:f5:72:e2:f2:13:27:d3:8c:
9c:f9:6a:11:c2:a0:76:d8:37:4b:12:cc:39:aa:cf:4a:a0:11:
b6:97:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:11 2025 by rpki-client