Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa
File: 50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa (raw, json)
Hash identifier: GWcax3eB+fUuPWS7kLeK4u1h6+rLZumqMtH0AbBH470=
Subject key identifier: C7:8E:F2:9D:63:14:85:B8:9D:EC:7F:FE:53:EF:C6:28:E8:6A:23:AC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848181B38B5381DD69F8B8EA980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa
Signing time: Wed 04 Dec 2024 11:21:08 +0000
ROA not before: Wed 04 Dec 2024 11:21:08 +0000
ROA not after: Tue 04 Mar 2025 11:21:08 +0000
asID: 60117
IP address blocks: 172.94.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:1b:38:b5:38:1d:d6:9f:8b:8e:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 11:21:08 2024 GMT
Not After : Mar 4 11:21:08 2025 GMT
Subject: CN=3f17ef95-e3ed-46c7-8681-19195873f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:e6:ee:c4:ff:1c:e8:63:e8:f4:ef:5c:95:
51:3b:11:00:fd:8d:9a:80:b3:fd:65:40:f7:c6:20:
54:b5:25:0b:8b:5d:27:71:91:7b:9c:43:90:cd:47:
5b:dc:35:e8:49:27:21:96:29:57:83:05:27:f6:83:
c4:59:36:ce:46:c4:8f:88:fa:11:e4:88:77:f2:9e:
77:f2:a8:20:be:5c:63:06:b0:0f:ed:ec:93:44:95:
dd:31:a2:e8:5f:fa:08:5f:0d:e8:6c:04:70:f3:93:
71:1d:e3:b2:29:80:fe:9b:a6:11:0e:ee:ab:d2:5c:
a5:99:86:0e:79:6e:84:31:7c:74:b9:83:ad:37:7f:
9b:ad:d1:5f:a1:3a:93:f5:c7:10:56:3d:4b:53:0b:
77:2d:d6:30:63:4e:e0:fa:1b:50:2b:85:54:3f:19:
ea:46:7a:ce:a4:e5:f0:ac:e7:81:11:48:e8:e6:0a:
01:f6:b0:a0:8a:8e:c1:2c:76:ee:6b:94:f2:0a:69:
07:63:e0:a8:38:8e:9e:86:b8:70:97:84:74:5a:0b:
ee:dd:4e:19:ec:e9:5b:c5:cc:1e:a7:09:16:bd:e8:
fd:82:a8:f7:e0:2b:41:11:34:b1:80:4d:2f:2e:0d:
c5:e7:e9:04:b9:93:3e:2b:4c:6c:5d:f1:3c:3e:81:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:F2:9D:63:14:85:B8:9D:EC:7F:FE:53:EF:C6:28:E8:6A:23:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2f:11:b1:91:fb:4f:27:8b:65:39:c0:eb:87:24:07:78:44:
ec:a2:b6:2e:35:84:a2:b2:34:cf:13:26:ab:94:bb:86:f3:a8:
ee:6b:a6:31:59:2c:53:f4:9e:1d:e7:5b:fc:66:76:15:b2:4a:
21:1f:90:1d:5d:6c:ef:10:c0:f8:a2:e0:c8:8c:30:60:55:9a:
ef:b6:15:bc:c1:16:76:5d:d8:17:10:37:ea:28:fa:15:98:4f:
be:e3:b3:c0:28:eb:e7:44:a6:43:55:2a:f1:76:c9:44:89:97:
8a:67:08:f7:8a:29:f8:f4:74:7a:b6:04:51:3f:bb:fc:71:5c:
b2:15:6a:b2:0a:30:3c:2f:4c:c9:f1:c8:71:63:e9:eb:35:22:
b9:87:92:35:70:5f:db:b3:69:61:5d:c0:a3:4d:41:ab:e9:48:
73:2f:20:f1:dc:59:8c:6a:8b:62:71:b0:05:bf:0a:60:4e:0c:
6e:bf:0a:58:28:86:83:1e:b7:9c:0a:0c:6a:52:04:93:f4:4a:
7f:f8:25:37:0e:34:f6:2e:e9:6b:6b:41:e3:e1:00:97:14:be:
0c:b3:60:29:26:2b:69:a0:b3:96:0f:af:ef:45:90:ea:fe:69:
f4:4b:08:a3:59:80:cd:66:50:c7:df:36:5e:c5:7a:7a:db:65:
88:82:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:36 2025 by rpki-client