Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa
File: 5895768f-00f4-3f0b-8e3e-0c260577df14.roa (raw, json)
Hash identifier: dXjF8FdSMJxHxfYlCwi9L33btrzIrYWYMM0eJdq/s2k=
Subject key identifier: 40:90:44:68:23:D3:C8:16:AE:15:DE:6A:9D:5B:47:A3:D3:2E:F5:A4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858481818B4EC2F92182D0BE35F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa
Signing time: Wed 04 Dec 2024 11:16:04 +0000
ROA not before: Wed 04 Dec 2024 11:16:04 +0000
ROA not after: Tue 04 Mar 2025 11:16:04 +0000
asID: 60117
IP address blocks: 172.94.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:18:b4:ec:2f:92:18:2d:0b:e3:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 11:16:04 2024 GMT
Not After : Mar 4 11:16:04 2025 GMT
Subject: CN=65fd14ec-2c8a-4018-9fe9-d1c3a16f7f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:cf:a5:e2:e5:fd:e9:78:77:3a:1f:57:b0:
08:dc:e1:69:2a:67:0e:07:4e:eb:7b:87:22:89:78:
8d:e7:e2:50:57:2f:31:95:a4:cf:4d:6c:e9:bb:61:
3e:09:b6:51:2c:e4:d4:aa:cb:0b:22:4f:0d:64:33:
50:8e:fd:c5:49:f8:5e:29:ca:35:5e:85:10:24:e8:
53:a4:0f:c3:b5:9e:fe:d8:2b:13:ab:c8:25:49:30:
49:16:22:d9:3e:5b:b7:9f:f6:83:5a:a0:b1:05:9d:
64:06:7a:5e:9b:91:f0:55:73:80:2d:ab:f1:30:c1:
df:28:89:6b:3b:9b:e8:d5:0c:31:06:4a:fd:4e:0e:
20:e8:13:7b:4c:97:4b:2b:1a:fc:e8:d4:1f:50:52:
f4:e6:68:38:5e:e0:67:b7:92:11:ce:e6:ff:ab:7c:
ef:bd:59:98:04:4e:d5:65:20:b1:7e:97:c1:6b:6c:
61:4d:22:87:44:c0:56:22:62:fc:2f:04:32:3b:38:
1d:04:23:01:c2:cb:cd:b6:28:62:43:5c:47:38:c7:
c4:22:48:f4:2d:7f:3a:68:9d:dc:bf:fd:e8:dd:0f:
03:96:96:15:a4:03:85:42:3c:cd:a0:1e:7d:97:2d:
cf:4b:4f:b8:1d:f4:c3:83:ae:70:70:ef:e6:30:c6:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:44:68:23:D3:C8:16:AE:15:DE:6A:9D:5B:47:A3:D3:2E:F5:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:85:34:33:0d:ea:b9:95:ea:b7:83:64:b1:1f:7b:c1:80:65:
33:9e:d4:51:b5:45:3a:af:0e:c8:f4:82:c6:8f:a3:42:e5:8a:
f0:0c:85:f3:6d:a6:db:ba:e2:f2:50:e3:dc:22:8c:e6:40:bb:
4f:67:99:dc:72:cf:d9:bd:f8:70:eb:de:91:98:5a:11:35:d3:
97:13:12:19:8a:a4:2c:d4:18:f1:07:62:08:8d:e6:93:6a:16:
9b:9a:ac:ac:20:b2:40:ec:d7:69:3a:d8:34:1d:2f:11:68:f4:
c6:6f:16:07:87:7e:56:a1:21:e4:b1:02:76:f2:ff:6c:b2:ee:
d2:5a:1d:31:4b:df:c8:ef:07:c1:86:df:d6:7c:07:45:e9:f1:
8b:bd:db:8f:8c:5d:7a:cd:0d:ce:81:75:19:1e:df:a9:5f:d5:
26:66:34:be:98:95:64:fe:12:fa:f5:84:46:8c:9f:1a:93:32:
a0:d5:8d:43:f8:1e:f4:77:5d:51:9a:c3:94:44:99:9f:19:13:
79:fa:ed:ef:dd:51:5e:08:32:f6:8f:ba:0f:44:4e:df:57:28:
8d:70:3c:01:f6:fa:10:04:50:59:08:d6:dc:8e:ad:97:41:9a:
df:66:6a:89:ae:de:ca:70:d9:b4:11:1f:ab:4f:b8:ab:a0:9d:
19:dd:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:15 2025 by rpki-client