Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json)
Hash identifier: PNNHxZ25SmP8B7OHTudCFRvwKVrXaW5BcdjL3OEn9j8=
Subject key identifier: 1A:F2:92:A7:92:66:31:41:62:67:22:B9:2F:09:2B:59:11:49:D5:A8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C22F2792059B85D38940
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 212238
IP address blocks: 172.94.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c2:2f:27:92:05:9b:85:d3:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=a0e02160-eabe-4689-863f-cb943f7b1811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:ee:c7:2b:b6:85:35:70:ef:d4:d3:d6:33:
c2:80:80:2b:96:e6:1e:3c:15:0b:6f:de:d0:d6:6c:
42:7c:f3:cb:26:5d:94:85:fa:54:8a:18:cc:fe:b0:
07:02:90:d7:28:06:13:c3:a5:57:11:a3:7b:d9:9f:
55:81:21:f3:32:4d:24:87:60:7f:4b:5a:5f:15:1b:
3b:0d:3c:8b:4e:a7:05:1b:ea:ea:10:92:ff:70:4c:
38:e3:24:35:77:a5:3a:a6:11:02:9f:00:9a:62:28:
46:4c:93:9c:fc:d8:91:a2:93:f4:38:59:f2:c8:2b:
c0:ee:36:14:2e:58:86:f9:14:19:35:49:8a:54:48:
45:ae:53:d8:4a:61:4f:bb:88:12:5e:bf:b4:3c:98:
c8:51:44:74:9d:b5:25:5b:ee:30:39:32:c7:46:9f:
0d:c0:c6:ed:8c:9a:c9:42:c2:70:63:c8:b0:a3:57:
67:4b:98:69:f4:51:6f:fc:e8:99:e9:e5:7a:96:3f:
8a:a8:4f:9a:97:c1:0a:31:e6:2f:57:a2:fa:30:a6:
67:2a:7b:62:ae:2b:99:c4:88:93:5a:a1:06:49:41:
6e:0a:79:e6:c2:4a:0a:9e:7d:52:26:4a:e6:6b:61:
59:d4:8e:c2:13:71:48:23:78:b8:10:cf:72:5c:af:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:92:A7:92:66:31:41:62:67:22:B9:2F:09:2B:59:11:49:D5:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:7a:9a:66:af:78:92:a3:3c:0b:54:10:93:78:6e:d1:19:8a:
4e:75:5a:66:eb:3f:a0:44:57:94:53:45:76:c6:6a:7a:fe:54:
6b:86:1b:ed:a6:ed:fd:da:67:eb:e1:e5:20:3f:db:05:24:b2:
8b:4d:3f:1c:67:84:0e:fc:4f:ad:1b:e8:7e:1f:21:18:cb:d5:
0f:0b:4b:a7:a5:a5:31:df:0f:dc:87:6c:f0:27:7a:ab:30:0a:
c4:4a:48:9a:01:66:62:58:0b:15:97:14:58:bb:b0:6e:dd:56:
6f:13:f6:32:28:fd:e1:26:e0:c7:75:2b:2c:dd:66:6d:d5:a9:
3c:6b:33:91:57:84:09:3a:7e:72:b0:73:6f:73:41:44:bd:f1:
21:f5:ec:ba:35:5a:b6:21:6d:23:69:e5:53:0d:36:0a:a9:71:
33:da:64:c3:d5:d7:ed:56:e3:c9:8f:12:01:c1:4b:cb:ee:d1:
01:0e:5e:b0:e1:77:61:28:c2:ff:8b:a6:a1:57:54:74:63:d9:
ce:fd:e2:f7:ac:b6:5d:04:80:d7:a6:3b:10:20:03:36:06:28:
c2:83:09:9c:c1:a5:91:3e:b8:b9:b5:fc:06:ec:d7:65:ce:84:
7f:18:62:c9:21:5d:82:a5:fb:c5:b2:6a:b3:7b:98:1b:c1:a8:
b2:ec:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:40 2025 by rpki-client