Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa
File: 61bf402f-81e3-3147-b52c-113334a06b11.roa (raw, json)
Hash identifier: hwPmIZHFfLZOVATY1LO2JKA3rNEMsJFtAim05rSRfwU=
Subject key identifier: 69:5F:C1:2B:48:D4:5C:56:AD:8F:28:0C:8C:B3:6D:31:B3:81:24:22
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C22001AE958EBADB3B80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 212238
IP address blocks: 172.94.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c2:20:01:ae:95:8e:ba:db:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=f9cc550d-8009-46f2-8a02-72df24530652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:03:7c:f3:05:8b:24:de:29:94:b3:ce:a4:
da:1e:42:14:0b:4e:6f:91:b8:74:98:6c:3d:2d:7f:
98:56:bf:e1:0a:98:58:d1:71:c6:d8:5a:0b:a5:e1:
d3:64:1c:39:64:b6:cf:da:d9:ac:36:45:c3:59:16:
0c:48:6a:c8:9c:11:ef:17:3e:be:3d:68:ac:ec:e6:
cf:dc:fb:58:09:7d:5e:39:19:c9:40:0e:5a:07:a8:
b5:3e:79:b9:95:60:96:27:30:29:47:31:a3:f8:d5:
64:23:c9:e5:38:4a:8e:a7:ad:0e:94:1b:a2:4c:84:
17:1d:d4:32:81:33:46:8c:e3:93:ec:ee:32:c6:bb:
f2:b7:b6:88:a1:05:10:01:4d:4c:67:d3:f8:83:d3:
ca:fe:b9:64:ab:c6:75:ac:33:75:57:5d:70:8e:b4:
e0:e4:e4:67:da:22:89:8f:be:be:98:5d:9d:b5:e0:
e6:c7:6c:1a:5f:36:f1:bb:09:fd:90:a7:bc:5f:73:
7c:bd:ae:44:f1:92:b2:60:57:96:b5:70:c8:1f:7a:
fc:23:47:b5:16:43:40:33:ba:11:9b:7b:92:0e:93:
40:fa:13:40:ba:49:32:02:c7:58:d6:78:83:94:f3:
b2:5c:4b:18:32:3b:d2:c3:ca:8d:5c:90:c8:cb:b9:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5F:C1:2B:48:D4:5C:56:AD:8F:28:0C:8C:B3:6D:31:B3:81:24:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61bf402f-81e3-3147-b52c-113334a06b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6d:ad:ea:f7:93:ce:a6:f4:14:02:92:75:d9:83:1c:93:e3:
c0:90:be:fa:96:05:a4:82:ab:e7:f2:02:3d:96:06:c2:ff:d6:
a3:a7:17:21:5f:aa:35:ea:51:68:f1:64:f6:26:6b:35:a4:44:
e1:b2:c5:9a:5a:81:b9:e6:ea:45:a7:1a:d0:1b:f2:c7:9a:1f:
0f:8f:c2:3f:fd:86:5c:64:b9:34:fa:89:b8:6e:04:1d:aa:08:
94:93:22:6c:09:74:ea:5a:73:5b:1a:1f:46:82:b5:05:93:01:
85:15:5a:63:b7:24:e9:f6:08:b4:6a:f8:fa:be:cd:89:8a:ed:
01:3b:a0:b7:38:b9:f1:0b:75:52:66:cf:e8:8e:89:d2:cd:3a:
4a:3d:6f:9e:8d:0c:c7:63:15:de:3e:2b:74:14:07:e6:97:04:
3e:82:d9:65:01:bb:0d:e9:b8:12:e1:b9:aa:e3:f6:9b:18:d3:
23:59:e4:82:e4:b7:f8:4c:85:71:8b:56:ff:47:17:c8:2d:42:
35:49:d5:b3:8d:3c:17:98:e2:34:82:01:88:d5:f9:47:d9:26:
4d:68:e5:47:10:a8:08:85:dd:76:17:cc:02:5e:0a:c3:7d:c5:
94:ff:c7:19:12:c9:f5:8a:e4:64:79:0e:ef:62:cd:c9:c2:b4:
99:5c:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:39 2025 by rpki-client