Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa
File: 70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa (raw, json)
Hash identifier: qBEMavisevOXLPYQc072bO9kxh+xyPekCad9a8vRoH4=
Subject key identifier: 74:FC:2D:CD:74:3A:0F:95:C7:B5:DD:4F:ED:FA:47:44:2E:3E:1D:DE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE23352E4BEC21249B1B0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 172.94.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e2:33:52:e4:be:c2:12:49:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=843a5da5-5d8d-48d2-a110-54f972d597cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:e2:09:63:ba:9b:89:e3:77:3f:7e:ff:7f:
a2:13:59:bf:5d:81:7d:c7:4b:e2:ed:a2:00:eb:fe:
aa:4f:99:1f:9e:96:74:8d:5e:d2:ff:15:5e:a8:78:
c7:f0:50:61:4d:98:79:7c:b2:11:7c:4e:82:7c:d9:
bd:ac:9b:1d:31:a2:e0:52:20:a2:ee:4d:78:bb:5c:
e3:ae:a7:04:69:03:93:f5:fe:06:47:d0:c0:b4:17:
83:09:9d:5d:a1:88:f6:61:9a:71:dd:27:c7:55:74:
4f:ef:a6:4a:d7:a2:6b:78:02:36:6a:55:e5:ec:53:
55:92:e4:d3:49:f2:04:34:a0:49:e6:b4:e7:87:03:
d6:ab:85:f9:0d:b4:8a:31:38:55:32:28:44:af:3c:
ca:c5:70:a8:81:79:2b:8f:f9:b3:90:37:70:02:83:
16:48:02:3c:76:8e:a3:11:c0:49:9b:19:ee:a8:1d:
7c:23:33:d8:7c:8f:69:7b:ce:bc:b6:8a:ff:42:83:
b9:bf:9c:6f:0a:62:4b:81:6a:3d:f4:cf:3b:44:a5:
b3:98:39:14:01:93:71:77:a0:ff:0d:2b:b3:1c:16:
42:5b:7a:28:52:33:9a:c1:7e:48:46:8d:0f:45:75:
3a:81:d7:47:1a:74:f6:15:21:e2:7a:d8:e3:29:5e:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:2D:CD:74:3A:0F:95:C7:B5:DD:4F:ED:FA:47:44:2E:3E:1D:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:43:99:5d:c7:c1:d8:42:e2:bf:81:e2:6a:5f:08:24:a7:3b:
8f:60:08:c0:76:be:52:53:86:f1:bc:fd:30:b2:c6:a9:7f:95:
cd:b9:5e:13:f9:24:3c:99:eb:bf:d9:82:e8:94:99:06:a5:4f:
fc:fd:d6:c7:a9:84:58:f0:75:18:0e:20:2f:4d:05:99:d4:9a:
c6:ee:7d:fe:ed:48:2d:b1:56:ad:af:e8:bf:ad:eb:1d:9a:66:
c2:53:7d:75:58:ff:09:3b:f2:f1:0c:d9:03:e2:86:e8:77:a4:
f7:c0:0d:ca:74:e0:d0:40:96:fc:e5:88:ef:11:b9:f1:24:51:
e9:09:be:9f:b0:e5:d4:86:3d:9e:57:fa:fb:bd:d3:8f:27:bb:
16:16:37:17:c0:85:af:35:cf:c6:15:18:da:74:33:47:f1:7b:
e5:59:13:ef:1d:11:6c:d0:c5:34:52:58:af:53:7b:5f:04:01:
3d:04:c9:40:0b:c4:45:5b:91:63:91:72:60:3e:54:21:3a:c9:
b1:ee:cb:70:20:5c:db:51:f9:9c:67:00:b4:da:c8:d6:1b:11:
e9:09:7a:8f:c1:58:ca:ca:29:41:89:20:fe:8c:68:15:f2:d8:
02:bd:4d:19:f6:0f:9b:58:a6:25:74:a8:55:66:d5:5c:3a:af:
98:33:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:35:06 2025 by rpki-client