Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa
File: 759913cc-b395-39e2-80ab-8a5ae18118af.roa (raw, json)
Hash identifier: X+R0CN0sGbyocgbKs4KTTZtYrLLLVtf23Gm2bkEDas8=
Subject key identifier: 79:0F:7C:66:D1:4B:0B:F0:7C:65:5C:2C:A4:F1:A7:18:E7:19:A7:06
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858485B6B012787B6C73740DE5F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 206264
IP address blocks: 172.94.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:01:27:87:b6:c7:37:40:de:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=86535784-4823-457f-a5e3-c5baefdc8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:b0:c7:87:88:84:1c:df:d7:43:53:cd:f6:
df:3c:ed:25:4e:fe:29:e4:05:c6:26:ac:ac:2e:9c:
1d:9a:88:79:0c:0d:34:21:7f:ef:74:aa:8b:d2:47:
4b:f7:14:3f:19:da:6d:f4:cd:7d:c3:89:c3:c1:f8:
e7:1f:ce:dd:11:79:92:bb:16:89:22:84:bb:83:d6:
22:85:f5:ea:f6:eb:e3:1a:57:6d:af:b1:cb:dd:ba:
ae:f2:d1:75:61:20:9c:2f:73:38:b4:3f:31:17:be:
f9:94:3e:da:8d:15:62:19:b5:15:9e:59:b1:98:7d:
62:a2:8b:52:80:c9:95:c7:db:d7:83:bd:b1:52:bb:
85:2f:6a:24:44:1f:c3:97:ba:ad:df:b9:29:cf:cb:
bc:da:ff:fe:06:da:71:5c:1d:4d:06:e6:b0:fd:32:
d5:1f:ac:f7:14:12:e2:94:cb:60:40:fe:74:1f:98:
c5:62:31:64:0e:74:db:0c:ce:23:32:ef:44:21:19:
87:e4:27:12:c1:3c:ff:f4:52:be:f8:93:a4:e5:3b:
e5:93:8a:f3:38:62:10:21:cc:b4:81:76:98:f4:c4:
9b:d2:b5:07:13:bb:6a:19:a1:e6:62:e1:83:d0:27:
d9:33:56:4d:24:9c:60:a9:9a:32:e5:47:9b:d5:33:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:7C:66:D1:4B:0B:F0:7C:65:5C:2C:A4:F1:A7:18:E7:19:A7:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b5:61:e3:ae:c3:a0:39:12:e3:68:13:ae:da:33:bb:c1:6a:
7d:19:1c:c4:7c:4d:9a:d4:15:3b:a5:7e:ee:a9:dc:6a:cb:4c:
80:5b:a0:3e:fa:f2:bd:38:eb:83:4f:31:17:77:f6:d8:27:0f:
f8:8e:a2:c4:dd:68:72:fe:4e:df:03:a8:7b:37:85:25:f3:fc:
bc:15:a6:11:af:09:70:fa:2c:bf:56:4f:cb:d8:c6:20:2e:75:
b3:b5:be:ab:bc:c6:83:7b:8e:7f:89:f9:96:62:9c:a1:63:f0:
71:f6:b8:6e:3b:0f:47:57:5b:8a:82:c7:54:39:be:9f:d8:b5:
bf:fc:b6:00:10:c8:f3:9a:36:47:da:f4:a7:89:fb:b8:92:e8:
3c:44:d1:dd:81:a8:07:5a:6b:25:37:ab:38:f1:29:0c:60:55:
06:aa:61:ae:1a:ab:54:2c:77:ad:31:2a:c8:13:5f:8f:22:ec:
5b:7d:69:bc:02:9b:f2:27:65:43:3e:19:59:3a:43:2e:87:62:
eb:b8:63:02:cf:7a:6f:15:b0:b8:ba:e8:99:b9:f6:75:7a:30:
f7:61:b1:e6:0a:c4:50:68:b7:8f:26:6f:f4:4b:e1:b0:01:05:
c6:ad:99:f0:65:40:a6:1f:82:4e:4d:9e:cd:e4:f5:3a:ac:62:
55:53:02:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:36 2025 by rpki-client