Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
File: 79033610-1a65-35fc-b61f-1ebcb23beb94.roa (raw, json)
Hash identifier: 0uEuOJFC3c4SpYt8FBWw4Oqph/YSAsDl8cFu6C4vSPg=
Subject key identifier: C4:AA:63:9C:ED:D2:28:6B:28:BD:E4:F7:29:DC:5B:5C:C7:32:20:ED
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB0DD7664C25D23EDFD000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 3223
IP address blocks: 172.94.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0d:d7:66:4c:25:d2:3e:df:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=1a0f21b9-bf03-4c63-8024-67c9788a3946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:ac:91:f8:70:e3:94:e6:c0:b9:53:7a:bb:
1f:cc:3b:de:50:30:c4:10:c7:fc:02:92:6b:d5:a1:
c7:76:79:46:db:be:fb:42:86:45:8d:a9:5e:0b:da:
d9:7a:0a:1c:23:f9:39:f5:41:55:4d:e7:47:63:6f:
5a:e4:a4:e7:72:2a:66:9b:c6:53:a5:1a:1e:9f:c2:
e0:1c:dc:16:64:00:60:20:30:93:d8:24:5a:ea:ee:
f3:90:36:3b:b4:9e:56:4e:d6:47:70:80:ac:f6:7a:
3f:bd:36:e7:d3:93:e7:b7:cf:78:63:44:39:92:bb:
86:f9:bb:0f:59:ad:63:eb:a5:43:f6:cf:09:70:dc:
03:b2:14:e3:e6:85:e7:c0:8b:c4:04:d7:fd:ca:91:
bb:11:38:99:bd:31:7b:34:33:2c:03:20:94:c7:91:
80:f7:e5:57:6c:55:ac:50:f5:b7:79:0e:2f:0e:8c:
ba:78:87:53:7d:9e:f4:7b:1a:f1:2f:59:62:5a:9a:
62:ca:4c:e3:02:02:4a:53:54:7b:ed:93:5c:c7:fd:
03:fd:ae:58:a8:2e:89:d5:02:43:4a:8f:c9:05:2d:
14:ea:e3:55:c1:53:64:3a:b4:c6:59:db:b8:9f:bf:
e3:df:d7:e6:8a:bc:2e:46:bf:56:b2:87:be:59:0a:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:63:9C:ED:D2:28:6B:28:BD:E4:F7:29:DC:5B:5C:C7:32:20:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/79033610-1a65-35fc-b61f-1ebcb23beb94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:14:92:7d:82:a6:bb:ea:62:a9:98:6e:ad:a4:43:cc:30:30:
12:71:29:36:ea:80:5d:45:67:2c:39:ef:07:8c:d8:99:e8:00:
f7:ac:34:88:0a:e8:e2:28:71:e9:b3:49:07:c2:72:b2:57:e0:
c7:be:d4:79:02:00:0b:ee:8b:e6:aa:77:5f:3e:8a:99:f9:d0:
57:0e:45:8c:94:c4:2e:0b:b9:f0:fa:57:2b:50:ad:37:3b:dc:
4b:44:64:2c:2a:5b:55:76:6f:80:47:1f:bc:3d:ca:09:be:82:
9c:02:68:5e:68:9c:61:ac:b1:e9:f6:78:b4:2e:6f:10:75:b5:
1b:12:8f:99:fe:20:ba:f2:48:dc:ac:05:aa:a4:44:9e:b7:2e:
22:a6:bb:e3:8e:68:08:f5:9c:ca:1d:49:84:cb:62:a5:76:cf:
34:c3:15:52:43:87:f2:24:ef:49:87:8d:f4:2a:e6:0b:66:54:
4b:88:62:41:86:b6:af:3e:23:82:9e:41:96:1a:18:ef:0d:82:
47:d6:4d:2e:a9:8e:80:47:6c:64:35:73:ca:4c:ed:1f:08:e5:
2b:53:c0:bb:d9:59:24:ec:48:1f:5e:68:69:03:f4:f1:4f:c6:
5c:c5:15:7e:63:f7:e9:ad:f9:e9:36:41:07:14:ec:d7:24:56:
65:91:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:28 2025 by rpki-client