Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa
File: 8bded033-c145-3aad-bef9-ec1a1c913937.roa (raw, json)
Hash identifier: vTww+PGmKSn92XsfgcH1pIZMFhE7uqQ0Ra/ln8hJv54=
Subject key identifier: 32:12:0F:62:B9:07:DA:18:11:4B:EC:15:16:E2:0B:1F:AE:7D:9B:26
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695BCA8D485E226AAB4ED00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.94.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bc:a8:d4:85:e2:26:aa:b4:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3587aac7-8b63-47a1-843d-ffc8155f65b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:6a:8a:04:69:b8:83:d1:51:cf:42:ee:99:
b2:65:2d:a4:0b:da:71:d7:27:18:59:71:c9:53:98:
cd:35:f7:8c:a3:49:f5:5a:f4:8e:c8:36:b2:38:98:
91:e3:9e:dd:a3:b6:c6:ce:09:9c:5c:73:b4:1a:7a:
15:e5:be:b7:ca:d7:eb:45:74:89:44:a4:43:9a:6f:
40:b2:45:fd:cd:20:9f:0a:49:7e:97:95:a8:56:35:
fe:10:f9:bd:83:fc:4c:30:f4:96:51:d6:cb:c9:a0:
f9:61:9e:75:7c:6d:5b:eb:45:89:64:53:af:48:5d:
f8:59:40:3c:8c:04:e0:0f:ef:0f:0b:fb:a6:4c:18:
4d:7b:87:c6:a6:7e:46:2d:d8:b9:ea:90:d0:27:ae:
3c:6c:5a:fa:be:bb:6a:54:92:c9:a1:48:60:26:1a:
0f:e7:00:a2:57:78:53:cb:fd:c4:16:c6:10:2c:8a:
2a:c7:29:9c:bf:5b:a8:83:41:21:96:10:6b:35:14:
7b:34:09:f3:15:97:fb:f1:75:ba:c1:58:23:a4:fb:
41:ae:bb:7f:8e:18:3a:03:ec:58:16:1d:02:1d:18:
d9:19:82:c0:cc:bc:4e:81:5f:79:3d:57:14:97:86:
c6:61:bd:9d:ea:f0:14:8b:0e:3c:cc:e4:33:ad:21:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:0F:62:B9:07:DA:18:11:4B:EC:15:16:E2:0B:1F:AE:7D:9B:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:d0:c1:b4:29:18:2f:ff:e9:a3:7e:a5:8f:f1:ea:ce:ad:24:
8f:de:ad:23:e9:b5:75:a6:8c:dc:3f:d3:42:d5:a4:74:80:d2:
af:80:ae:27:56:70:83:d3:e6:49:bf:e8:b8:03:4c:94:14:1d:
3e:42:85:4d:1f:44:68:1a:8e:c6:8d:5a:fd:41:e2:c3:4e:e3:
76:9e:8d:08:92:9e:f3:a2:48:ed:f9:c8:19:d7:64:56:88:f2:
45:4b:a0:40:2a:80:23:d3:5a:2e:8b:80:3a:40:1b:a0:0f:3a:
ef:3f:eb:28:83:db:b0:3f:e6:cb:28:1a:6a:d9:fd:9f:b6:bd:
c4:c4:b2:8a:11:de:10:85:f3:fa:ca:c7:68:aa:58:8f:71:0e:
1e:b9:03:99:d0:09:3b:32:f5:e6:96:c8:e3:00:88:71:9a:be:
98:a9:22:77:9e:53:20:72:86:b2:8a:58:f0:22:bf:3a:87:b1:
94:65:46:83:b5:3c:06:4a:41:53:f1:4c:a6:bf:6f:94:6a:5a:
a6:c6:d1:3b:f0:83:08:b5:88:82:f2:a0:bf:7a:99:16:34:e9:
ba:e2:02:30:5a:2e:33:42:64:a3:10:5f:10:9b:ff:0b:44:75:
a0:22:72:95:0b:ae:19:df:95:95:d4:69:91:e6:e2:28:18:c2:
00:84:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:52 2025 by rpki-client