Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json)
Hash identifier: kWIGdmp+0VlzbHYOphoHLDbhsARUfS9KbYszf/TCsdw=
Subject key identifier: E1:F1:F5:2A:4D:DD:CD:3C:96:72:7C:F1:95:D7:42:03:16:EB:52:9B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584820CA8E9D527FD1A2E3987BC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 9009
IP address blocks: 172.94.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:8e:9d:52:7f:d1:a2:e3:98:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=7605e4e2-ae2e-4d02-8b34-d56262a4c6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:aa:70:21:da:43:5c:a0:dd:71:96:0d:6a:
f4:1e:2c:2b:8b:f7:eb:df:58:96:36:aa:ac:ff:71:
91:99:c6:89:de:53:10:71:0e:8d:37:d6:70:7e:20:
d5:51:cd:6c:8d:00:f5:a9:5d:af:9a:72:c3:4a:b1:
1f:eb:cf:38:79:49:7a:1d:2c:3b:7c:e7:36:cc:21:
d5:a6:f0:01:4e:d1:41:77:19:a4:47:55:34:5a:b0:
8b:7e:b9:ef:a1:d2:15:e6:42:5a:36:d0:31:e4:38:
db:3b:e4:d4:a8:33:22:a1:c6:98:57:5c:61:04:32:
c1:e2:45:c2:b6:b6:4d:4b:2f:ef:0a:e9:1c:2d:11:
e6:d4:e6:54:05:84:1e:52:fd:cc:d0:9d:e6:38:c6:
8e:a3:0b:e1:09:49:82:83:8c:3a:b3:54:4b:7d:6e:
e8:61:8d:69:c7:37:ab:37:0f:f5:60:d3:7d:a9:96:
4b:2e:d7:07:12:ba:50:bf:66:84:d7:e5:cc:8e:e3:
c1:e9:8b:d7:3f:d8:07:fa:a0:9f:b6:3d:45:01:39:
3a:54:a2:8f:5c:0a:d9:85:f4:b0:9d:29:28:0b:54:
51:51:67:5a:fc:27:68:d0:02:10:65:d0:70:b9:d0:
70:b0:1c:b1:69:cd:e6:ae:33:05:0e:d2:88:3f:46:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:F5:2A:4D:DD:CD:3C:96:72:7C:F1:95:D7:42:03:16:EB:52:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fd:5b:ef:14:c0:61:40:bd:b4:51:2d:e3:8f:93:2f:31:e4:
f4:29:73:68:41:49:fe:9d:e2:a1:d9:47:d3:6f:ef:b7:05:1e:
b1:69:92:2d:7c:5a:c5:bb:1a:21:c9:e6:7b:c3:fa:11:15:96:
c6:f4:dd:40:a8:f9:7d:96:cc:0d:8c:4c:5c:6f:84:f7:ab:07:
31:33:9d:f1:28:75:d3:81:2a:c2:c8:32:d9:07:15:aa:dc:70:
1d:d7:0f:63:21:6f:c6:b2:25:bf:a6:b4:a2:29:78:c7:cb:b8:
a8:3d:e7:a5:ba:79:71:75:2d:d6:6b:68:82:f0:3c:b7:84:b5:
2f:08:92:72:5b:94:46:07:ea:b3:be:2e:e7:ea:2c:a4:f5:2d:
83:26:4a:c8:a7:6f:e3:f4:23:e8:f0:b8:19:62:06:ed:ec:6f:
96:1e:1c:38:fb:37:22:2d:21:63:fa:70:47:95:1d:6f:14:5f:
01:51:e0:1a:06:79:f4:cc:06:82:41:80:3e:99:88:dc:9e:76:
31:33:39:7b:58:50:af:99:56:2a:80:00:7c:61:ae:1d:ae:87:
c4:ae:e4:9e:08:f4:e9:41:03:c3:ff:b3:88:05:b9:3c:28:f3:
f7:c3:9e:40:4d:bd:70:d7:f2:c2:a7:eb:ea:fe:fc:10:48:a6:
38:04:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:17:43 2025 by rpki-client