Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa
File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json)
Hash identifier: xO6r5HRPB9lYaiiuDOMi3IN2+SP/s0PNIpVdhBnsJeY=
Subject key identifier: 17:DB:70:42:16:38:9B:15:56:DE:CB:CC:E4:FA:9A:64:19:C8:3F:18
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858483F8036C86494FE1081C81200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 40676
IP address blocks: 172.94.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:36:c8:64:94:fe:10:81:c8:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b77fe099-ef4c-4bfe-8930-3516705e1048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:b2:ba:ee:c8:65:b7:3a:2f:cd:d4:27:59:
22:4b:39:31:13:52:87:33:18:cb:52:07:e6:ba:b1:
a5:27:01:76:11:f9:0a:d9:58:5e:d5:e5:3f:90:51:
1e:fa:d8:06:78:cf:33:ae:e4:fc:fa:ca:5d:15:0e:
3f:d3:a9:cd:87:d8:d0:1d:23:ba:e2:7a:8c:3a:62:
d2:70:08:9e:5e:d8:13:f2:20:d6:1f:fc:8a:5a:88:
b7:41:8d:8b:26:db:73:20:c0:c0:06:1f:dd:4b:ee:
12:83:d0:51:5f:c1:6f:47:67:ad:95:73:d4:c0:0d:
38:03:37:6b:c7:16:20:64:a0:d2:2d:4e:fa:34:6d:
6d:d4:ee:3a:ca:e6:49:c6:5d:fe:82:c3:24:4e:13:
a7:b4:00:15:36:9e:71:bd:18:6a:d7:1e:14:8e:60:
ba:fa:c8:3f:3b:e7:ff:e5:c5:14:5d:82:f5:26:9d:
3b:0d:02:8e:6b:77:30:7f:89:30:ad:76:f2:5b:6b:
61:92:83:96:a3:1c:3f:3a:10:8a:69:02:f5:83:d9:
4d:03:af:1f:13:c2:f5:93:62:94:48:3c:69:54:32:
42:01:fd:44:22:9a:39:c4:fa:d5:ba:ae:16:b7:49:
83:9e:0d:c4:d3:05:62:d4:85:ce:92:71:25:ef:99:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:70:42:16:38:9B:15:56:DE:CB:CC:E4:FA:9A:64:19:C8:3F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:65:1c:17:6f:7d:e5:c2:de:98:ac:2a:fe:09:01:7c:95:cd:
5c:99:ce:9b:db:f8:86:fe:0a:dd:c5:6c:ec:5a:4b:ad:aa:bb:
e4:64:1a:b8:be:5e:43:bc:92:b1:33:55:d4:55:a4:fe:8d:d2:
a6:8b:20:af:e0:e4:04:19:23:ed:29:8b:70:ec:1d:e3:f1:90:
27:04:ac:cb:09:75:13:0d:cd:3f:20:05:94:27:a3:74:1e:03:
05:17:c2:3a:4f:f1:da:8c:14:4e:2a:22:a6:7b:38:8d:42:10:
11:af:0d:a7:1c:38:08:b4:e6:4c:3a:4c:9a:5a:9a:15:8d:28:
33:64:df:1b:e2:95:e2:44:5a:fd:d6:50:ce:32:bd:bf:f5:ca:
c9:c8:70:1a:ae:bf:87:3d:e5:53:fe:d5:e9:9d:64:4e:9d:cb:
ca:d3:5a:31:45:3e:d9:a8:ce:af:bd:e4:fc:11:fd:3d:7e:05:
a3:ea:fc:27:3d:ef:47:c6:a0:6d:12:d0:06:46:c0:57:90:f5:
b2:08:ca:b3:4c:e4:2d:ae:40:21:4d:9f:ea:ae:a9:f6:3a:88:
40:7e:70:d5:39:2e:d0:76:f4:51:04:27:14:7f:8a:c2:ac:6b:
3d:83:9a:62:c9:d8:63:73:a2:b2:36:99:15:a6:b3:d7:3a:d2:
8e:16:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:35:03 2025 by rpki-client