Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
File: ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa (raw, json)
Hash identifier: ffcCKltyUw+ocn/4mJWWVT5KD54kdnD5BfZSooY//ZQ=
Subject key identifier: 60:5E:8E:AB:43:9B:19:42:D0:A0:5F:4A:B1:A1:1F:09:6A:4C:93:51
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848090FBA4EB4A10F8EEAF74080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 9009
IP address blocks: 172.94.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ba:4e:b4:a1:0f:8e:ea:f7:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=465b2ccd-5ea1-407b-b370-2f084733e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:a3:45:2f:28:50:fd:09:05:dc:98:24:11:
45:78:96:6b:ec:f3:f7:5e:28:4f:63:35:a2:6b:59:
bb:5d:fd:9c:a2:8f:70:7c:d4:77:ba:8d:3f:cb:52:
f4:7c:ad:e6:72:b0:98:ca:23:fd:b7:46:27:0e:93:
e3:c7:15:a3:99:4a:47:a3:ed:74:35:0e:c0:c5:7d:
67:3a:dd:cb:ad:71:70:31:59:7a:9a:24:23:eb:95:
b1:10:72:31:56:c0:33:fb:e0:81:43:8c:b6:68:cd:
22:d7:cf:d6:96:7e:8b:3f:9e:c6:8c:54:80:4e:7f:
e4:91:01:7b:7b:4f:9b:29:62:db:0a:9a:a4:ec:92:
4c:14:b4:f6:76:cb:4c:04:07:12:c5:a8:79:d2:35:
8f:62:44:ed:1c:c1:c6:d7:49:e2:7b:27:e3:6b:ff:
44:2a:e3:cc:9a:1c:f1:19:a5:72:a9:29:33:5d:50:
ed:c0:8e:df:48:d9:f1:46:7f:56:7c:59:b5:67:01:
35:d2:4d:48:0c:90:a5:68:b1:38:91:b4:f2:24:c8:
90:13:9c:47:41:40:e2:ea:8f:c2:04:b8:c1:60:a5:
60:27:ed:7a:20:b1:d4:9d:4c:4f:51:d8:73:61:57:
fc:0b:2d:0a:74:46:36:85:2e:80:36:89:56:fe:95:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:8E:AB:43:9B:19:42:D0:A0:5F:4A:B1:A1:1F:09:6A:4C:93:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d1:fc:a5:3d:2c:ac:cb:29:c7:1f:a2:4d:cb:d5:c3:81:a3:
fc:68:ce:7d:ce:ab:7b:6f:7d:50:97:39:1e:09:40:da:f9:02:
6d:36:91:92:ea:47:24:e9:01:ef:66:25:13:14:7f:10:b8:29:
1f:f8:f5:7c:ba:55:18:58:ac:1f:ce:6c:c3:a6:35:f7:9f:62:
ca:e8:fb:47:33:07:b5:0b:24:fd:a6:72:32:5d:45:ad:b2:88:
b4:d6:f9:34:5d:5e:d6:c3:17:8d:86:36:ca:b0:f2:d0:57:df:
ca:04:36:99:a4:72:01:4f:4b:99:47:12:59:54:fc:44:38:f5:
29:49:37:46:50:b8:df:74:50:85:a3:f0:e2:4f:c5:56:13:48:
d3:5e:f3:83:6b:3b:22:a6:f9:d8:bd:70:cc:d4:74:5d:e8:ee:
14:e8:ae:b2:32:65:64:d8:31:85:54:12:82:37:71:83:0b:b6:
4e:08:8f:64:36:bf:d3:ac:b7:c7:af:23:ae:ad:ab:74:bc:c7:
9b:e0:0b:fd:a9:f2:19:3d:b1:11:f7:30:ae:56:bb:c0:8f:15:
77:45:36:54:c6:39:2e:0c:1f:cb:4e:c5:73:24:f4:6d:34:b1:
5f:5f:a7:23:87:56:d3:fb:e9:d3:9d:77:ce:14:73:15:fd:99:
4b:22:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:15 2025 by rpki-client