Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa
File: b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa (raw, json)
Hash identifier: dsRnSnMv8d2w8+OALp6Deb4Y/isjMkEmjWwgHOqjyRA=
Subject key identifier: 27:D9:A3:0E:F5:9C:6E:06:AA:9C:62:11:4B:19:0B:65:B4:08:7F:F6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE4D5B3E4CABFC19911C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 172.94.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e4:d5:b3:e4:ca:bf:c1:99:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=250ddc49-fd68-40ce-966a-2c5cde2f4986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:1c:11:6e:73:5f:c7:0e:02:2f:87:29:3a:
f6:64:da:a2:da:ff:8e:5d:17:c5:0c:c8:67:b3:bf:
1a:16:ee:07:e2:07:b9:9f:95:98:41:95:3c:ed:2a:
62:56:0c:ef:5c:71:ec:c3:ca:21:ee:72:68:4d:27:
fa:52:bf:f0:66:c1:7d:cd:f1:17:cc:e0:2f:c8:85:
c1:f5:34:7e:d3:b9:39:7a:9c:9d:ab:70:c1:68:5e:
9a:69:5e:70:a4:10:3a:2e:82:9b:b2:ab:ff:1e:b5:
a2:68:98:6f:e2:b9:34:75:77:9a:c3:57:8f:9a:e6:
8b:ed:a3:e7:98:16:4a:da:2c:7b:c9:6d:6d:e7:f9:
00:aa:c3:10:f9:d8:d7:38:45:1c:36:f9:a6:1d:8b:
10:64:6f:77:e2:43:f1:35:ee:e6:89:17:49:89:37:
14:90:e0:8a:78:aa:1b:61:3d:80:97:b6:c0:8a:94:
ec:c7:63:55:ff:a1:75:1e:ae:03:1d:e3:e7:75:4d:
2c:35:64:c4:99:5a:1d:2e:15:d7:ef:0e:e5:1a:f5:
38:eb:b5:2f:5b:54:4f:51:68:2a:36:53:96:ea:d9:
5a:6a:40:49:d4:97:ff:36:1a:bb:bd:e9:7a:d0:0e:
eb:7e:a7:88:c3:2d:ea:03:26:7b:f9:b2:01:67:fd:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:A3:0E:F5:9C:6E:06:AA:9C:62:11:4B:19:0B:65:B4:08:7F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:00:c4:aa:0a:47:ed:f1:ef:98:71:89:e1:d5:de:4a:78:93:
6a:29:51:2d:a7:af:db:c0:ab:05:b3:8e:ae:7d:d4:53:e1:ed:
c9:20:1b:11:c5:3e:ac:e7:88:13:43:60:78:af:fc:a4:cc:d2:
50:bf:b8:81:b6:7a:00:01:bc:50:82:83:9a:87:64:48:7b:cc:
55:90:fb:02:cd:66:31:ac:a0:2d:a1:81:fd:b1:7b:03:1b:45:
58:be:c9:f8:b3:25:88:6d:74:63:fb:5a:c5:a2:38:19:7d:a4:
8e:a4:60:b2:90:de:47:ee:01:20:2f:59:88:7c:f5:1d:3b:b5:
b4:3e:41:ad:81:2c:8a:d2:ad:f5:5d:43:c1:6e:37:9b:68:e7:
d8:3d:5a:50:f4:96:08:92:c5:ff:9c:fd:f0:9c:b8:0f:e6:3a:
0d:0c:c7:dd:28:79:ec:97:e8:49:2b:4c:a8:95:f7:ab:a4:e7:
1c:8f:b6:5b:5c:af:7a:d5:6c:65:50:e5:33:1e:dd:3c:6a:08:
49:53:89:1d:eb:0c:c1:e0:b4:f9:0a:48:f4:eb:23:1b:0a:0c:
03:12:2f:28:6e:f7:b1:e7:d7:a1:dd:c2:10:e1:61:1d:04:39:
1f:b4:59:f9:26:2d:82:91:7a:ee:67:a8:fb:6d:d4:ab:96:c2:
7e:fa:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:47 2025 by rpki-client