Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa
File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json)
Hash identifier: +jxgo2FXrH54D8DtuHlXWxfBldxEU50a+A5w1UwkPPI=
Subject key identifier: E0:27:F4:22:ED:05:B6:F2:C1:37:16:FE:6D:5B:8C:ED:AC:B2:11:63
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486C2B158171E7D8FF1D9C7C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 3223
IP address blocks: 172.94.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:15:81:71:e7:d8:ff:1d:9c:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=5d4a0820-2614-4c32-816a-4e9cb70c70b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:ce:e3:c1:54:66:6e:65:57:80:d6:a6:49:
11:f7:fb:61:bc:b5:0a:71:2f:1c:2b:f1:56:9d:03:
10:71:bf:34:63:e4:1c:7f:45:e7:78:ff:49:cf:26:
9d:d3:6c:24:b0:e7:6b:6f:26:db:37:ff:8a:7b:dd:
a9:a0:f7:26:ea:a8:e1:63:23:17:36:f9:ca:45:34:
65:8f:17:67:19:f3:a4:13:b3:79:50:06:55:81:48:
75:4e:6e:cd:4e:a5:7b:51:9a:77:0b:44:36:e5:f2:
53:9c:c9:99:a2:e4:f3:94:23:d4:39:20:d5:d6:f2:
c8:68:1f:2a:a1:1b:ea:88:37:25:62:cb:32:50:d3:
ea:fa:55:3e:aa:c4:95:a9:c5:d5:02:e4:76:21:33:
25:2f:e8:82:48:20:6e:3b:62:16:f7:76:b7:b2:d2:
3b:44:83:ee:1f:73:0f:57:f6:57:28:c4:bc:ab:fa:
41:6e:9d:33:12:71:60:53:2d:77:44:be:87:ad:a4:
0e:49:f9:8f:6d:bd:9e:44:57:0a:7b:5b:4a:90:8e:
01:26:b8:79:ca:c1:2f:cd:bb:31:bd:47:61:78:65:
ef:02:56:0b:d6:50:37:93:f1:bd:4c:3e:00:29:6e:
91:ba:50:ee:bf:8b:76:d4:01:86:13:51:59:1c:76:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:F4:22:ED:05:B6:F2:C1:37:16:FE:6D:5B:8C:ED:AC:B2:11:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1c:7c:ce:5e:c7:67:73:e9:ca:b9:14:de:4a:9b:44:78:f5:
2c:57:cb:2e:f0:e3:41:f2:b9:66:1d:c7:0a:0d:f3:fa:c4:65:
ec:78:54:1c:f1:e1:63:2b:5d:52:68:e4:b2:bd:7a:d3:e1:8e:
41:d0:f8:61:8f:62:79:8b:3a:01:44:a1:43:2a:c0:13:b5:b6:
5b:99:ca:d7:ca:62:8c:e8:13:1b:92:1b:31:fb:e6:0c:55:89:
a2:be:62:22:3f:7e:a5:01:4b:25:b0:2f:0e:c7:43:ea:63:54:
fd:45:8b:0e:fc:6b:af:df:6b:b8:69:17:d2:e4:44:24:b3:5d:
54:a9:c7:bf:20:09:33:d5:95:35:74:9c:cd:dc:a8:21:73:6f:
76:a8:7b:aa:26:10:65:d7:5c:8e:96:d6:24:8a:76:d7:7e:d3:
81:c6:dc:d3:26:54:ca:96:9e:54:a1:20:90:1a:2a:ca:2c:8c:
56:da:4c:2d:c1:d9:3d:5c:8a:ef:f7:f5:92:78:79:11:42:87:
be:5d:4e:a0:ac:8b:7d:af:58:90:d5:62:68:a0:b7:47:37:05:
3d:d8:b5:a6:a2:80:53:07:93:47:c7:8c:ab:b5:70:b4:8d:de:
84:06:5b:ea:5d:e0:7d:20:46:57:5f:fa:74:77:8d:c7:54:7f:
c2:cf:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:44:40 2025 by rpki-client