Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa
File: c338596f-f928-31bd-822b-5a78745be6b0.roa (raw, json)
Hash identifier: SWdeDAlrTt/2oOMwWOqDVGa337UOqzXh6z/GlLjCwWM=
Subject key identifier: 77:6D:17:85:03:22:DD:CB:6D:FC:91:36:D9:71:B4:2D:93:9A:68:53
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858481819EB0F395935A0B9BEBA80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa
Signing time: Wed 04 Dec 2024 11:18:31 +0000
ROA not before: Wed 04 Dec 2024 11:18:31 +0000
ROA not after: Tue 04 Mar 2025 11:18:31 +0000
asID: 60117
IP address blocks: 172.94.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:19:eb:0f:39:59:35:a0:b9:be:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 11:18:31 2024 GMT
Not After : Mar 4 11:18:31 2025 GMT
Subject: CN=808ad933-e542-4f1b-8640-02d9b4dec0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:55:c3:c5:5e:24:c9:53:a1:54:bb:d7:c9:
4f:e5:1f:7b:5e:88:61:49:72:40:7f:bc:6c:4a:99:
b4:64:ef:71:04:13:8a:ec:db:f1:c3:b2:ce:5f:4e:
c3:01:f1:71:fe:29:78:54:dc:6a:7a:5a:4d:2a:0a:
54:85:5b:27:3e:c1:a6:65:a4:eb:90:dc:b0:d0:85:
cf:fc:b3:7c:f9:db:3f:a8:10:54:1a:65:58:60:b2:
36:67:55:51:db:38:c4:d3:33:a9:44:2c:ac:c8:61:
a9:85:6b:ff:e6:63:64:99:75:11:4a:34:37:24:13:
2b:79:ca:a3:72:91:1c:ab:04:e3:57:67:11:94:fa:
d8:42:99:ec:12:3b:b2:4c:0b:24:9c:c5:c3:24:eb:
42:f0:f6:e7:da:7f:14:27:0a:b5:ad:9b:47:9e:25:
d4:f3:29:41:21:35:d8:1a:af:50:f6:97:ab:c4:6d:
3d:30:e9:bb:b9:51:26:4b:1d:81:39:31:0e:59:45:
2c:1a:c8:f2:7e:f8:d7:56:06:de:e3:a3:71:ba:53:
b3:f5:c9:38:61:19:7f:44:6e:39:29:0f:fa:68:e5:
dd:8a:80:8d:cc:8f:10:d6:ab:13:75:95:32:ee:17:
96:56:23:17:4b:de:65:b0:f1:7c:5a:91:5f:b6:1a:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:17:85:03:22:DD:CB:6D:FC:91:36:D9:71:B4:2D:93:9A:68:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:27:8d:a5:c6:1b:09:cb:20:d5:c4:18:6e:ce:62:3c:c5:dc:
df:e4:f8:ad:86:c6:26:54:94:36:2f:7c:9f:6b:d2:08:c1:25:
da:a1:eb:c4:89:f6:ea:1f:42:d1:48:2b:56:5d:cb:7a:37:1e:
18:25:4b:bd:09:81:de:18:f0:bd:7e:3c:9a:7c:76:2d:19:3e:
4c:83:d9:b4:df:89:cd:a9:d8:e9:cf:21:6d:3d:2e:8a:79:d6:
d4:ac:37:c7:16:89:36:70:b6:69:30:9e:ec:45:2a:68:3c:3a:
6f:dc:a8:b2:70:5c:ea:2f:7d:b2:82:ea:66:90:23:85:31:e8:
20:15:b3:5d:8b:47:6f:11:96:42:73:03:e0:1e:bd:ca:e8:64:
b4:87:8b:8a:58:d3:17:2e:60:40:db:bb:0a:d7:bf:ab:58:c5:
02:45:39:e1:22:97:2c:81:c9:f4:af:42:c5:0a:01:46:7d:bd:
ef:86:be:f6:71:c2:ba:f5:b3:6f:ec:93:40:f9:c7:dd:53:b4:
44:60:a2:87:90:53:3a:26:62:5b:4a:61:91:88:fb:33:35:9d:
08:8b:46:f4:eb:66:eb:bc:4b:8a:fa:c9:e9:ce:8b:0f:34:02:
a5:1b:57:44:12:c8:0f:d4:7a:3f:1e:a2:bc:12:ed:c9:1b:d9:
8b:9b:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:27 2025 by rpki-client