Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
File: c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json)
Hash identifier: xufh0xDjjTp26NJrwqq816xdCyhrUZ+xxAcnEd/I7Sk=
Subject key identifier: 86:39:93:13:7A:1C:AB:A4:38:E4:2F:E9:38:AE:AD:1D:7E:76:EA:B6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848451594E5C2704FD4E4D70180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 206264
IP address blocks: 172.94.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:94:e5:c2:70:4f:d4:e4:d7:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=32d190e4-1d2b-4ecf-92b7-3d05dc8a6613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:44:46:ad:37:ea:89:a5:38:15:bb:e7:5b:
62:8e:c5:17:0e:6b:df:89:3f:7c:87:df:8d:d0:9b:
23:69:90:ff:7c:71:83:91:e2:8f:77:dc:c4:cc:12:
4f:26:8a:74:cc:f2:b7:a4:2d:85:a5:b3:95:72:2c:
5f:54:51:e9:15:23:1d:d8:bf:89:95:d6:c9:c7:ac:
8c:16:8b:7f:a5:8f:72:b2:6b:c1:7e:6b:ec:e5:f5:
e2:d6:81:bb:42:c9:da:9b:f9:7d:51:b9:f3:c2:35:
79:7d:6f:fa:a8:a4:2b:6a:0d:a0:d5:42:40:59:f9:
de:20:d1:c9:3d:02:52:b7:c0:a8:e9:0c:38:68:55:
27:1e:2d:d3:0e:08:16:12:6b:40:f0:67:39:d4:b0:
c0:a4:dc:dc:8d:d5:71:78:bc:ae:14:ba:6f:aa:e4:
0d:2c:fd:e4:e4:17:c0:3c:dd:05:2e:ac:a8:b4:c9:
07:6f:97:36:20:4a:e0:bb:5b:58:70:e8:fa:16:e5:
3a:d4:ee:f0:ec:0d:e4:bf:0d:24:92:d3:fb:a5:4d:
e2:15:4a:ef:8e:5b:11:32:1c:33:5b:2c:f0:ff:4e:
0b:99:ec:0b:0f:f6:32:da:8b:d5:04:4f:bb:e3:b3:
02:8d:05:bf:ee:b9:ca:f1:10:a3:8a:c5:e1:c5:2c:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:93:13:7A:1C:AB:A4:38:E4:2F:E9:38:AE:AD:1D:7E:76:EA:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8c:8f:d3:44:c1:92:da:f2:9f:3b:7f:ec:12:c4:4e:93:59:
cf:26:39:bc:fc:0e:4a:7b:48:e1:fe:4e:5f:34:ce:fd:ec:d7:
5c:02:9b:26:12:4c:6e:fb:3f:38:79:4b:fd:43:00:28:97:01:
b9:c4:08:86:da:31:c0:2f:ff:da:1f:ea:cd:b8:19:0c:da:af:
2b:06:dd:e2:14:61:ce:04:f1:55:02:1e:d3:34:95:96:24:f7:
b4:46:ca:cf:8a:8a:71:34:2e:da:04:cf:3b:d5:0d:84:82:50:
2d:57:77:84:39:ff:c7:c3:04:90:36:59:93:61:68:4f:06:31:
f7:a3:02:85:47:fc:cf:67:02:35:03:ab:08:8e:35:6b:a1:29:
a0:53:d0:7c:4f:5a:d6:e7:68:8a:d7:2b:2d:d4:9c:d3:82:bb:
c0:94:76:90:c5:57:fb:d0:a1:59:44:6c:6f:dd:be:27:22:93:
9c:5e:d7:da:eb:69:03:0b:5f:0f:a5:aa:17:ae:84:37:79:d0:
c9:de:e6:c6:ba:da:33:e5:88:f2:c0:bf:80:53:75:9c:68:c1:
72:37:54:31:58:51:a4:eb:0a:35:fc:00:2a:bb:43:69:f6:58:
d5:b7:4a:73:53:aa:e8:ed:27:8b:4f:5d:e5:e9:19:48:73:51:
a6:2e:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:20 2025 by rpki-client