Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa
File: cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa (raw, json)
Hash identifier: ccbitsvCz2+BJsfKb/qiVvsaWqzndBDtuLN/gMtwPxA=
Subject key identifier: CB:A6:36:3B:D1:74:8B:AD:66:CD:8D:6E:01:1C:BB:52:76:E3:E0:D0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858481C9A92A793979FAF5EF8C0C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 9009
IP address blocks: 172.94.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:92:a7:93:97:9f:af:5e:f8:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=8d2df9eb-3c31-470c-a126-d3e8657664d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:4f:7d:0c:d1:6e:dd:be:38:38:43:d8:be:
a8:1b:d9:35:29:ea:56:87:63:be:9f:ce:99:d1:b4:
e8:91:b6:ef:7b:1f:89:eb:97:30:75:b2:35:14:d1:
b1:c7:13:8b:03:4a:9b:53:0b:16:4c:71:ba:29:77:
2e:cc:34:fa:7c:2f:d4:82:6b:4d:99:be:ef:b2:db:
56:71:05:f2:97:18:9d:0c:87:17:b6:02:99:5f:39:
41:c4:f5:5d:78:8a:69:55:da:19:8c:f4:ce:ad:61:
5a:e7:93:a8:66:71:3e:36:c5:67:39:00:ce:a7:3a:
81:da:6c:09:39:a8:4b:fb:1b:d9:1c:dc:8c:a1:3d:
ce:d5:95:b1:ab:be:ac:ff:b0:4e:c8:84:14:5c:34:
1a:94:dc:41:9f:ef:24:99:95:af:5d:3c:08:84:79:
7d:1b:9a:ad:60:0b:9e:18:24:64:02:b7:58:b1:3e:
e2:71:41:ba:b4:27:c3:5b:bb:2d:ec:88:c0:2c:8a:
98:13:f8:04:83:d3:58:2c:bc:17:02:70:8c:29:8b:
4f:55:77:88:3c:74:1b:81:ca:b0:e6:92:92:bd:d7:
54:5c:e8:9e:f7:ab:4b:3d:7a:a7:6f:e2:97:02:12:
c4:3e:9a:27:8f:b7:be:42:8e:4d:2a:8a:bc:a4:6d:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:36:3B:D1:74:8B:AD:66:CD:8D:6E:01:1C:BB:52:76:E3:E0:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:94:e9:80:76:74:2f:73:1a:bb:8c:68:ec:f2:67:0d:b5:16:
e5:da:4e:e5:ff:4c:79:d8:77:a1:ed:0d:46:9e:4a:80:13:f8:
db:d8:68:7b:79:13:d4:b0:29:ae:41:dd:36:20:ac:11:b4:2f:
51:bd:91:90:cd:ca:1f:27:a5:7a:7e:41:a1:9d:c7:4c:b6:b5:
ee:7d:de:ff:24:73:02:7c:18:86:49:bd:8e:f4:ad:4e:4d:24:
13:c8:bd:32:0d:62:0a:c0:ee:7b:6a:8c:be:48:7b:ba:d3:40:
d5:7a:32:ae:8d:e2:79:77:52:57:c3:1b:9c:58:6a:f7:3b:ff:
50:46:fd:8f:17:8d:33:0d:80:b0:10:78:6f:12:7b:4e:86:0a:
41:f4:90:05:87:13:ad:4a:93:c0:06:60:d8:dc:0f:1e:ee:e1:
34:fe:8c:0a:c1:c7:f6:17:1d:11:75:09:34:54:9d:16:1a:e2:
1d:99:dd:d8:d9:8b:de:e1:4d:52:9a:e9:ac:9c:5d:2d:e3:3f:
f9:a0:9f:14:39:23:9c:f0:8b:a1:29:90:85:cf:20:35:0f:36:
22:28:4b:aa:16:7c:be:bf:cc:27:bf:29:fc:32:ef:a3:7d:98:
68:2a:14:e5:48:7c:9a:c7:68:d7:dd:d3:ff:e3:f3:39:9e:50:
01:b6:48:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:42 2025 by rpki-client