Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa
File: e67216c6-fb7f-3d32-ace4-8f1870a41110.roa (raw, json)
Hash identifier: 8ADDlLaUlx8YIusLAkETuT6rN4AfjTQTcU5AEQO78JM=
Subject key identifier: 52:83:99:26:A8:F5:D4:90:29:43:E7:BD:85:B6:F1:5D:4F:EC:B2:F6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584807AA6E97C6B84DF0BFEF0C80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 45671
IP address blocks: 172.94.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:6e:97:c6:b8:4d:f0:bf:ef:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=afa44870-0473-4b0d-a1ff-b8fac054645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:5c:e2:94:d6:10:60:a6:95:d5:4d:2d:bc:
08:80:a1:0e:77:29:d9:58:a1:b0:dd:f5:01:e1:94:
de:e3:5a:64:7a:7d:ad:97:85:12:2a:0b:15:61:5a:
f2:2e:56:00:61:5c:64:a3:33:64:24:3d:eb:3a:0f:
12:f9:df:61:4e:37:03:41:6f:06:3a:f2:29:2b:f3:
84:af:b9:60:4a:f5:f0:a5:91:79:72:b2:bc:d0:1a:
9d:d3:76:5b:1c:e1:8d:e7:a1:62:9d:98:7a:c3:89:
fb:a7:31:06:66:ef:5c:01:75:ef:14:b1:9b:48:c3:
11:ef:c5:b7:c7:f3:3e:d4:63:ba:c3:3d:9e:6d:eb:
17:16:38:48:24:6d:fd:f8:c2:07:c9:d8:18:14:74:
bf:19:dc:81:35:05:0f:8d:07:b7:3a:78:65:e4:a0:
eb:1e:64:ba:30:c0:b9:a1:f2:73:88:8a:c4:ed:42:
69:d3:3c:bf:59:5b:4d:d9:ac:21:19:10:89:8c:32:
fe:93:52:84:0a:af:ef:30:f7:7f:2d:0a:eb:b6:d8:
a9:0e:73:04:dd:c2:fe:ae:22:fc:22:38:fc:2c:c4:
59:00:eb:34:1f:71:5a:7a:19:8d:89:50:4d:92:93:
31:4f:f7:39:37:2a:4e:a9:b2:ab:a2:25:dc:a5:d0:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:99:26:A8:F5:D4:90:29:43:E7:BD:85:B6:F1:5D:4F:EC:B2:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:4d:f1:58:e0:a8:bc:83:3c:4d:c1:01:8e:b3:e7:48:0e:62:
97:0a:3b:d8:25:a1:25:1c:68:d2:56:13:f6:f8:f2:72:36:d4:
ab:cc:a7:18:ce:1d:63:f5:62:39:5e:23:d9:04:ba:b4:00:01:
c8:b4:cb:b6:a0:4f:2a:36:6a:70:d0:a3:66:58:c4:fe:7a:25:
cf:fd:0e:72:17:2c:6e:b4:ea:e7:cd:52:87:71:7d:26:16:cf:
be:b8:c0:d5:2a:43:94:d0:b7:3e:8e:7d:2d:2c:ad:b9:f8:9f:
65:29:ef:0a:1c:50:39:e5:4c:56:46:7e:cd:fb:c2:02:54:75:
eb:41:68:ae:8e:0e:42:4e:7c:1e:84:8d:33:63:19:de:36:a0:
92:58:ee:a4:59:da:d3:be:e9:e5:60:36:b0:f9:d6:b9:54:b7:
97:94:8b:e9:c1:4c:12:cd:02:d5:b0:b6:5e:07:bc:e8:44:a8:
38:83:ae:76:b0:a0:50:bd:f1:e2:dc:ed:6e:69:c2:50:42:74:
6e:41:1e:75:d9:bc:8f:b5:59:4c:12:fc:9f:4b:18:2e:fc:73:
cb:53:fc:b7:5b:7f:e1:d6:0f:3d:02:68:0c:80:19:23:81:a9:
87:a5:37:ac:ab:0f:fd:9f:58:f0:12:db:ef:a8:ac:a9:e5:a6:
42:f2:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:07 2025 by rpki-client