Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa
File: fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa (raw, json)
Hash identifier: lk3sJfqGg3MpjIOxucb2O8VLhSGq6AckkDf5TeKtY2c=
Subject key identifier: C2:14:CF:42:5F:CE:9A:F3:0B:0E:55:B0:A6:5B:48:76:F1:91:D2:17
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584827C54903955AF39C58419080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 3223
IP address blocks: 172.94.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:49:03:95:5a:f3:9c:58:41:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=2cef8631-156a-4044-b5d7-3e616743a1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:7d:c8:26:a1:31:01:cf:7e:dd:a3:fc:52:
61:07:d8:b1:e8:79:da:87:1b:23:77:4e:2e:84:79:
45:fe:de:5e:48:cd:56:e2:07:56:b3:bf:f5:f4:69:
c0:cd:b0:c2:20:25:3e:e8:26:bf:7b:6e:26:9a:fb:
38:a3:15:f8:31:20:ef:97:30:80:88:e5:c3:77:5c:
a4:cc:aa:b1:5e:7c:99:8e:9e:d1:a6:3a:84:1b:45:
5d:7d:49:cd:44:4e:ce:b0:65:e7:71:8e:c0:34:c5:
ea:9b:ac:0a:09:74:6a:b6:90:f6:f7:3b:4b:30:5a:
24:ea:76:6e:a8:cb:05:48:f1:89:ec:eb:e3:2f:54:
26:da:c9:86:7d:0a:1d:06:30:f5:d9:b2:94:f3:0d:
86:d6:77:74:bb:a7:0c:26:38:1f:61:ac:ac:ae:54:
51:a4:f0:4f:41:c4:9a:5c:8e:25:32:01:f7:c3:4c:
6d:fa:33:a7:c9:29:db:f5:94:13:d2:23:d4:bf:0b:
6f:6b:36:23:4d:28:d5:1d:c0:a2:70:84:bd:3d:56:
e2:52:1b:e5:c7:30:80:3b:15:fe:8e:86:72:84:ea:
40:f9:94:73:05:6f:68:3d:0e:55:fe:f4:8e:81:78:
db:77:73:1e:7f:92:2d:2a:5c:4e:9f:72:70:41:b8:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:CF:42:5F:CE:9A:F3:0B:0E:55:B0:A6:5B:48:76:F1:91:D2:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:be:07:02:8b:19:95:5a:77:55:4d:d9:00:9f:11:ce:f5:80:
b6:26:4e:39:87:62:9e:6a:29:3f:a5:00:50:9f:db:9b:73:3c:
54:5a:79:94:36:3b:aa:82:84:e7:37:5f:a8:47:c2:ec:23:e0:
82:02:dc:c3:12:02:90:a0:b2:49:5a:85:b8:c3:2b:e9:90:16:
b3:7f:e0:70:de:bf:23:d2:69:ff:42:e3:bf:38:cf:36:f3:44:
52:8c:3f:d4:ed:c3:8a:80:47:9f:e1:80:55:f4:a1:ec:67:d8:
40:a9:ad:9c:58:05:a3:70:b4:f9:83:77:5b:97:fc:31:d9:a5:
74:f1:47:ac:37:95:fd:ad:02:79:bc:ca:11:82:b9:62:b8:b6:
e7:77:14:bf:7d:f9:30:a3:b8:bc:94:7d:69:fd:dc:7a:5a:aa:
19:13:b7:06:a3:e9:92:ff:c2:fa:75:08:0e:2a:93:25:79:45:
b7:1a:0f:f6:bd:30:a4:fb:15:e1:62:39:eb:47:33:0f:62:ad:
a3:1a:83:ed:32:88:5d:f3:0a:51:17:3a:9e:de:e8:77:a2:5e:
bb:fa:af:0b:48:2f:49:dc:95:44:ba:6e:b5:56:d0:00:79:14:
98:a0:fe:50:1e:4b:ce:62:68:9b:94:80:3f:c7:06:b4:1f:fd:
69:32:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:12 2025 by rpki-client