Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa
File: 08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa (raw, json)
Hash identifier: tgzI9v1LFwXBNzlZY225kDBYGkUggeCroNld8V9C6EQ=
Subject key identifier: D8:EE:6B:DC:0D:03:0B:2C:A9:02:58:98:88:B7:B1:F1:C1:D5:57:D5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848CB16492481F8CAC62BDEAB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 172.111.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:49:24:81:f8:ca:c6:2b:de:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=95a80d98-94eb-4272-a5c1-aa826c234147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d7:a5:e1:41:1e:e3:fb:42:3a:82:01:a5:00:
cb:0b:3f:a1:50:e1:42:37:92:08:c3:ed:0a:3d:83:
f1:63:54:78:38:f1:02:03:fa:aa:40:07:37:bf:58:
ed:23:d2:36:87:6e:51:bf:25:f4:0b:3e:9d:b7:23:
44:55:9e:e4:f7:60:f7:8b:20:38:62:24:94:a0:3b:
c6:7a:52:48:b3:8d:ae:e3:ad:7a:01:76:7b:c6:af:
df:a3:8d:ba:1b:2c:2d:22:db:51:5c:2e:7c:13:f5:
5b:b3:ce:52:a6:31:f1:7a:8e:cb:e6:0c:ca:f2:2c:
12:33:10:17:98:c5:3f:98:75:e9:50:48:ca:2e:70:
86:62:a6:3b:f5:b1:8f:b1:bc:f3:13:4d:18:cc:a1:
fe:b3:ce:b9:fa:bc:37:9a:2f:f3:5d:a5:8a:b1:3d:
fa:5f:70:2d:92:a0:7d:e9:6c:0e:cf:57:c9:a6:da:
f3:63:5d:49:6f:1b:15:87:81:cb:a9:82:6d:1b:24:
4c:2d:80:99:a9:8c:c9:bc:99:45:13:a4:b2:81:d7:
aa:be:ee:7e:07:b8:50:60:14:78:4e:ed:b5:2d:38:
20:ff:a0:d0:9b:fd:82:11:ec:a9:38:4c:80:3f:9f:
aa:1d:47:78:ee:cc:5c:1d:36:59:68:dc:c2:75:4c:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:6B:DC:0D:03:0B:2C:A9:02:58:98:88:B7:B1:F1:C1:D5:57:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a1:3f:f3:bd:0f:f3:05:35:2d:21:a4:d7:1e:a7:72:8a:e2:
68:47:e7:8d:8b:e6:30:1c:5b:ac:69:91:87:26:fa:93:54:f3:
9a:ca:b1:36:0b:55:cc:58:5b:90:84:47:68:8f:18:22:ba:45:
c8:49:2c:b0:e4:bb:50:a4:56:43:2a:e6:a8:44:e4:68:b6:f7:
1d:3a:13:53:b5:f3:73:e7:cd:fc:8e:0f:31:70:97:36:e0:4f:
90:ba:a8:0c:eb:53:0c:83:45:76:a9:cb:25:5d:c7:a9:45:49:
2b:02:f1:7e:b4:2c:57:77:2e:a8:8d:6c:72:1d:ff:ed:3a:ca:
3f:79:cf:98:76:1a:fd:41:13:12:48:a9:f7:87:f2:c9:59:b2:
be:dc:3d:74:7d:13:75:8c:ef:8e:0a:25:ec:50:e1:e9:d4:b1:
c7:be:7c:1a:09:67:0a:f6:d3:9d:4e:7c:0b:2a:d6:ee:68:e5:
de:af:fc:dc:ec:33:3c:62:11:d0:f4:af:8d:0f:d3:ad:77:a8:
ca:f8:25:89:4b:2c:fb:5c:89:22:6d:9b:ee:77:1d:9e:38:6d:
4e:e3:93:b6:8d:66:3e:bf:8d:eb:ef:8e:bb:4f:36:dc:2a:6e:
f9:fe:e3:fb:7e:32:22:67:84:c9:0b:96:da:df:94:b1:09:02:
49:e9:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:35 2025 by rpki-client