Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c815853c-f8b7-32e0-a0bd-18e07b914b41.roa
File: c815853c-f8b7-32e0-a0bd-18e07b914b41.roa (raw, json)
Hash identifier: NiSni3wwtPVAeHZazgego1lkihoLXALpMoHkWW5ppVI=
Subject key identifier: 58:CB:4E:74:2A:E9:0A:B9:4F:6D:F1:6A:4E:90:6A:1B:11:6B:14:2F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494830404E64F61EBF8664D080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c815853c-f8b7-32e0-a0bd-18e07b914b41.roa
Signing time: Sun 23 Mar 2025 09:29:15 +0000
ROA not before: Sun 23 Mar 2025 09:29:15 +0000
ROA not after: Sat 21 Jun 2025 09:29:15 +0000
asID: 151106
IP address blocks: 172.111.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:48:30:40:4e:64:f6:1e:bf:86:64:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 23 09:29:15 2025 GMT
Not After : Jun 21 09:29:15 2025 GMT
Subject: CN=29806ea9-8237-4f49-9d6a-7a02fe480cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:d4:53:88:6a:f5:ab:3e:45:fa:f5:97:eb:
90:c2:24:aa:8f:49:8a:ec:1e:9e:3b:85:1f:61:81:
d7:c4:32:49:e0:ef:86:94:7b:eb:03:a2:82:27:c2:
b4:1d:8c:2f:bd:6e:5a:a4:ec:b9:4f:6e:32:aa:f0:
6f:95:de:aa:04:f2:83:80:5e:e4:44:11:9d:2c:fb:
1e:90:56:90:c7:af:0a:bd:c3:5f:6c:90:0e:37:4e:
4c:59:d8:b5:ec:43:88:7f:dd:c5:59:67:c4:5e:31:
f9:51:ad:ad:72:0d:f4:1c:a6:b1:88:f1:a9:cb:b3:
57:a7:1b:c1:23:a6:85:98:ff:d1:91:70:26:1b:dd:
ee:aa:42:f5:82:b5:c6:9e:da:49:25:68:54:ed:a6:
46:c8:dd:99:e7:6e:30:68:4b:96:aa:a4:01:33:e9:
af:54:e2:43:11:0a:ac:11:10:7e:fb:89:2d:a7:bc:
0a:61:ed:c2:dd:a8:91:c3:5b:33:21:32:cd:b9:36:
2d:fe:bf:88:c9:f3:ee:fa:5f:44:02:96:a4:7d:dc:
24:54:12:c2:e4:01:60:35:0e:29:b5:3e:e0:08:6f:
00:5c:18:f0:7e:9d:bd:e3:78:fe:23:52:06:74:f4:
d0:87:a5:c5:0a:33:9d:cf:90:ca:e8:b1:bd:73:69:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:4E:74:2A:E9:0A:B9:4F:6D:F1:6A:4E:90:6A:1B:11:6B:14:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c815853c-f8b7-32e0-a0bd-18e07b914b41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:1d:da:ea:8e:ff:3d:fe:8b:c0:d7:2e:fc:2c:df:30:40:92:
f0:ac:af:db:b8:c4:af:7d:72:d4:31:84:4b:6a:f1:7f:85:df:
33:a4:21:5a:55:83:62:bb:d5:25:2c:20:3d:3f:36:bd:dd:0e:
17:ff:cf:90:74:60:2f:ab:f0:64:5e:ea:38:1e:b3:5e:12:c3:
18:4d:ff:ae:63:b4:30:2c:86:d0:e7:d7:e5:1c:3a:aa:3a:28:
27:37:29:e5:79:1b:51:49:86:df:b1:17:6f:f8:19:2a:b6:7e:
2a:2a:7e:da:3a:d2:9f:fd:dc:1d:e0:60:92:7e:f9:4e:ac:4e:
3f:f4:ea:b6:04:e2:b8:40:59:89:e8:22:b2:fd:5c:42:44:4a:
ce:cd:e0:a4:84:e2:e4:e1:8c:90:c4:e2:ef:fc:e8:31:96:6a:
a2:a4:48:a6:b2:07:2f:90:dc:95:b7:f9:42:03:eb:71:b4:de:
d3:01:90:6f:a1:eb:2e:f7:23:86:43:0f:a0:38:9a:03:9d:2c:
2c:3c:82:ff:91:8e:aa:fa:35:3b:69:46:98:c4:4c:c1:b2:6d:
92:3f:1b:d1:e4:81:90:ee:47:b7:ba:b6:e2:c6:7b:8f:f0:b6:
58:3d:71:06:9a:fe:c6:de:92:5f:f2:70:8b:74:96:79:74:5c:
c9:15:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:29 2025 by rpki-client