Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
File: d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa (raw, json)
Hash identifier: P/uv2DnAKh+HHA6/wQeZBuO1Zutq//pnWQm4apa6Vzc=
Subject key identifier: CD:F3:24:0F:65:0B:5E:BB:04:E5:13:76:19:FE:FF:9A:23:E4:00:0B
Certificate issuer: /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial: 010D0C9F432858494039458676229D587E673F80
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 399686
IP address blocks: 172.111.0.0/22 maxlen: 24
172.111.0.0/24 maxlen: 24
172.111.1.0/24 maxlen: 24
172.111.2.0/24 maxlen: 24
172.111.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:45:86:76:22:9d:58:7e:67:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=31f8b28a-aa6b-457c-b2dc-3385dff8e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:b5:11:f7:07:d2:5d:5d:f8:9e:1c:46:2d:
fa:cd:df:c9:cd:cb:3a:0e:ad:b7:55:8a:29:69:78:
2a:fb:52:90:93:58:4f:6b:a4:8e:dc:d9:b8:66:0d:
51:6d:3c:db:15:9d:df:51:7b:f8:35:ad:1a:65:59:
0f:b5:8b:85:4d:66:65:d8:75:d8:5e:bb:3f:31:bd:
44:fb:1c:85:be:af:0f:9c:bd:49:73:06:73:5e:fa:
9f:ee:fc:ad:70:e1:a7:7b:ae:f7:b5:83:22:06:2b:
71:53:e9:da:fc:57:e9:8a:62:24:01:0c:84:24:8c:
4b:3c:21:5c:49:0d:6c:70:d1:83:18:a6:27:1b:aa:
56:a7:c8:e3:25:2e:0c:29:99:31:93:4f:5a:07:74:
27:39:67:5a:7a:6a:37:f3:7d:a9:b0:e3:c8:f2:09:
b4:42:1e:fd:53:2a:5e:67:82:46:76:63:47:2a:ff:
61:9c:5d:5f:ce:a5:2f:56:e1:84:34:27:6c:66:a0:
de:1c:1b:14:0a:d0:ab:b0:e0:4a:ce:7f:15:2f:a6:
5a:20:bb:e7:6b:6c:cb:e0:cc:a3:ba:f2:33:61:69:
8c:52:24:b1:47:a5:10:b4:e8:da:9b:48:02:7b:2c:
58:79:e6:9e:c9:9d:5c:7e:76:cd:a6:f2:0b:78:8a:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F3:24:0F:65:0B:5E:BB:04:E5:13:76:19:FE:FF:9A:23:E4:00:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
X509v3 Authority Key Identifier:
keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:43:14:97:18:f4:4a:4b:38:fb:f1:3d:1b:77:b5:06:64:2a:
80:ac:d1:2c:dc:77:46:71:95:3b:9b:4b:a1:93:a9:c2:73:68:
81:d8:48:85:d3:2c:d2:b7:e9:e8:06:71:c3:59:14:f3:47:db:
95:ea:f6:93:85:0a:c1:08:54:ff:95:3f:e3:96:9c:09:ad:4c:
ce:85:af:53:12:47:17:53:46:48:b8:6e:a1:68:75:1e:55:4a:
ca:e4:6c:b1:2a:40:c8:76:f7:a5:f6:b5:0f:43:b0:a1:f7:d7:
df:6d:3d:e4:bf:ca:87:b4:45:60:6d:d2:46:47:bf:60:7f:93:
11:02:58:68:79:be:23:67:14:bd:53:95:5e:e6:d4:aa:bf:68:
ef:f8:46:30:1b:7c:ce:ef:8e:39:55:a5:be:9d:46:55:8b:07:
b2:c9:02:a6:96:b7:36:70:48:f1:fd:e4:5b:71:8c:5c:f3:59:
23:2e:12:03:8d:d6:8f:6f:6f:2b:0e:ad:50:59:a8:f5:df:9a:
9c:76:27:18:cb:13:10:2b:ff:b4:c6:3c:e0:7a:ee:c0:1b:08:
79:c4:3a:76:1a:27:24:d4:93:1d:32:91:d1:58:2f:ae:9a:97:
5b:b6:2f:90:53:23:fc:da:a2:0b:40:d1:a0:35:94:1a:54:29:
9b:fb:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:49 2025 by rpki-client