Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa
File: 05ecd9f5-0c60-389e-a961-68db6277a2e8.roa (raw, json)
Hash identifier: BiwidZyfU1+3GaPh5Id0tghcdVGmuZRcd9Km6+6cJZk=
Subject key identifier: 59:3F:F2:31:80:3D:8B:B3:BB:15:E8:C8:55:76:ED:BC:A8:98:37:A2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BD20E078AA6C4DAED79FFF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.111.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e0:78:aa:6c:4d:ae:d7:9f:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=3ca6b722-15a0-4151-9247-8889b7081920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:61:18:76:9e:f6:39:94:37:b1:c5:0c:b1:
15:8b:1d:d6:a3:e7:2d:ab:55:19:e3:5a:8c:4a:34:
ad:1d:f9:01:ae:ce:48:e2:fa:a1:ab:69:cb:e2:49:
bd:f8:6d:53:05:d7:38:c2:e6:d1:2a:eb:1e:19:20:
a6:df:81:dc:a6:4b:0c:a1:8e:9a:04:f9:05:24:9c:
61:03:1b:a3:dc:69:df:25:aa:8e:28:0b:e6:38:73:
37:24:6b:13:c7:8f:dc:d2:9d:9f:13:9c:5b:0e:f7:
04:06:1b:ee:d7:f1:36:3c:ac:29:23:b3:e6:72:26:
80:73:96:c9:03:02:b5:13:61:68:9a:24:52:62:61:
44:7e:18:86:49:81:59:be:27:99:7c:3f:fc:d0:60:
a0:e3:4c:5d:1b:85:85:00:ac:86:c2:de:e8:3a:90:
3d:d6:de:b2:5b:ea:c1:72:7b:56:ee:b2:7f:3e:2c:
0e:58:af:bb:13:d0:4e:00:d8:82:42:98:99:54:5f:
56:7b:ad:5f:7b:d5:bb:df:e2:7f:08:76:6f:a7:4a:
09:d6:ab:8e:99:90:df:87:ae:a7:e8:d6:7d:7c:c6:
9f:b8:14:c4:82:8b:ae:5d:df:c0:09:40:5f:db:74:
b2:d0:42:e1:37:74:d2:d9:7e:a3:c8:37:72:2b:fb:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:F2:31:80:3D:8B:B3:BB:15:E8:C8:55:76:ED:BC:A8:98:37:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2e:7a:a6:62:58:3d:93:09:83:d2:9d:d9:27:d0:71:89:49:
d2:9e:a4:4e:11:db:54:26:da:68:00:69:ce:60:78:3f:6e:75:
e5:37:92:d8:c0:da:e2:26:78:7e:0b:24:3b:a5:11:6c:01:18:
8b:53:c2:fb:48:9d:e0:93:50:34:a2:72:b3:f4:50:6b:a8:5e:
fc:30:6d:ce:2f:b8:64:47:cc:b8:93:99:70:91:a1:39:82:84:
ff:3f:d1:07:42:fc:3c:46:17:38:ad:56:f2:23:e7:c6:c9:a0:
15:7a:b0:37:03:ec:54:88:a2:40:bc:70:2c:aa:69:ae:5c:db:
0f:d2:ca:b7:0c:de:3c:7b:66:aa:e4:18:34:76:5f:31:81:d5:
3c:d3:9d:a0:64:df:4f:67:4f:8d:0c:c1:58:f6:f2:18:93:fc:
54:35:09:2e:b1:39:d3:54:c7:35:51:e3:4b:22:41:3c:fb:7c:
16:55:ab:f2:21:80:2b:2c:30:84:81:98:ce:a1:8d:84:f4:57:
14:53:51:fa:ba:a8:9e:03:0f:8b:ef:79:70:1d:ca:89:95:9a:
75:6b:27:af:50:bd:14:5e:d8:2f:32:da:e1:33:ad:66:8e:40:
ba:d7:0b:6e:40:be:ac:c2:0b:2f:55:f1:c9:00:48:1f:e7:44:
81:c4:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:21 2025 by rpki-client