Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa
File: 0e680e86-b486-313a-a154-53368267bd5d.roa (raw, json)
Hash identifier: FGCjzvPw+Ndx1q45ozKQNF++QI+8s6jxmlHfnicZOcI=
Subject key identifier: 77:81:67:7A:8B:88:E2:C6:01:06:12:DC:2C:FF:45:2B:A7:E5:05:EA
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848CDE100D18F87A414D9510280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 5065
IP address blocks: 172.111.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:00:d1:8f:87:a4:14:d9:51:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=a8754c1c-6041-4e3d-ace3-56c7e9ee4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:99:56:16:dc:d0:96:6b:2d:48:45:1a:84:
a9:a1:08:dd:06:7c:57:d4:9f:eb:8f:2f:d1:d5:ff:
0f:03:bd:e9:ac:8f:69:3a:5e:c9:fa:bb:e0:73:a5:
32:85:3d:b8:d1:e0:97:e4:b5:2b:5e:0d:8a:66:7c:
b8:55:6d:1f:84:63:7d:0f:63:45:22:72:5a:44:dc:
cb:c1:a5:3c:41:33:58:e1:78:24:7c:c4:e5:55:a2:
07:93:20:cf:a9:b3:30:9a:e9:46:6d:11:a6:7d:15:
23:d4:ae:7f:35:7a:d3:0a:9c:ea:17:7b:84:12:01:
6b:b0:32:6a:19:e0:95:ea:7d:0f:a9:0d:dd:22:a6:
7f:95:66:72:69:2d:c8:f0:0f:58:ad:48:0f:f7:b0:
b2:90:0b:39:d2:11:1f:99:21:ab:97:f2:67:5c:2e:
d7:03:02:3f:82:93:f4:6d:fd:0b:03:a3:67:4a:a1:
cc:3c:3e:dd:f3:d0:f6:0f:5b:60:8c:0d:05:f6:76:
9b:4a:2d:2c:a3:cd:c0:a1:20:1d:8d:c8:08:89:9c:
c9:89:2b:b7:d6:cc:4c:09:3a:eb:be:57:b3:8f:61:
89:3d:ae:59:02:8b:b9:1f:8a:e5:8a:41:fd:28:4b:
e2:56:74:41:06:6b:42:2a:05:94:78:d6:04:db:6a:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:67:7A:8B:88:E2:C6:01:06:12:DC:2C:FF:45:2B:A7:E5:05:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:38:b8:5b:90:94:d7:75:98:34:bc:eb:04:18:4f:d0:cc:23:
03:7c:a2:d8:a0:bc:7e:ac:79:49:e0:a2:27:c9:4e:6a:00:3c:
e9:16:ab:73:5a:0e:2d:4a:8d:f5:33:2c:06:d5:38:f9:f7:24:
9c:de:4b:61:80:88:74:35:64:c2:bd:94:19:6f:22:86:0f:70:
63:85:41:3b:e0:22:0d:0d:a6:cf:7d:be:bf:c5:ff:53:75:e3:
6a:b2:55:db:f1:1c:c6:99:fc:0d:7d:bf:2d:7b:89:4e:66:f8:
ec:38:4d:50:24:47:c1:0d:32:29:62:5e:d9:e9:37:02:da:d8:
8a:43:5b:29:a8:7a:6f:cd:81:b1:60:d5:4c:84:7c:8c:0d:31:
20:3f:e1:3c:ba:f6:bd:4b:13:9a:2c:ea:b7:ad:c7:a2:dc:f4:
98:e4:ad:33:b7:e3:b1:23:71:b4:91:b1:0b:93:f9:05:cc:95:
99:f2:91:ac:6f:cf:f7:04:62:9c:49:6d:bd:5b:6f:8d:f2:71:
09:99:84:d9:97:45:8e:09:09:79:cd:73:cb:56:73:23:b2:c7:
7b:e8:b7:b7:14:a1:18:3a:3c:4c:7f:e5:19:1e:f3:59:58:ad:
c0:ed:5e:9e:ab:51:79:ac:19:1c:1a:50:10:dd:7e:12:94:a8:
40:04:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:04 2025 by rpki-client