Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
File: 0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa (raw, json)
Hash identifier: y+iee9ETx3OD7YH3LIHcX5Orp8DYLdmoRViuDMZS0Gk=
Subject key identifier: 56:53:34:82:E4:96:90:AC:04:3E:A2:6B:3E:56:6D:2A:99:01:8F:D6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584900216DEC00490409E20EFDF0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.111.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:6d:ec:00:49:04:09:e2:0e:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=4c3bcc8c-d93d-41b5-a11e-34d2eaa66e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:8f:e7:22:eb:1b:b9:5e:41:dc:8e:3b:b0:
33:b6:71:0e:6f:12:40:6e:b6:9e:df:b3:6b:68:41:
85:cd:f8:42:86:29:4c:41:c6:e3:4b:0d:67:97:1a:
3a:bd:da:44:3a:ba:c0:65:92:5d:e3:98:73:a3:ac:
53:b4:dd:c5:e9:d7:a6:59:a0:a2:e4:55:b2:79:fe:
24:96:f3:fc:81:25:6c:d5:46:15:41:6f:eb:3a:7f:
e1:86:ee:74:5e:3a:e3:c4:3f:f7:fa:32:0d:e7:1b:
12:00:bb:e6:e1:76:85:22:84:fe:32:14:81:ca:86:
28:80:dc:8c:05:0b:b5:7b:14:8d:cc:4c:68:38:c5:
45:5e:51:8d:99:b7:cd:39:c4:c2:2e:f0:21:ed:cf:
ae:f3:7d:e3:dd:5a:9c:57:eb:05:87:92:97:da:0b:
ff:3c:29:be:47:b2:2d:91:21:fb:f0:d9:5d:5b:38:
2e:8b:6f:b2:13:74:57:4c:84:e7:3d:6e:0a:d3:5e:
d3:b0:ee:48:ef:37:e2:cc:3f:75:9c:d4:95:ec:de:
a7:31:6d:6c:9a:1e:a1:25:5b:4c:0a:16:b6:4b:2b:
12:43:8c:8e:13:0f:6b:3f:7e:d3:0f:4a:e7:b5:b5:
b6:dc:0a:9f:97:63:05:87:45:59:15:bc:01:48:2a:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:34:82:E4:96:90:AC:04:3E:A2:6B:3E:56:6D:2A:99:01:8F:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:a8:db:eb:a7:1a:a1:bc:10:1a:13:05:76:62:88:ab:97:a5:
fe:31:2b:03:fc:ce:3c:c9:9d:52:ca:d7:45:39:b7:b8:83:16:
81:03:f7:17:ff:a5:28:4a:70:dc:33:d8:f6:31:a4:b0:d6:da:
f9:89:97:d9:2f:52:48:9e:8b:b1:c1:d5:f2:76:5b:1d:b5:f0:
aa:1c:82:31:11:44:5a:e6:b0:c2:71:ed:a5:b1:a2:70:c1:42:
21:93:7e:8b:f8:b5:e6:aa:44:ae:46:d4:a1:1c:d7:d5:24:89:
a1:91:cb:31:e1:fa:06:96:00:c3:6d:59:3b:8e:41:2f:6c:55:
11:4e:ee:6d:6d:a7:d7:02:2f:a1:c7:ae:21:b5:29:ad:f5:e6:
57:21:a0:3b:c2:40:80:c1:35:5d:3c:21:60:26:23:f1:2d:47:
c5:0f:d3:40:ec:b6:21:e5:55:ad:e8:4e:74:6e:5e:1f:ee:75:
d2:9f:83:00:52:e8:a8:36:a8:62:0a:0d:91:a7:53:2c:79:b7:
d7:e3:6e:49:e2:2e:6e:59:41:37:c9:d6:fb:f6:36:a7:54:42:
0a:46:b5:10:6f:ea:e7:67:a8:59:18:d6:19:c2:8c:11:7a:f7:
75:8c:3a:60:7d:cf:bc:80:1a:16:6e:d9:15:4b:96:16:89:3a:
88:4c:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:20 2025 by rpki-client