Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a9bd5be-b4a5-3b7b-80da-61217a3025b9.roa
File: 2a9bd5be-b4a5-3b7b-80da-61217a3025b9.roa (raw, json)
Hash identifier: UMx79I05DHNvffA4lnnmXnnFsYcGgOrH4FoXMrno9QE=
Subject key identifier: 23:7A:1D:42:59:C7:97:B8:A8:AB:B3:18:D4:8B:3E:51:39:8F:80:54
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E8F0E18E993156FEDD27BB00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a9bd5be-b4a5-3b7b-80da-61217a3025b9.roa
Signing time: Mon 17 Feb 2025 06:39:46 +0000
ROA not before: Mon 17 Feb 2025 06:39:46 +0000
ROA not after: Sun 18 May 2025 05:39:46 +0000
asID: 213676
IP address blocks: 172.111.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:f0:e1:8e:99:31:56:fe:dd:27:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 06:39:46 2025 GMT
Not After : May 18 05:39:46 2025 GMT
Subject: CN=be1dc970-28d8-44df-afaa-27e278f9c2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:f2:6f:99:3b:0c:68:9d:f0:2c:ed:c5:80:
ab:46:95:9e:e1:6a:38:6e:f7:9d:54:02:28:4c:7a:
97:85:12:41:8f:b0:23:57:3b:d0:f0:25:05:bf:dd:
2c:f8:29:cd:e0:31:bd:62:d2:e6:22:93:a9:59:16:
a2:6d:b8:89:e0:02:f0:87:9a:fc:02:5d:b5:d5:aa:
cb:a5:e7:c1:e0:1d:26:61:34:14:90:7a:36:0e:8f:
be:1e:e8:1a:8e:07:ad:0b:a5:9f:cc:e1:55:06:53:
36:cd:75:51:66:33:c3:e5:bf:c8:0c:63:54:e2:cb:
a3:80:7e:a5:f8:f7:92:1b:17:82:34:db:e4:ae:90:
74:95:02:4d:a2:42:a9:5d:91:69:49:55:57:3c:1c:
63:2f:10:76:25:12:bd:52:04:7c:2b:d8:d6:ce:d3:
6e:fa:c6:68:b0:d2:70:30:a9:71:85:96:78:3c:fe:
bd:5c:7d:17:65:84:b4:f7:01:48:76:35:45:01:da:
71:82:cc:a5:1f:ff:f3:17:a1:e1:9e:aa:7b:e1:69:
e6:99:29:2b:27:37:cc:b7:4d:66:06:69:d3:d8:b5:
ed:ab:00:03:1a:88:be:52:ab:39:4f:80:7b:0c:b3:
fd:57:6a:0c:38:3f:a9:24:06:2c:bf:82:7c:34:99:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:1D:42:59:C7:97:B8:A8:AB:B3:18:D4:8B:3E:51:39:8F:80:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a9bd5be-b4a5-3b7b-80da-61217a3025b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:1d:ff:c7:4a:56:47:61:be:cc:de:10:17:f3:d1:ea:0e:50:
47:ce:c3:e4:95:0c:32:b4:74:73:7e:d3:ff:8e:86:4b:79:42:
62:7e:c6:aa:55:e4:c5:33:89:75:76:01:ad:f9:99:2d:71:9a:
25:a3:6e:49:3d:5f:6b:1a:41:8f:83:d2:73:ea:58:59:7c:89:
5d:34:4a:af:29:9a:7a:82:01:9d:5d:72:44:f8:34:94:c9:21:
65:d6:ca:8a:10:56:b7:2a:6e:0b:75:e2:f6:21:dd:4a:75:2a:
ef:31:58:ce:e3:e1:a8:c5:58:2e:f7:09:59:41:c3:48:50:bb:
08:03:87:af:77:6f:e4:4f:7b:21:7e:25:21:76:b2:10:65:59:
ef:47:47:98:55:9e:4c:45:de:b7:ae:04:28:b2:17:6c:b4:73:
ae:4b:ff:76:bf:91:1a:1c:b7:dd:fa:4a:b0:a2:c5:2d:3e:ea:
42:ee:b8:65:78:0a:0a:a4:a9:3f:89:e5:3e:37:ae:87:1a:94:
d8:de:6e:d8:f9:6e:ca:48:5d:61:24:ac:6d:bc:c0:fa:c4:2a:
cb:d7:43:54:ea:48:5a:85:41:ad:78:ce:91:df:7c:3d:8d:7c:
fe:17:88:2c:0e:98:35:da:10:da:aa:56:a8:af:3c:8f:2e:0b:
14:33:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:35:07 2025 by rpki-client