Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
File: 2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa (raw, json)
Hash identifier: gsD/J8im7kEEjdDh+E4XUQBhtroJyxDZu34uqTs1ROM=
Subject key identifier: 43:85:81:9A:6E:E9:7D:2F:11:33:DB:38:CE:9B:E4:32:B9:21:50:52
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BD20E13885D8ECC6AD917028
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e1:38:85:d8:ec:c6:ad:91:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=0fbf0e4a-8728-4f85-a511-1ef33e9e2c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:66:07:19:5e:08:9c:cf:22:65:63:34:ce:
c5:80:ef:e3:09:88:2f:89:8b:b3:f5:b2:1b:2d:95:
c8:ed:11:31:c9:05:83:df:41:af:ad:2f:83:52:52:
27:eb:dd:95:4f:ce:ff:92:20:33:c0:76:a6:04:64:
79:88:4e:fc:4e:e5:77:d1:e2:b6:95:41:c8:ac:a6:
3d:61:bf:41:94:0b:d7:f1:49:72:08:72:2b:20:92:
86:04:6d:2c:f3:73:00:6c:a6:ff:65:53:5d:a6:b4:
d0:fd:36:ea:3f:7a:57:e2:ce:2e:7b:60:c3:fd:13:
7c:ab:47:5a:94:29:b5:94:9c:7a:1d:2a:42:9c:1c:
9a:ad:38:49:dc:07:df:3a:30:e3:d1:3b:46:fa:a9:
ac:81:f4:b4:c5:2b:32:b6:35:1f:a1:da:69:11:8e:
1a:fb:4b:04:48:8a:b0:e4:50:1e:28:56:99:c7:11:
2b:53:31:40:8d:07:d5:c1:74:0d:ec:0d:d0:af:df:
53:76:03:53:bc:06:c4:8f:8f:e3:96:9b:ec:46:b0:
76:97:fc:3c:b5:31:dd:10:7e:47:22:2b:b8:16:de:
0d:3d:4e:38:b3:8b:e7:90:74:14:37:80:98:85:37:
10:29:c8:0a:73:63:48:33:72:1d:a3:19:77:14:92:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:81:9A:6E:E9:7D:2F:11:33:DB:38:CE:9B:E4:32:B9:21:50:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:72:6d:f4:6e:fe:2c:58:d4:47:dd:1d:c8:98:67:1c:51:2d:
67:d2:86:66:31:82:88:25:cd:52:de:63:b1:dc:ec:e2:2f:97:
49:5d:fd:d5:bd:af:df:43:c7:74:1c:01:ea:0f:e7:1c:d3:e7:
47:a6:c7:e0:be:93:bc:62:d3:94:25:ab:57:3a:06:6f:7c:eb:
dd:48:55:30:a3:2d:5e:05:1c:89:e3:1e:79:08:97:03:eb:f9:
03:fe:1f:ed:da:bd:22:8e:87:d3:ef:fc:9d:e9:f7:a9:e1:d0:
6c:e8:4b:07:54:ef:8e:f3:c2:2a:2f:d0:af:aa:27:a0:09:17:
f6:ac:f1:16:1b:f6:72:e3:93:8e:75:0c:d1:88:0d:cd:24:bf:
98:18:66:05:60:f4:13:34:bf:c5:f8:6e:84:72:65:af:0e:74:
2e:48:ca:19:07:77:e7:3c:3a:82:a1:ed:b6:b4:93:57:a3:95:
2a:17:1f:9f:b4:6d:57:bb:c8:9f:c5:47:a6:e2:6f:79:90:c2:
42:5a:fb:4e:ea:bc:33:75:b6:ea:72:ec:f6:a8:06:1d:0f:1e:
4c:d3:0f:23:6b:0e:20:4f:ba:a5:fe:e8:5a:5a:fe:0f:ec:de:
13:3f:77:71:cb:bc:5e:84:a1:36:b3:5d:15:88:ca:a5:06:d6:
f2:6f:24:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:19 2025 by rpki-client