Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json)
Hash identifier: 5vRv5EsD+DuFi4jS1x+HeqbNzvXk+JCJ0rqGGle267Y=
Subject key identifier: 35:4C:33:E8:36:EC:3D:2D:E9:86:DA:25:AD:87:BC:40:B3:FA:3E:2F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584929E3CD13C43805BC8D731200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.111.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cd:13:c4:38:05:bc:8d:73:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=5c1172ce-e812-4412-839c-6dfa17c34623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:ff:33:f0:b9:e6:40:91:e8:9d:c9:35:82:
61:8a:e9:80:6e:05:f0:ee:4d:26:88:e0:cb:6d:5d:
7e:c1:e9:a9:83:01:a8:65:a0:a4:35:4a:9f:a3:83:
df:85:a3:db:69:ee:53:ec:2c:58:42:91:6b:e4:a9:
d2:2f:49:9c:d2:d8:a8:4c:75:40:43:9e:7d:7e:50:
ca:3c:e6:2a:a5:63:16:93:b7:38:20:82:b8:5f:d6:
1f:24:08:da:e2:ee:eb:01:69:78:b1:7a:89:a6:b3:
a0:d9:85:36:2e:bc:6d:5a:9a:a5:ae:ab:c7:20:82:
18:79:b2:7c:17:5d:8f:17:d0:82:63:53:40:02:a4:
64:2f:2b:67:0a:df:4a:bf:06:19:17:aa:d5:c0:af:
68:d6:e8:52:30:56:f5:1d:26:5a:91:91:7d:d8:35:
aa:fc:89:f7:cb:08:54:ba:c8:57:c0:1a:7b:aa:c1:
70:46:d4:af:67:fc:1e:35:d4:2e:f0:40:75:cc:3e:
1d:98:c3:70:0f:36:3e:2b:37:de:8a:49:40:7e:2d:
36:bb:4c:0b:c4:bf:da:7c:7e:76:3c:97:9d:38:30:
b4:5b:aa:6d:2f:c2:73:9d:63:ae:9d:e5:04:04:ba:
7b:74:4d:99:b6:7f:0a:25:14:1f:88:6c:96:6e:10:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:33:E8:36:EC:3D:2D:E9:86:DA:25:AD:87:BC:40:B3:FA:3E:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5a:a5:81:09:d4:ba:51:ff:91:43:cd:65:7e:90:11:17:65:
df:7c:e4:4c:57:56:05:18:3a:7f:fc:bf:96:92:c1:16:9d:ba:
7f:ca:7b:42:63:f1:29:1e:7e:f1:15:aa:73:4e:5e:b3:60:57:
ba:81:3c:e1:9d:b6:0b:69:47:4c:46:ab:14:ee:60:7e:ff:05:
79:78:66:81:0d:5d:dd:af:03:32:fe:d5:ae:01:69:61:c8:19:
ae:0e:63:9e:fe:5a:60:ec:3f:a7:7d:b7:4f:84:bb:4a:94:3b:
62:51:e1:29:c1:9b:be:35:40:3a:2a:b9:31:a8:74:58:70:24:
94:c0:27:a6:e0:af:1b:f3:46:80:2d:4a:bb:7d:15:35:aa:c6:
6f:79:9a:c5:85:2b:10:1b:dd:30:ae:cd:b0:d1:8a:3b:92:40:
95:b6:07:34:ef:ee:21:ee:2f:3e:b7:49:75:ac:ab:7e:d5:ce:
29:6a:01:ca:77:89:01:ca:77:19:6b:f6:a8:39:18:11:b7:8c:
32:c4:6d:df:26:93:db:fe:07:f9:f6:87:a6:98:a8:18:63:58:
0e:41:64:b3:ef:95:1d:ce:22:e7:81:17:b3:d4:8d:3a:89:04:
b5:95:5f:26:b5:b6:80:00:b9:53:86:46:0d:8c:62:f1:70:c2:
d5:ab:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:33 2025 by rpki-client