Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa
File: 59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa (raw, json)
Hash identifier: NnC7SNP+o31yLtoyZyRB9VMqo8VwJ2R4aEc00IoJ4dc=
Subject key identifier: A3:05:A7:CA:82:BA:07:85:E8:51:B8:97:DB:B8:97:19:32:28:3B:82
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E86660221B6D0A238434FA00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 45671
IP address blocks: 172.111.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:60:22:1b:6d:0a:23:84:34:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=6f267276-f507-4b5c-b645-000935e9a08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:f5:14:a4:86:1c:95:ca:01:fe:cc:29:96:
05:6b:67:5f:69:d5:13:78:62:18:36:5e:57:96:0d:
64:1d:88:4b:a5:08:a0:ee:87:2f:7e:64:ee:df:43:
63:17:1c:02:ee:58:b4:e3:6d:8a:c5:4e:77:7d:20:
04:e1:42:6d:39:0e:e9:67:ba:61:de:e2:17:54:cd:
17:f0:d3:64:d8:41:b8:0d:78:97:2b:28:eb:b9:6a:
cd:31:e9:93:23:2f:be:70:80:bc:cb:7d:5c:c9:b7:
2c:74:cf:f8:0e:05:a3:70:9c:6d:7a:2c:58:0c:06:
43:22:d8:29:c2:39:e9:62:bc:c8:13:b2:d6:6a:b0:
80:0a:16:92:10:3b:cf:8e:65:e6:8d:d3:45:48:08:
03:d4:5e:6d:78:0a:4c:1c:61:cf:5e:20:cd:a0:40:
f9:27:62:9c:7e:de:19:64:a4:97:43:71:ca:85:98:
38:50:a2:4d:4a:d7:f0:50:64:5e:cd:9c:26:2c:92:
d5:ba:3e:6e:b8:f5:6b:6f:64:ed:0f:a2:cd:49:fe:
c4:96:28:7a:b6:4a:14:43:52:e2:80:04:38:67:f2:
45:a2:fb:47:b8:2f:b7:1f:14:77:a0:f1:01:0d:1b:
04:42:87:8b:7d:98:88:54:28:55:df:bb:21:1e:a5:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:A7:CA:82:BA:07:85:E8:51:B8:97:DB:B8:97:19:32:28:3B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:23:a5:f5:a1:f3:b2:17:af:ec:16:a1:75:f4:85:bb:4d:84:
c3:c9:8e:3f:1b:85:73:72:2e:16:43:61:b3:a5:81:4d:a7:54:
38:9f:fa:f6:9b:14:79:94:8f:c0:cd:62:71:0b:c6:1a:16:f2:
84:fd:1a:55:b9:10:eb:c2:ba:0a:9f:a6:60:1d:eb:85:52:dc:
af:2a:77:68:b1:72:16:59:e6:00:23:e9:57:f9:39:ca:d8:12:
fb:91:c8:24:32:6e:68:f2:5e:2e:96:29:ee:cb:ff:e4:1e:22:
7e:14:9d:18:e1:db:fb:9a:25:d4:cb:7c:85:95:e6:b8:f2:23:
b9:14:d5:8f:64:60:0d:30:50:6f:7e:0a:24:41:da:2e:96:f2:
e9:c9:e8:48:ac:8f:97:a8:64:c4:26:2d:6d:fb:34:37:30:3d:
0e:62:1f:a4:aa:c8:39:d3:89:97:2d:ef:d6:e9:bc:5c:6e:26:
65:5a:cb:06:c8:bd:72:86:27:47:df:e8:02:3f:4e:c7:07:5b:
ac:81:2c:89:f1:d7:b9:19:91:ce:b1:7b:b7:42:27:9c:b9:81:
3b:55:63:2e:2c:bc:17:ce:99:07:0f:0d:c4:e4:de:ab:7c:e9:
ff:f6:d7:4d:06:10:e8:f3:6d:5a:d8:56:ab:09:13:98:b4:bd:
31:2b:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:50 2025 by rpki-client