Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json)
Hash identifier: x8VVoAiMyfGKCBv7F7rx/xWRzodme2al8UIC7oO+Rys=
Subject key identifier: 87:9B:14:F9:EB:64:9A:10:B3:01:A2:B8:11:AC:4D:5D:68:0B:CF:4E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E8666077BD372338AA70E900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 9009
IP address blocks: 172.111.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:60:77:bd:37:23:38:aa:70:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=99c402f5-ea76-4b4f-a5f1-f4a047012c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:52:8e:9f:9a:45:5c:9a:7a:f5:e9:99:67:
69:9f:64:c5:06:b4:2b:6a:a7:52:ca:91:2c:e6:24:
45:e0:f3:55:f5:18:85:3c:6f:be:7b:ae:a4:1b:bf:
f0:68:be:82:c5:ef:e6:f2:35:ef:77:64:1f:f7:4a:
82:5c:7c:50:8a:7f:6f:16:91:48:53:10:46:94:46:
26:9c:99:c1:c0:3c:cf:4d:af:1f:d0:c7:1d:36:5e:
78:22:1a:de:e7:3c:c9:a1:ce:73:97:93:4d:8b:a0:
08:b1:d0:84:96:7b:c4:63:fd:62:f0:57:e6:63:71:
5b:21:71:44:a7:1e:54:de:fd:d8:fe:0a:3f:a5:ee:
f3:ab:06:42:69:82:5b:dd:35:74:f1:ff:40:e9:32:
d4:07:66:29:8f:73:1c:ba:bd:3a:56:83:63:6b:23:
88:54:ac:7f:51:64:31:c0:bc:e5:a8:af:00:e1:21:
a9:45:94:63:92:31:f1:07:8a:7d:8a:45:4b:8e:0e:
53:7d:60:86:43:4e:23:79:a4:ce:55:08:99:2c:d8:
91:a1:4d:38:cb:b2:4d:71:c8:12:52:76:48:35:3e:
16:62:0f:fc:f5:4b:c2:3d:08:e8:5e:1d:46:b3:fc:
c1:bd:17:0a:4e:a6:9e:2d:96:a4:fd:bc:2b:ba:b5:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:14:F9:EB:64:9A:10:B3:01:A2:B8:11:AC:4D:5D:68:0B:CF:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c3:ca:08:e8:18:59:0f:cf:72:04:14:70:59:27:97:c1:1d:
0f:4e:5b:b5:c0:89:d3:3d:f3:78:2f:b3:9b:dd:b5:21:0e:d1:
dc:a2:1c:e2:47:a5:6d:f9:c3:f8:33:10:cd:3e:c8:81:cc:70:
74:11:6c:56:65:6e:bf:f2:11:3d:fc:c4:bc:42:40:5a:44:9a:
4c:76:b0:13:f3:fe:94:59:96:c8:16:51:20:5b:4c:1c:46:8c:
35:ce:bc:ef:e4:15:8b:9f:2d:11:e1:38:e4:40:42:11:2b:8f:
c9:88:37:2f:b4:ee:8e:8a:fa:c5:b2:29:9d:f7:d1:af:26:ce:
e4:da:ec:c1:88:f0:0d:25:29:a1:f4:7c:a0:95:33:f2:d0:d6:
81:98:1c:96:dd:d6:10:dc:d5:02:c2:ac:47:c7:be:4a:6f:ad:
c6:c9:40:02:fe:dc:71:ec:97:6a:61:26:a4:78:69:b6:4f:c3:
ff:57:d2:3f:93:11:5f:76:d1:ee:af:7c:57:9f:1e:60:cc:a3:
d5:b5:6a:7c:e2:63:95:d9:d5:af:c7:a8:89:5a:f3:10:8d:96:
a6:4c:34:21:bd:6f:16:52:25:a4:6e:b7:cd:1d:48:0e:27:db:
d3:3a:f6:b8:55:a9:3d:18:ba:e5:b2:5b:6b:40:7d:12:f4:d4:
20:1d:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:08 2025 by rpki-client