Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa
File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json)
Hash identifier: 2EfqvcZHZMd7xvqtFHVv5V8e2MAwB594NyA1dXVz8bc=
Subject key identifier: 46:3F:AB:8C:CD:58:3C:FB:C7:91:9B:29:18:22:B0:5A:13:5C:A7:0D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D21138A3F05D187FFEA58900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 3223
IP address blocks: 172.111.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:38:a3:f0:5d:18:7f:fe:a5:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=67965470-5665-415d-bd5d-b7a90a45e40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:0a:95:e0:3a:db:95:7b:c0:c5:65:c6:27:
90:21:2d:0a:41:f2:39:96:4d:6e:7f:62:af:bd:f4:
67:63:bf:d9:9d:f4:b8:a8:c7:33:dd:0c:a3:12:4e:
9c:25:c2:b9:59:4b:e6:72:7e:21:91:c3:d4:26:ce:
e4:51:a0:6c:15:4b:36:ad:f7:64:c9:2f:01:1d:37:
f7:ac:73:d4:98:87:77:f0:8b:41:99:ba:2e:82:7b:
26:c6:ca:ae:84:21:c2:ef:d8:25:a0:9f:48:64:fc:
4d:53:fa:03:5e:4f:65:cc:2a:61:67:14:4f:62:bb:
a2:67:a3:f6:52:7d:46:2a:89:03:be:a9:b4:c8:d8:
26:3b:4d:0f:7b:56:11:ef:9b:61:5c:a4:b4:3f:02:
78:86:85:32:38:ec:36:1e:82:9a:83:f8:25:3b:26:
36:be:40:60:b3:c5:6e:27:e4:d7:93:45:07:6c:02:
15:7d:3a:bf:41:47:28:0d:f2:f8:df:fa:87:99:3d:
6b:fb:75:57:e5:ec:17:e1:11:0e:20:b1:aa:fb:e4:
bf:ab:c0:15:e3:2b:44:cc:56:cc:68:a6:ee:b3:2d:
5b:23:31:34:72:e1:eb:0d:e8:c9:71:55:93:29:e4:
0b:14:42:f4:a0:ce:b8:9c:32:ec:3e:ed:0d:a3:56:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3F:AB:8C:CD:58:3C:FB:C7:91:9B:29:18:22:B0:5A:13:5C:A7:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:5c:33:74:61:9a:0b:fd:23:05:1a:3a:c6:70:40:54:7b:cb:
8a:b0:e3:f8:fc:42:a1:1a:4e:98:52:7a:6a:a0:75:18:db:48:
20:2f:c9:1b:bb:c6:07:31:45:b6:10:60:fb:aa:48:87:12:58:
dd:04:e2:d4:7b:26:98:1b:b2:ac:57:16:79:ce:a1:37:f9:9b:
f3:f6:66:d5:b9:ce:6e:98:c9:55:81:84:21:f3:7a:b5:88:98:
dc:1a:ee:4d:5a:40:8b:4f:02:60:d8:e2:9b:0e:1d:de:f0:3c:
0d:9b:90:ec:b6:12:22:5a:1f:08:8f:98:f5:e2:89:4e:a7:43:
4e:df:0f:92:e4:ae:1a:01:97:0c:4e:32:45:24:20:58:59:8f:
22:47:fa:d3:0a:22:e5:67:1d:e2:9a:69:9a:a4:3e:55:47:0b:
9e:8f:9c:b8:c2:28:ec:4b:d9:0c:8e:56:ff:8a:93:09:fc:7a:
e3:9d:f2:6e:48:d1:88:28:f4:ca:1c:64:c3:5c:a4:36:a0:07:
73:da:32:0d:df:08:fa:03:83:20:87:99:12:9e:79:df:49:20:
18:c6:ee:7c:44:f8:ad:c3:0d:21:6a:25:e7:c4:bf:c8:82:f7:
cf:9c:b9:51:cd:71:1a:fe:6d:3b:b3:a5:7d:d4:70:9d:66:d9:
bd:70:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:28 2025 by rpki-client