Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa
File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json)
Hash identifier: Uyq25gJFYEsC+VzPeH2LFO+UWiQ3gQfUD++EJgInJMQ=
Subject key identifier: 33:CE:47:E4:48:D4:1C:16:ED:30:9C:4E:BB:BA:15:F7:42:39:AB:F1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584944693C7429F9C07174F188C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 137409
IP address blocks: 172.111.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3c:74:29:f9:c0:71:74:f1:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=63ece672-ee79-4948-8bcb-21e4244a84e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:ce:79:69:74:f1:3a:8e:2a:46:02:ce:61:
e0:8b:1b:13:e0:ea:03:d8:54:54:15:c3:14:cd:b1:
9e:30:e3:cd:eb:6f:43:39:75:f9:d7:d4:37:21:13:
1e:2e:19:84:af:8e:62:5c:d6:c4:f5:d3:bf:b8:3e:
ad:78:7c:6f:5e:55:54:25:67:d9:2f:ad:57:eb:91:
ee:c2:83:51:b3:ec:2e:4d:11:01:42:e1:00:cd:d3:
ac:b0:3c:94:02:f0:35:0d:7f:55:75:b0:e1:62:50:
c5:ca:9f:ba:38:8d:bb:ff:8b:1b:fb:63:59:7f:9f:
67:1a:4d:a1:6b:55:61:af:e8:80:8c:31:71:1b:8b:
65:a8:fd:d6:8a:df:fd:79:4f:3e:5e:ba:25:1d:27:
10:92:33:13:0b:cb:3c:05:bb:ef:a1:fd:3d:cb:d0:
13:d6:e7:34:52:3a:38:6d:c4:d3:28:5b:82:69:cd:
c9:21:33:88:1b:cc:a8:f3:1e:b1:0c:30:dc:bb:08:
1e:e2:66:2a:3b:3d:66:7e:a9:f8:3c:c8:02:24:c8:
08:c6:e7:0a:21:8c:30:b9:6d:78:d4:e0:a6:eb:56:
9c:f1:ab:9d:fb:de:35:32:fb:fb:47:6e:e2:1f:8f:
b4:4a:e8:65:8a:08:e8:37:50:af:90:1c:1e:25:7d:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:47:E4:48:D4:1C:16:ED:30:9C:4E:BB:BA:15:F7:42:39:AB:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e1:57:64:47:1e:1e:5f:3e:fc:4e:76:c2:00:f5:18:5b:42:
95:fe:d3:06:99:59:02:8d:16:8a:ed:78:5b:a7:07:72:34:aa:
27:6d:0e:05:65:56:b4:db:21:f2:32:e6:47:11:d3:53:d6:0b:
c6:a7:fc:0f:3b:a2:fa:ed:65:54:d1:a6:e1:2d:1b:8c:be:c5:
37:ac:28:62:69:87:dc:1f:9c:54:a8:1d:70:6b:e1:e9:04:51:
43:a5:32:05:72:c4:ed:26:5e:27:d4:de:e5:fb:04:9e:de:67:
2a:9a:fd:ee:f2:32:02:4f:6f:d7:42:2f:ea:9e:09:ca:08:2d:
c9:c3:67:0e:b7:c0:41:33:42:6d:1e:8f:5d:09:95:59:80:74:
9f:3e:73:eb:12:34:38:b7:82:1e:ee:d2:40:53:45:49:fd:ce:
d0:1d:81:05:65:4f:47:09:a5:74:57:81:fb:25:76:23:5b:00:
82:21:71:6e:b6:1b:a3:15:8e:e8:01:0d:41:80:01:6a:42:3d:
1c:07:5c:40:54:65:e9:ff:4a:20:cf:ad:b7:df:ea:9c:93:ed:
d0:0b:93:9f:9b:de:ad:f4:8c:f7:7d:91:5d:20:1b:3c:03:d2:
01:60:11:18:0d:5f:f7:39:46:c1:dc:f5:d2:a6:85:cd:ef:28:
05:c5:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:38 2025 by rpki-client