Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json)
Hash identifier: V555Aooedhkxfn/3uXBxxhhK5lg+eHKkUboIULGtptw=
Subject key identifier: 5E:6A:70:73:97:2B:4D:BA:9A:DF:21:04:0A:DD:7F:0F:16:FB:D1:93
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584949FE95A2670A2CBFAC9B75C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 9009
IP address blocks: 172.111.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:95:a2:67:0a:2c:bf:ac:9b:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=d18f8619-5ec9-4deb-be93-9e3206d73ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:ed:43:2d:c3:5a:9e:bd:2f:b6:cf:0a:97:
38:6b:84:68:d8:47:46:07:0d:89:35:02:2c:96:94:
09:d2:49:c4:92:1d:be:69:d9:de:35:9d:4e:00:67:
9e:70:f5:22:0b:1b:37:2b:f9:64:75:46:15:ad:be:
95:cd:ba:4d:c8:a4:0c:c7:5e:bd:f9:42:d6:56:e4:
89:5f:07:c8:88:71:83:f4:2b:01:5d:3a:74:7d:9b:
cc:49:63:39:64:db:9a:2a:b3:fa:69:b9:91:6c:28:
ed:68:cc:92:ef:fc:5e:e9:b9:02:9e:d0:b0:cb:0e:
66:fb:27:dc:23:f9:7f:9e:f6:2a:b6:c1:14:27:70:
93:35:84:e9:82:cb:e3:06:1c:95:29:cf:0b:69:df:
57:13:3b:76:da:d6:92:bb:16:6b:f5:7a:da:e0:f5:
90:79:d5:ee:01:7d:80:f5:42:85:74:fb:46:56:42:
5d:57:e7:dc:bb:b8:d4:65:2c:8e:a9:0b:eb:e1:de:
13:57:60:df:09:9e:17:f8:13:4c:fc:cc:b2:c2:29:
51:54:ab:a7:0a:3a:1f:11:cf:6b:b1:6e:cd:52:68:
3e:11:fe:ea:90:15:17:33:55:e8:1e:1b:f8:7d:8b:
06:34:59:4b:50:ed:08:c1:87:e1:9d:72:9d:58:33:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6A:70:73:97:2B:4D:BA:9A:DF:21:04:0A:DD:7F:0F:16:FB:D1:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d2:3b:ee:b3:e3:2d:c5:7a:c2:db:92:9b:3d:5b:21:c9:28:
da:d6:b3:ae:c8:4c:c9:1d:46:bf:d9:35:39:a1:85:5b:17:e8:
89:7b:42:90:8f:59:91:a6:64:3b:42:8f:34:6c:55:37:61:17:
a4:67:93:bb:34:85:ba:64:e2:6f:8b:d1:35:64:b2:98:4c:a3:
77:53:de:79:72:0a:d2:d7:b3:c2:39:6c:af:a9:d1:48:7d:4a:
3b:07:91:58:0b:9a:dd:7a:be:d8:53:ba:31:00:5b:07:60:f5:
bd:da:4b:72:e0:49:38:6a:27:ae:9d:7b:da:64:65:9c:b0:d3:
66:be:a5:33:9b:83:2e:29:3c:1f:ac:65:ad:98:d3:03:03:43:
0a:3a:58:9e:9a:e8:7a:6f:3e:73:3b:db:ef:6d:da:97:8d:5f:
f5:a3:71:a2:9d:36:cf:c5:0f:aa:b9:10:90:ea:5a:30:8c:e8:
01:c6:4a:b2:f0:d8:89:b8:96:14:59:fa:6f:ce:43:58:1c:fd:
00:ec:0e:b8:02:8f:47:b9:fc:56:90:88:49:c3:e1:b4:b9:68:
59:fb:60:cb:44:9a:42:a7:4b:cd:30:b9:f7:a3:e4:92:1c:6a:
03:ab:3c:60:70:80:6d:1c:54:72:f3:65:6f:d1:e1:5f:4c:40:
29:43:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:07 2025 by rpki-client