Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6c5dc88-9dd8-336d-84cb-af97fe2d213e.roa
File: a6c5dc88-9dd8-336d-84cb-af97fe2d213e.roa (raw, json)
Hash identifier: 0iHIdOGpiUK2RNzsTuMKkLBrRqTrX9vOWZLeRdWbXqc=
Subject key identifier: EE:69:F2:E7:A9:32:AF:CB:30:FE:0A:DF:D8:48:3F:73:30:A2:37:97
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848BD20E1799A1BC8F99A71C940
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6c5dc88-9dd8-336d-84cb-af97fe2d213e.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 53356
IP address blocks: 172.111.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e1:79:9a:1b:c8:f9:9a:71:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=009b99ec-338c-4a7d-bdcb-8e5732513eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:c3:e2:cf:38:57:45:da:62:b5:32:9c:6f:
3d:bf:19:a8:a8:ee:bf:8c:a4:2f:c3:e7:92:80:d5:
3f:f7:35:ee:f7:0a:ac:c3:9b:48:e7:6d:91:ed:c0:
ae:7f:01:57:46:1b:b4:cc:1a:2b:33:b6:cd:1d:ed:
7f:2b:9e:41:7b:48:55:f1:1c:0a:ce:f2:26:75:ac:
49:1a:2d:e4:cb:f0:cd:96:14:dc:5c:d3:01:30:92:
39:7c:e6:94:e7:0c:cc:ec:0d:23:72:9f:00:fe:c7:
91:35:58:90:ad:02:b6:21:aa:a1:67:72:38:04:9a:
b6:9b:42:66:fa:42:33:ee:71:0d:50:ec:9b:fd:4d:
fe:7d:d4:83:32:99:e2:f0:24:b4:2e:15:a5:06:90:
ed:ce:3c:30:79:db:c5:a3:29:9a:fb:58:d4:03:1d:
a6:13:49:9d:35:c8:08:1b:94:a4:2c:cc:a9:83:e3:
a5:a5:36:46:7a:01:cc:3f:f3:e6:be:f9:ec:39:5b:
e2:ed:dd:21:0f:80:0a:bd:f6:c8:0e:8a:c1:df:9c:
9c:1d:62:9d:58:5d:3d:3d:22:35:d5:e3:a5:22:ba:
39:cc:7e:6c:14:bc:58:28:94:09:bd:1b:73:3c:20:
53:0c:c3:8e:e5:5f:a9:01:0f:31:4d:eb:05:8c:62:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:F2:E7:A9:32:AF:CB:30:FE:0A:DF:D8:48:3F:73:30:A2:37:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a6c5dc88-9dd8-336d-84cb-af97fe2d213e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:3b:7d:15:46:5f:a2:d8:a8:e7:8b:0c:02:e6:ca:55:bf:92:
95:4d:07:2f:4a:90:85:4f:0a:86:13:ef:91:f1:5b:87:9c:f3:
2d:cf:d9:68:16:8f:2c:81:87:d8:16:39:cb:ca:9b:0e:ea:85:
6d:64:a9:84:79:bd:e2:a4:76:d1:d2:00:e3:bc:3f:10:2a:3a:
6e:17:83:ab:23:39:89:94:43:de:95:60:60:2d:b0:19:6e:0e:
e8:70:db:4c:e0:f9:2e:47:13:39:c2:13:56:36:38:cb:b2:46:
28:cd:ce:b2:88:43:32:76:04:c4:b0:dd:2c:00:d1:13:a5:af:
e1:81:b7:06:e7:a7:1b:67:dd:6f:a2:86:41:b3:ed:ac:d3:bd:
20:5a:84:73:71:59:c4:84:30:a5:78:7b:51:7d:78:ed:62:11:
22:fb:eb:1b:63:96:a7:1e:3b:62:33:75:83:a2:a1:73:d9:48:
65:25:89:ed:24:77:bd:f7:66:b9:79:0e:71:3b:2f:b6:98:cc:
4e:27:e9:cb:42:b2:db:26:fd:96:ca:f9:37:e2:a5:c3:44:21:
e3:3e:df:cf:92:bc:6a:55:0d:df:1f:1b:0d:34:5e:57:b3:68:
81:06:0c:8d:ec:0b:ac:8b:a1:22:04:81:a6:de:90:3b:10:0b:
9c:1d:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:25 2025 by rpki-client