Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b52f774f-5f2b-333e-9c20-2373fe1c1b87.roa
File: b52f774f-5f2b-333e-9c20-2373fe1c1b87.roa (raw, json)
Hash identifier: oq38l7m08vAUUKJkrWbz6dICE85xZdNliFJsH3wgUzM=
Subject key identifier: 35:B5:D3:3A:1C:45:B6:12:12:DD:8C:1F:0A:D9:99:F0:71:A0:BA:E5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848422E965A5A135E2A2B525EAF
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b52f774f-5f2b-333e-9c20-2373fe1c1b87.roa
Signing time: Thu 19 Dec 2024 13:04:06 +0000
ROA not before: Thu 19 Dec 2024 13:04:06 +0000
ROA not after: Wed 19 Mar 2025 12:04:06 +0000
asID: 64267
IP address blocks: 172.111.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:2e:96:5a:5a:13:5e:2a:2b:52:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 19 13:04:06 2024 GMT
Not After : Mar 19 12:04:06 2025 GMT
Subject: CN=fa88158b-aafd-47ac-a200-e2e94976e03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:e8:99:df:52:21:18:b1:8c:95:ea:ae:bc:
b2:08:e5:76:99:00:84:8d:1b:ae:81:23:4b:a3:84:
00:df:55:89:12:36:a2:fe:c6:be:52:70:bf:73:9a:
a5:b5:59:a9:51:3f:1d:cd:bd:78:1e:e6:18:6f:ff:
19:03:7a:c0:c4:07:04:04:e5:c3:c8:b1:70:e3:25:
d8:8c:2d:99:9b:22:bf:78:c7:0e:24:fe:53:42:6d:
d2:35:e1:b6:72:38:45:4f:49:b6:11:92:55:10:9c:
40:1c:0d:c6:70:09:37:07:23:22:63:e2:de:44:24:
38:85:5e:71:91:38:9b:8b:0e:2d:9a:5b:b9:e4:6f:
ac:3d:c8:91:53:03:f5:9d:ae:b0:b9:89:fd:03:f4:
4b:ae:8e:6e:9b:68:77:25:5b:a9:50:da:9d:49:f8:
7c:85:ec:d5:b7:fc:72:3c:34:4b:67:5b:3f:f8:5e:
0c:27:7c:98:c2:7e:d7:9e:95:93:96:6a:6a:36:34:
ba:08:61:b5:be:79:cb:fe:07:e3:76:52:39:c3:fa:
1a:da:82:0e:e6:aa:60:f5:80:55:d9:91:da:1b:5b:
5f:d8:37:b6:33:2b:e6:6f:d3:2b:70:3a:77:a0:20:
19:e6:f8:bd:23:b1:c6:90:ba:3f:0e:09:e0:bb:5a:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:D3:3A:1C:45:B6:12:12:DD:8C:1F:0A:D9:99:F0:71:A0:BA:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b52f774f-5f2b-333e-9c20-2373fe1c1b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:b5:2d:81:1e:86:e9:ff:eb:19:1e:c3:8b:b3:57:cd:72:45:
ca:4c:4e:d3:6e:66:5f:3f:f2:2d:e8:04:d9:6b:56:30:77:75:
c8:2e:5c:5c:6c:d5:1b:ba:6a:39:39:21:9e:e8:bd:d5:3f:2f:
f1:1b:24:a1:61:c8:6e:98:fe:3b:5f:6c:e8:99:c4:56:18:17:
08:9f:9e:e2:6e:6e:cc:2f:a4:68:e4:02:8d:ad:e9:b9:1d:2b:
fd:f3:02:2a:2f:39:d1:c1:54:c5:96:65:4e:90:00:f7:eb:25:
57:89:ac:81:66:48:2d:ef:ac:50:e7:90:b3:f2:90:6f:d8:d7:
ac:3b:8e:07:ca:6e:88:42:9f:24:f7:b1:11:8f:0c:e4:32:82:
cb:33:d6:55:14:2f:d9:36:a7:71:1c:da:d3:33:4d:bd:07:f0:
55:21:55:e7:a7:36:47:80:f1:85:d9:9a:90:54:e9:c7:f4:66:
5c:4c:bc:07:0a:27:3e:7d:72:8f:80:51:da:63:4b:92:30:ae:
2f:37:f3:a6:b4:23:ec:ab:a5:1d:c1:66:c0:ba:c2:25:fb:1a:
8e:f7:eb:74:7a:23:0d:66:59:a1:f5:63:7f:95:fc:6d:5c:63:
56:77:36:9a:32:37:c3:c7:5d:cd:bd:91:09:3c:10:34:82:f6:
e9:9c:62:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:06 2025 by rpki-client