Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c59a5690-f9c5-3347-b765-228ee02a90b6.roa
File: c59a5690-f9c5-3347-b765-228ee02a90b6.roa (raw, json)
Hash identifier: 5q//m1oObixjTrxteJenacXIGiG3b8nkLRdUH3vYqx8=
Subject key identifier: 27:B4:C7:65:76:AA:87:D0:56:EA:94:B5:9A:C1:B2:FE:07:59:2E:60
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FF9BAB80D5653003721A84D0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c59a5690-f9c5-3347-b765-228ee02a90b6.roa
Signing time: Tue 25 Feb 2025 09:31:40 +0000
ROA not before: Tue 25 Feb 2025 09:31:40 +0000
ROA not after: Mon 26 May 2025 08:31:40 +0000
asID: 329007
IP address blocks: 172.111.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:9b:ab:80:d5:65:30:03:72:1a:84:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 09:31:40 2025 GMT
Not After : May 26 08:31:40 2025 GMT
Subject: CN=9a2b9b73-1c91-464e-a5c7-cc9d3aeca09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:a2:2f:55:fa:71:21:c4:54:d6:a4:2b:ef:
f8:86:c4:30:86:e9:a2:1a:01:cb:06:e6:ff:be:ca:
b5:b4:57:97:29:ba:32:0f:e4:e7:08:82:f0:0b:65:
14:dc:1c:ed:9c:d5:24:88:9d:2a:95:c7:71:9c:78:
fe:e7:d2:43:86:83:e1:3b:0c:1b:a7:ab:26:ea:18:
67:91:43:9f:96:6e:f6:9a:91:d0:bd:ab:3c:b8:1f:
54:bf:96:58:45:5d:7e:61:0a:b5:ee:79:74:93:ad:
32:c8:47:ae:ce:b5:94:5d:8c:aa:44:47:79:7a:b7:
69:aa:90:e2:25:bb:09:95:bc:08:54:28:5d:bf:ca:
08:ab:0b:e1:fa:5c:04:30:96:e3:03:1d:7b:02:73:
0b:ec:ef:f7:6e:f0:03:76:05:9c:f9:6a:19:8b:a1:
3e:79:8f:0a:3b:9e:df:77:da:4b:54:49:15:0f:00:
c9:c7:32:86:2f:f0:a5:e7:f8:98:85:25:c3:f0:53:
a4:29:ca:ea:e9:37:c8:89:e2:f3:de:f9:45:b1:85:
79:81:44:25:5e:96:84:82:09:05:c0:28:23:e0:b8:
a2:5e:5c:39:4e:6f:23:84:6d:2e:85:a3:e4:94:7f:
49:ac:06:a3:41:fd:8a:89:e5:a8:47:0a:df:c8:74:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:C7:65:76:AA:87:D0:56:EA:94:B5:9A:C1:B2:FE:07:59:2E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c59a5690-f9c5-3347-b765-228ee02a90b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:46:e4:d8:eb:f3:60:d0:5a:6c:74:c1:82:a7:7c:95:5f:72:
c4:dc:87:23:98:d0:66:b7:1f:e0:3a:b2:6b:68:0c:e8:3e:b6:
9a:06:21:8e:00:4c:e8:4e:4b:e1:c7:31:34:ff:00:b3:0c:5c:
c7:36:a2:43:ec:de:5e:22:53:4a:a9:01:a1:60:7d:e4:1b:1d:
76:34:7d:d3:bd:b6:a4:8f:d1:e7:48:67:7a:f7:08:dc:d7:08:
87:46:5a:e0:d1:79:db:a0:47:00:54:95:65:67:ac:12:8d:df:
a8:67:48:bd:61:37:59:74:3f:34:76:92:dd:49:39:4f:d8:90:
a8:94:47:a0:86:28:7c:bb:76:d1:17:7e:46:88:22:f3:29:2e:
47:5d:72:6f:58:91:23:e5:72:a6:7b:24:eb:55:d3:0d:86:fd:
5d:72:fb:3c:dc:20:33:b6:44:8e:ea:6f:de:80:12:9d:16:30:
de:a5:03:70:9e:d1:0f:fd:61:37:d0:c9:b1:91:2d:6d:4d:24:
c2:44:c3:f2:a1:92:36:30:e1:cf:1c:82:c1:1c:92:c7:59:b9:
4e:bf:08:a1:18:7e:84:45:15:b3:ae:8f:80:84:61:30:8f:c7:
dd:d8:0f:a3:6e:34:93:1b:c3:04:29:2d:a6:a8:23:4c:4b:bc:
79:74:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:15:00 2025 by rpki-client