Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json)
Hash identifier: u7soy/Hi8XbKb2wiPU4czzgaCK06MCtPCga0tvddLmk=
Subject key identifier: 99:5F:F9:C1:90:B3:06:74:B6:79:77:DD:1B:51:D9:F5:40:B5:D7:6F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584944693D69BA312D3F7747BFA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 9009
IP address blocks: 172.111.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3d:69:ba:31:2d:3f:77:47:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=171df5bc-f17a-4947-b768-fecf16139c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:6a:98:d5:c6:c0:c5:c4:a6:ba:63:e7:28:
4d:03:80:af:d9:d4:54:75:e8:22:8f:f1:1e:87:f8:
a0:eb:f0:2d:4a:33:c3:61:c6:f7:af:3d:a2:9b:57:
4b:cb:7a:46:f0:54:da:ec:31:60:1b:78:70:5d:0e:
37:24:64:74:2f:43:9c:8e:c0:60:d7:03:0c:ab:3d:
e2:52:de:b8:bb:97:1f:1f:e8:bb:1c:d4:c2:56:4f:
63:d6:31:d6:4d:91:ad:43:91:3c:c6:29:15:ec:6b:
a0:9e:90:98:a9:cf:f1:6b:13:3f:09:7b:10:f7:22:
74:7b:e5:72:20:37:b1:70:85:c4:38:9f:f0:59:79:
69:c6:85:84:66:5d:45:e1:d0:d0:57:14:cf:1d:37:
21:18:6a:b3:9d:dc:50:9a:1c:6c:33:0a:61:d6:e0:
1f:df:4c:a1:dd:8e:8a:18:5b:e0:05:23:33:54:d0:
2d:ed:12:53:2a:cf:06:61:e8:e9:f3:38:46:48:af:
ef:88:ca:93:eb:b4:4a:cd:f4:cb:39:11:1c:47:c0:
b6:aa:d5:89:23:28:2e:0d:b5:bb:da:4b:7f:82:9b:
3b:8b:21:3e:12:af:39:2e:40:08:01:85:1e:44:87:
a0:2e:08:d8:c2:ab:1d:f2:f7:72:a9:0b:1f:04:99:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:F9:C1:90:B3:06:74:B6:79:77:DD:1B:51:D9:F5:40:B5:D7:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:43:de:9c:4a:d7:00:87:5b:7b:87:ad:e2:ac:d2:31:c0:f2:
19:50:a7:27:ee:ca:53:6c:19:65:d8:cb:33:85:12:42:9e:d0:
b8:dc:c5:f6:54:af:76:85:13:1d:dd:f8:7f:d9:75:a2:a6:52:
1b:66:d2:00:d5:14:8f:86:65:4e:84:8a:7f:d0:42:89:ec:fb:
97:74:80:8e:75:7c:f7:7b:7d:13:d8:6d:55:5b:ce:a7:15:c0:
6b:27:48:4b:ac:b9:36:2b:47:be:1c:07:3a:e0:47:a7:33:cf:
47:a7:f6:f7:f7:ce:17:8b:7e:85:0b:2a:4c:e0:7b:93:a7:5b:
c2:51:f3:de:82:46:35:0b:e0:5d:91:29:8e:87:9a:a1:ab:ed:
b9:2f:84:76:d3:ec:fb:b5:e0:07:21:b8:dc:f0:aa:e1:81:02:
5f:87:cb:8f:59:b4:f8:fd:48:69:7c:93:a0:66:59:95:4b:0c:
dc:a5:c2:43:2d:e5:bc:76:91:4d:f3:85:ff:3f:fe:42:82:03:
8e:60:ee:b4:c9:0d:2e:32:32:4e:d9:bb:4d:e1:d8:16:c9:e0:
bc:7d:4b:37:13:ed:c7:7b:fc:a3:94:a7:eb:25:04:08:d7:b6:
01:24:27:fa:c8:3e:c7:62:88:65:b6:b9:e6:46:01:35:9a:ee:
a3:59:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:44 2025 by rpki-client