Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa
File: f135a6c0-f413-3403-8690-6cddb169d2cb.roa (raw, json)
Hash identifier: vDFtsd4Iuj8+78/b1JRLMxigvl0xNY+VsHGITZ85DTY=
Subject key identifier: A6:A7:80:16:94:40:6C:48:6A:C9:53:BA:0E:F7:6C:B8:21:CE:29:77
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584902EC10458A0FC4141B414FC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 3223
IP address blocks: 172.111.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:10:45:8a:0f:c4:14:1b:41:4f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=0a258ffc-4820-4bc1-88ac-7a95288bda1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:b4:13:c0:f1:d4:67:fd:71:27:f7:99:b6:
8c:a5:ef:ca:75:f5:43:99:a6:ae:cc:52:8e:24:13:
7a:ef:74:36:1c:f2:3b:e1:d5:42:f5:7f:71:ae:a3:
3e:41:ca:82:85:6d:4a:94:16:d5:92:3b:fd:8b:71:
35:b3:9b:b6:93:36:21:da:07:09:de:5a:11:1b:fe:
77:83:c2:4b:7f:dd:cb:26:50:72:9f:43:87:1f:f9:
b0:d2:24:0e:3b:7f:50:1f:3b:8d:3a:68:9f:57:37:
27:0a:07:ca:ab:d6:59:53:ca:ec:4c:c1:b8:f9:a3:
f5:b2:cd:8f:a2:62:e3:71:f6:90:6b:f9:be:96:d1:
02:44:5a:35:36:ca:73:9d:d9:47:1e:79:d6:62:e1:
e4:d5:38:4c:a9:a1:7a:09:f5:ae:38:4f:6a:35:ed:
26:70:fb:39:c5:6a:84:05:cc:c8:87:34:9b:6b:28:
3d:29:bf:49:73:18:37:10:6e:a0:67:b1:90:db:2e:
cd:e9:1b:b0:92:34:4f:96:d0:0a:b0:2f:30:21:9e:
ed:31:2d:3c:e3:04:20:ed:99:47:75:f7:17:ac:aa:
fc:77:4b:07:cc:00:d4:2d:ea:94:f4:cf:06:5f:ad:
1f:e9:f0:20:f3:59:34:77:90:aa:a0:e2:a8:e1:c1:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A7:80:16:94:40:6C:48:6A:C9:53:BA:0E:F7:6C:B8:21:CE:29:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:e9:71:00:b2:4e:c3:5a:31:e2:e9:27:47:93:2d:dd:98:1d:
a9:f8:ba:6e:bb:ae:2f:02:eb:bc:e9:8f:e6:6c:06:ff:b2:57:
4e:cd:df:b9:93:79:6a:b1:a4:fe:11:03:8f:41:d5:0b:1f:42:
10:43:1b:b8:ab:3c:ad:2e:85:a7:2c:b3:4c:14:08:c3:46:2f:
d2:c8:63:58:f2:7d:2c:e9:06:be:b2:6a:b3:a2:94:33:0b:bd:
cf:69:1c:6a:2b:40:7f:1c:8c:19:ae:20:1a:62:43:d8:12:bc:
8f:16:c7:b2:2e:91:f0:31:bf:63:62:35:11:5e:c0:99:15:55:
3e:e0:f1:46:29:bd:b9:27:ff:69:2d:87:93:64:aa:a7:a1:0b:
de:fb:db:e4:f4:73:7b:33:84:50:86:f2:79:bc:9a:c4:17:7b:
54:40:81:34:78:74:c4:7a:34:e1:6a:13:00:0b:99:05:96:0c:
b2:92:8d:98:59:bf:15:07:08:30:40:d4:f7:e3:d7:45:63:8c:
09:ad:4a:51:f9:9d:de:3b:9f:ec:22:0b:96:29:52:51:92:a0:
c4:d9:74:1b:69:01:96:ac:a3:2a:0c:0d:ef:2a:2e:13:28:5a:
1b:46:f1:4d:c1:fa:5f:76:55:0d:33:bb:bb:72:7c:fe:fa:25:
a3:40:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:40 2025 by rpki-client