Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/ed7c823f-3bec-3c6c-84a7-78512b7aa6d6.roa
File: ed7c823f-3bec-3c6c-84a7-78512b7aa6d6.roa (raw, json)
Hash identifier: l666aXO6zc11E3BmA7ULoCHVHGF7vUvdpgytVIcHZDY=
Subject key identifier: B6:F5:48:EC:ED:0F:52:30:A5:87:8F:92:31:65:68:50:55:80:0D:0D
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F43285848854B3FB228B3D7B4FCFAAF80
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/ed7c823f-3bec-3c6c-84a7-78512b7aa6d6.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 31786
IP address blocks: 172.111.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3f:b2:28:b3:d7:b4:fc:fa:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=9617efb3-0556-4f03-98f4-94b335adc5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:7d:0a:f3:79:ea:64:fc:36:ca:4a:f4:0f:
3e:09:34:c2:77:03:79:ef:40:c8:a2:ab:8a:4d:0e:
51:ed:d3:e4:1f:87:ed:76:01:7c:7c:e8:ff:99:cc:
e0:da:21:51:96:13:c4:74:95:3c:83:66:db:d0:52:
09:69:cf:ce:66:19:5f:70:d9:6d:59:78:d0:25:34:
09:c5:c5:41:3a:32:4b:2e:f1:86:5d:61:40:cf:94:
a2:f1:57:c9:e8:07:f6:6f:ef:81:81:ad:5e:49:19:
ec:f2:ea:d3:75:e4:1a:11:2a:ba:0e:ba:ec:be:c9:
42:89:6f:95:28:8d:32:a1:0f:59:bd:1b:72:c7:7d:
8b:b5:82:6a:4a:03:70:3e:b1:1f:1b:5d:88:e0:15:
18:6e:c1:1a:e5:74:66:90:af:2b:d0:73:50:32:58:
50:89:e7:22:b6:ff:91:1f:c8:35:ca:bd:23:50:6b:
c2:06:0d:0a:85:4a:60:4c:ba:95:51:33:82:a5:60:
31:94:d2:19:b1:eb:29:2f:53:e3:d1:23:fa:b1:7a:
9b:0a:c9:5a:41:37:a7:9e:56:2e:68:9f:f4:91:5c:
07:80:cd:33:57:7c:ff:fe:5a:1b:e2:3a:49:b5:12:
c8:c9:39:42:49:6d:65:8c:df:e0:18:bd:87:da:c7:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:48:EC:ED:0F:52:30:A5:87:8F:92:31:65:68:50:55:80:0D:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/ed7c823f-3bec-3c6c-84a7-78512b7aa6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:f6:f2:4a:aa:99:d1:80:99:a7:35:e4:16:9f:e0:0d:84:fc:
13:ff:5b:c5:45:a3:48:b8:71:07:5d:fb:89:30:b9:5a:55:96:
d3:4c:4d:bf:4a:6f:45:f3:00:08:c8:dd:b5:57:0d:69:db:b9:
a7:1b:47:0e:76:be:8d:80:11:19:70:b0:4b:54:b7:25:5e:06:
3b:6b:7a:25:4d:dd:56:a8:f9:86:4f:10:ab:e8:5c:e9:1f:1e:
55:c6:ce:41:77:8f:85:6c:41:ea:c2:09:68:5f:26:c4:07:a5:
91:b9:1f:8a:30:eb:18:0d:88:ed:e7:a9:fc:69:19:cc:d6:b8:
40:b4:7d:a1:5d:0c:db:3b:fd:a4:d1:7f:1b:9c:99:0b:ed:57:
13:01:f3:44:10:eb:de:3c:21:92:1d:8c:8c:1b:54:8e:34:50:
2b:2f:a3:9f:a2:19:5c:c9:b6:9b:d4:9f:a7:00:83:73:88:8c:
2a:fc:b5:8b:ae:3d:23:33:73:2d:cc:2c:ed:ca:45:6b:a8:e8:
a2:d7:80:fa:80:ee:f3:09:45:9d:84:40:d9:1d:c0:11:41:19:
81:60:2d:84:8b:57:53:2e:b0:d3:1b:5b:14:7c:a1:4c:d4:b0:
ef:98:65:c3:62:ad:70:9c:b8:fb:b2:07:69:f3:81:99:39:48:
cc:bd:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:00 2025 by rpki-client