Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa
File: f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa (raw, json)
Hash identifier: ve8qia03Vg+Dg+qCBhN+mHHy5oPlLMjBkSrNnTyB+l4=
Subject key identifier: F2:8A:2B:AD:DE:21:A2:FB:84:7C:7A:63:57:B2:35:78:B6:26:FB:36
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F4328584858A054D4B5D3D5F5EEE4FAC0
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 207590
IP address blocks: 172.111.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:54:d4:b5:d3:d5:f5:ee:e4:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=742dff3f-729e-4c17-8272-26b24b2e9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:1a:7e:57:e6:e9:6e:a9:15:65:ac:a7:5c:
a9:cf:fc:96:12:22:aa:ab:fc:50:50:b4:fc:dc:e2:
d5:58:02:6f:c4:f1:ec:b5:38:57:43:12:21:08:38:
5f:c4:dd:94:ce:fa:c7:f4:4b:71:2c:3a:4c:99:33:
80:0b:7c:3a:9b:b1:0d:d1:53:c5:fe:19:f6:99:f7:
38:8c:e3:8d:6c:62:b8:50:3e:41:d3:f1:a4:21:de:
06:40:f2:4a:43:05:00:bd:ff:61:fd:29:6f:f5:b4:
86:51:44:b2:4e:c5:5e:ca:8d:87:47:72:2b:5d:2f:
51:55:1e:f6:89:e9:a0:aa:b0:b6:44:87:10:d3:00:
10:bf:97:e1:88:9f:b2:75:57:31:f2:be:d1:e1:b8:
c1:ca:b5:5b:f2:44:a1:5e:ab:8b:a4:1c:ed:ec:21:
3d:5e:15:68:ca:9d:f9:7d:33:4f:52:9a:e8:61:3b:
53:3c:01:05:02:c7:c9:1e:7f:bb:06:ed:f0:96:4d:
66:2a:16:a8:ed:05:f4:d3:de:66:dc:d9:16:fd:55:
5e:63:ca:12:db:79:0e:15:6e:8e:27:07:81:c7:95:
14:b5:63:04:f1:3f:d7:39:52:d4:41:d5:df:4b:8a:
d2:c7:aa:dc:b3:4e:23:4b:e1:01:fe:37:3b:8e:ad:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:2B:AD:DE:21:A2:FB:84:7C:7A:63:57:B2:35:78:B6:26:FB:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7c:a4:ec:c6:e7:fc:a1:d7:ff:42:71:32:1e:7f:29:a3:c8:
72:81:a7:70:dd:51:fc:b9:d1:bf:6c:44:9a:d8:23:a9:25:cf:
26:f7:1a:0d:78:fa:bf:3e:7c:f5:46:6c:3e:85:c4:90:15:54:
a8:5d:2e:67:bd:62:b4:dd:f0:bc:ca:21:a6:6e:7e:28:09:63:
56:3b:3f:e8:f4:87:49:71:b4:a4:c9:8e:ed:23:90:74:ff:45:
3e:b3:19:1e:51:dd:97:99:01:c9:97:0e:1b:ae:16:bd:47:a8:
a1:17:42:e1:7d:3d:76:b8:12:ab:45:26:e5:ad:d8:9b:36:4a:
3a:9b:e5:01:ac:81:b2:5c:76:7d:c5:86:85:60:56:75:f3:74:
65:05:0c:d6:20:b7:74:d5:bc:d2:79:e6:5f:f3:31:6e:07:fd:
5b:12:f2:de:b4:be:20:cf:f0:b9:a4:c4:75:15:bf:91:6f:d6:
ad:44:7f:35:4d:71:62:07:af:09:64:2c:7f:65:a2:4a:85:ef:
fa:5d:b0:53:d2:96:86:90:0e:e2:0a:70:fe:e7:e6:11:ae:76:
6d:9e:5d:05:d8:b0:67:3c:68:b2:c1:4d:51:b8:e5:0e:2a:a6:
f9:b6:94:4b:93:2f:2e:f5:a0:dc:c2:9e:2c:c8:09:c9:47:44:
f6:df:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:04:58 2025 by rpki-client