Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa
File: a1d2f579-2288-3829-9ebf-2135c335bb81.roa (raw, json)
Hash identifier: gkC8q+3MI0/owXr6PZlO9icJobpMj9vwBZ2Twsiuq3Y=
Subject key identifier: AA:7B:42:D0:A8:69:A7:4F:64:75:2B:C8:26:C2:30:53:DD:C7:E5:2C
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C429622BE52EDB0CCDB380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 172.111.116.32/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:29:62:2b:e5:2e:db:0c:cd:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=98587341-6eb1-46db-bd9b-2e1414be4091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:3c:0f:29:30:f3:b6:b2:3a:7e:0d:65:07:
fa:3a:7e:f2:30:6d:e8:ad:2c:0f:3b:e5:65:26:cd:
c9:ac:94:e8:dd:5a:c2:2c:61:0a:e6:f1:9b:ee:13:
e4:12:89:78:8f:40:d2:3e:cb:a0:1d:52:2b:0c:3a:
a1:59:c4:97:f2:88:f6:93:5f:36:d8:c3:72:9d:18:
1b:6a:74:8f:20:12:b9:ef:0c:92:9c:b5:d0:75:c1:
c1:93:42:ac:14:c1:46:62:e3:d1:3b:4d:5c:50:42:
02:b5:be:9a:93:99:0c:de:20:4d:cf:e5:0f:1f:44:
4b:01:04:11:7a:dc:c8:f8:19:bf:ed:4c:78:50:d1:
e4:c0:be:f8:c7:10:63:db:ee:98:10:ce:c2:17:32:
a6:0f:60:b6:70:92:dd:5c:ec:a0:33:22:39:55:74:
f6:e3:63:9f:d3:77:bf:7f:21:a7:f4:d7:0a:48:fe:
54:c2:e5:c2:72:ab:cf:6d:4b:ae:ef:84:5e:15:f6:
9c:2c:4c:1c:e3:93:e4:fe:e9:1a:0b:e8:e3:62:43:
f5:82:31:c5:56:eb:ae:ad:a4:38:2e:70:2b:7d:26:
9c:22:8d:72:14:5b:5d:43:67:1d:95:60:6c:b2:8b:
b3:2b:c7:de:2c:dd:52:46:8a:9e:ff:e1:32:cf:25:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:42:D0:A8:69:A7:4F:64:75:2B:C8:26:C2:30:53:DD:C7:E5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.116.32/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d4:cf:fc:f1:5b:60:ef:88:42:58:0d:38:f3:d7:47:60:26:
b7:da:1b:ee:a9:b0:d2:13:4c:64:32:64:06:a1:6b:a0:52:70:
c4:b8:c3:49:64:d3:0e:56:64:b2:8a:41:e8:e7:c8:9a:ee:04:
7c:5b:01:86:ce:4c:69:d5:55:fc:65:0c:27:b7:06:cb:fa:f5:
b5:ac:a2:0a:e1:91:0e:63:96:e4:f1:7f:29:7f:16:7a:8d:80:
90:8e:3b:e6:26:c7:b6:dc:db:98:c4:e9:57:65:a6:6c:2f:66:
45:56:74:f9:82:31:04:d4:09:7a:28:1d:c9:a4:b4:37:2d:96:
29:86:94:4f:f4:56:cf:e7:47:a2:62:f5:58:e3:7b:df:ac:4b:
29:de:3c:82:89:0e:62:bb:d5:1c:de:e8:b5:e6:27:d8:dc:04:
a8:0e:31:f8:13:85:5a:2e:d3:fb:2c:42:ab:40:e7:ff:b8:a4:
49:8b:10:23:b8:c5:dd:c0:6c:12:05:47:36:3f:81:38:fb:73:
38:63:99:e3:1a:d3:93:45:c8:17:4a:c1:c5:8b:d9:3b:d6:80:
3e:58:7e:31:6d:30:16:4a:db:65:11:85:f8:9a:7e:d6:de:8f:
fe:ca:41:74:b1:8f:15:ce:38:cb:73:ce:03:17:bb:ad:67:ed:
2b:03:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:19 2025 by rpki-client