Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa
File: a8a6192b-acde-30c6-b783-50c009cf5baa.roa (raw, json)
Hash identifier: WJ7OSu/RuAihIriWcT24TfSVALzoVQcMOgTrYiyD5OU=
Subject key identifier: 9F:94:D6:8A:E9:9F:4E:46:30:1A:A2:0C:60:C1:BA:88:A3:3A:7B:EC
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4313C428730EE98830068
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 172.111.65.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:31:3c:42:87:30:ee:98:83:00:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=f6e6878e-1cef-4f56-b737-806d22630757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:ae:57:a2:37:b2:81:ed:25:53:00:90:c7:
83:fe:62:d6:e1:42:b4:a8:1c:1c:f3:ed:e7:32:9a:
c3:96:34:4e:c7:14:ba:69:d6:c2:d7:7c:1f:ff:c8:
68:2a:12:92:89:9b:c5:e5:d6:da:47:0e:cc:fb:59:
54:e6:7b:d3:04:bf:04:d3:3c:2d:d3:95:84:00:99:
e8:07:3b:a7:c2:25:4b:90:a7:7b:0c:ef:7d:a2:b1:
f6:93:04:49:c0:8f:c8:97:33:bc:81:1d:3e:92:7c:
80:67:70:4a:47:9b:a0:0a:1f:17:80:12:1e:a3:6b:
cf:2a:6b:b5:3c:b8:7a:40:38:cc:7b:8b:bd:ff:9e:
be:f5:7e:2d:dc:2c:1b:7f:25:49:70:d6:69:c3:4d:
45:66:ad:4a:29:82:4d:54:6d:55:66:89:23:8f:77:
27:26:ac:36:0b:44:b3:54:2a:9d:5a:c0:87:58:18:
26:98:7d:28:d2:f5:3b:61:3c:25:af:63:06:c9:e2:
97:b4:7d:c1:43:d9:1c:09:e8:61:fa:3f:19:f8:8a:
c9:5f:61:45:59:2f:bd:75:2c:55:17:1a:c6:d8:fd:
15:36:71:0f:59:c3:c7:8c:2e:d5:e5:b4:59:40:ea:
f4:ce:06:a5:47:ef:e3:7e:10:0d:84:f7:d3:22:05:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:D6:8A:E9:9F:4E:46:30:1A:A2:0C:60:C1:BA:88:A3:3A:7B:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.65.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:74:e3:45:d0:35:51:d3:a6:46:a6:e7:51:e2:69:71:52:fa:
33:59:cf:0c:db:23:ef:5a:70:2b:d1:55:04:aa:0d:dd:a4:9a:
a7:95:c4:45:1d:72:bb:53:74:fd:16:3b:9d:aa:19:af:60:ca:
a0:39:4a:50:c0:1e:19:33:e5:51:7c:8c:99:13:6d:7a:9e:6d:
13:6b:ea:4c:2b:3d:62:58:55:b4:a8:fb:a9:dd:eb:1f:99:22:
9c:2d:79:9f:71:2c:1c:47:4e:b0:a2:11:83:03:d0:c9:39:a6:
b7:d6:c4:95:b1:50:db:72:1a:ab:91:b4:57:81:bd:3d:b1:2a:
8e:81:a5:77:4e:e6:fe:a5:0e:85:70:87:34:43:5f:da:ef:c0:
e5:61:6f:ac:8e:61:90:c7:5f:e9:54:b9:36:f7:19:97:98:d2:
cc:9c:86:d3:af:47:9e:82:19:bf:5a:dc:37:9c:85:7b:9a:d1:
5a:52:50:aa:f9:6b:bc:94:7f:a5:43:99:0b:ce:ff:71:04:0b:
1c:3a:1a:5e:6f:10:d8:7f:4d:5c:95:6f:48:a6:5a:fd:09:26:
a0:bb:4e:8e:20:52:ee:bb:fc:08:f3:a5:32:1c:85:12:41:75:
0c:63:3a:24:57:d0:4d:4a:af:89:f1:19:29:64:0d:4f:38:6a:
af:b8:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:59:42 2025 by rpki-client