Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
File: 4420efee-d6ff-34dc-a90c-8a60f36af65e.roa (raw, json)
Hash identifier: AfAdFexMeEpeVyodoeG0R3DTrnAIxsf1uFjNb/gT30g=
Subject key identifier: 49:85:58:F4:BE:66:E3:CA:06:90:CB:38:8B:91:B7:F4:BE:57:8C:D7
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858486695BAA5D6D9217D403FEF80
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36231
IP address blocks: 172.111.32.0/23 maxlen: 24
172.111.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:a5:d6:d9:21:7d:40:3f:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=f3baef11-93be-4439-a080-3f7b2d67b873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:88:d9:41:32:41:fd:63:f5:fe:f0:08:c4:
dd:d4:42:bd:ee:ca:be:62:29:54:11:f6:21:a3:34:
23:f3:bc:94:1f:ea:7a:86:80:71:1a:b1:46:57:66:
fe:fa:eb:78:5f:0b:10:92:a8:f8:0d:95:be:6a:19:
30:0b:0c:e0:1c:29:e4:bb:ff:76:48:bb:f5:48:47:
6a:eb:71:dc:c2:88:30:d4:ee:91:79:9c:0c:05:45:
d3:ae:4d:42:37:8f:46:9f:ec:4a:94:cd:3c:6e:13:
a8:c8:c5:24:ae:fe:c1:73:2d:e5:a0:5c:9c:3c:c7:
f5:8c:86:7d:c3:8b:13:e5:66:ab:e3:cc:61:e3:03:
6a:0f:1c:6d:83:33:8c:1c:9f:64:a0:37:65:83:b2:
b3:85:6d:eb:e4:48:f9:26:a3:8c:ba:97:b4:7c:df:
9a:e0:0b:d1:b0:5e:ac:0e:6f:e0:21:d1:ce:56:7b:
c2:85:1b:e6:f3:1b:08:85:96:d4:27:6c:2c:b4:31:
e6:07:65:89:72:fe:36:cf:30:27:2a:52:fa:a8:2d:
b3:43:ae:81:a6:18:11:72:be:e0:4e:45:ab:63:4f:
14:05:98:ec:1c:df:23:c8:d9:94:1f:9a:01:27:2b:
2b:7a:26:e1:08:ac:77:93:3a:ca:20:ba:ef:68:2f:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:58:F4:BE:66:E3:CA:06:90:CB:38:8B:91:B7:F4:BE:57:8C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/4420efee-d6ff-34dc-a90c-8a60f36af65e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.32.0/23
172.111.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b8:da:bb:59:d7:ac:8c:a9:66:9e:7a:e2:0d:c3:b4:b9:ed:
29:2e:c6:6f:5b:c3:c3:6c:60:79:65:b0:a8:96:c1:f2:ac:df:
91:8a:83:da:11:db:89:89:f7:fa:77:a1:79:88:58:0c:d2:fe:
7f:70:ba:76:bc:6e:ce:3e:d5:0b:90:27:d1:fc:3f:1d:4f:2c:
e2:8d:df:46:29:94:3f:0f:17:c9:bc:d9:af:31:5c:e2:66:7d:
3f:f9:5c:82:f8:b3:09:f3:a6:b6:ae:45:5e:43:0b:dc:e8:44:
0e:74:bb:85:71:76:6d:5f:05:e1:99:cb:e0:08:15:c8:98:2b:
f2:4a:3a:62:50:88:4d:23:ac:34:4b:e0:c0:65:1d:31:1b:52:
ba:91:a2:a5:9c:c9:0c:3c:4e:d7:57:66:ef:58:b5:18:76:9f:
3f:15:52:10:da:f9:b7:7f:43:4b:29:b7:92:93:59:d4:74:d6:
39:82:e9:13:06:c0:ce:73:fe:47:b7:19:ad:05:c9:50:95:ab:
1e:5e:f7:9f:72:25:4d:57:b7:c8:07:82:ed:e5:ec:a8:44:75:
5a:fb:af:e9:f9:ef:19:35:3a:92:9f:40:6f:b7:86:99:9d:bc:
6f:97:65:f8:f0:d6:f1:d2:7c:62:e0:e5:88:28:c4:12:a5:41:
37:ef:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:54 2025 by rpki-client