Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa
File: 0b9309e3-07db-3044-81aa-b836a369a052.roa (raw, json)
Hash identifier: LWuUDNyez+veD+DEz6yNp8ksNCWEW1zuGG/4hjBV2ko=
Subject key identifier: 70:B0:DA:46:DA:8B:D2:05:2F:79:C5:CA:97:22:DC:BD:9B:DE:4F:95
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A57CA4315D8FAAB75D3CC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 172.111.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7c:a4:31:5d:8f:aa:b7:5d:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=6c606fc0-bcda-4e03-a080-44f6d1fb7d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:f8:9b:70:d9:69:da:81:4e:9f:a4:9c:c9:
7d:c3:2b:c2:3e:38:30:dd:3b:08:62:cb:cd:b0:33:
a4:f2:f6:06:86:88:7d:eb:ce:1e:af:ab:4c:34:e3:
50:90:5c:1a:03:5e:6d:a9:f6:87:a5:12:6d:ce:4f:
dc:e1:f3:35:b6:8c:19:7d:e6:2a:59:38:25:31:e1:
44:e8:41:ba:62:fa:bc:ed:8e:ac:77:3b:9c:28:ea:
61:19:80:36:95:d0:ff:9d:55:55:78:a4:85:56:cc:
fe:6e:fb:3a:55:fd:f7:af:50:89:62:7b:8b:fe:7d:
a3:50:86:00:1f:92:1c:8e:3d:f4:05:4b:ea:5c:f1:
b5:eb:23:6a:4c:a2:83:7b:c7:c5:99:ff:19:7a:ae:
0c:dd:ba:28:5c:1e:d2:57:38:01:80:84:8c:08:eb:
13:be:f3:05:4f:30:8e:ba:37:f3:b8:9b:07:e7:31:
21:73:ac:a8:5b:84:55:76:a5:61:af:5b:10:59:29:
2e:04:54:b3:39:b4:ef:ef:16:55:50:57:5f:e9:b1:
a4:67:52:48:41:8a:cc:5e:2a:02:b7:9f:8a:c1:e5:
f0:29:a4:17:d8:23:c4:7e:e1:b4:11:0d:5c:91:52:
ac:ca:d5:86:c4:e1:40:47:4e:72:10:73:56:3d:fd:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:DA:46:DA:8B:D2:05:2F:79:C5:CA:97:22:DC:BD:9B:DE:4F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:18:de:77:ac:c8:7c:3c:40:15:6e:06:c7:eb:9f:22:67:d2:
c6:19:b8:0d:fb:43:e6:31:80:25:a2:1d:8b:2d:c5:c0:ad:5f:
04:c0:fe:58:53:42:f1:5e:71:1e:10:c8:c6:7b:1a:4c:e7:b7:
a0:4d:18:e1:0a:89:9c:cd:b8:38:13:ec:8d:fe:81:7f:90:fa:
71:51:89:eb:f8:ac:4e:87:67:c6:87:d8:ad:31:ed:9a:c2:6f:
20:91:d2:18:be:50:a1:44:fb:88:e0:97:60:a7:10:96:a9:9e:
9c:f3:f5:e2:44:da:a3:02:ad:83:af:81:13:65:c8:08:78:97:
25:18:f4:d9:8a:54:bb:b9:d5:e0:7c:bf:69:46:4b:d1:57:fa:
c3:23:fe:f2:92:97:43:5d:b4:3e:d0:8f:af:13:22:13:35:f0:
46:fc:76:f7:13:fe:a6:ed:b3:6a:d2:59:4d:de:47:c4:a6:3b:
7a:d5:50:80:ce:ca:43:bb:91:03:4a:38:d8:d1:b2:b6:56:36:
ab:dc:48:d6:25:5e:38:50:3d:e0:73:14:ee:e5:0e:47:41:a2:
d0:b3:42:3c:8d:28:62:b4:ea:df:03:b9:86:b9:0d:61:6f:f8:
15:d3:87:da:64:0e:b8:03:9c:ec:e0:0c:12:d4:10:46:3c:9a:
81:b6:2d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:17 2025 by rpki-client