Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
File: 16348858-8f46-38c3-afb4-c6afe7fd9adb.roa (raw, json)
Hash identifier: vIjOw8RVvioaxfyfk1wd+eJ4j/fbZq2XenedKSwNojw=
Subject key identifier: A8:D6:1A:45:84:54:BE:2B:16:03:63:6D:A5:54:9C:34:23:71:7C:E3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858485E35B54F0A4479375E0AF400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 212238
IP address blocks: 172.111.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b5:4f:0a:44:79:37:5e:0a:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=be690e29-14cb-45e3-b573-e5606c1651ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:60:7d:96:8b:c9:c0:a2:a2:56:e4:88:dd:
20:fd:28:87:3f:46:b3:d6:52:0d:ca:56:ac:53:a7:
0f:2c:d9:c0:78:dd:50:51:f6:84:76:a0:5e:0d:4a:
07:1b:be:9e:cd:7b:2f:2c:94:ba:7d:3c:e9:56:33:
2a:fb:3f:84:72:50:76:c4:0a:57:e3:21:39:7d:25:
c4:fb:83:75:a9:42:ef:c1:26:ee:a4:3d:d9:f7:22:
32:a3:17:3d:28:24:27:2d:68:89:96:86:6d:1b:c9:
bf:c2:dd:56:2d:4f:e2:c0:f7:3b:eb:93:6a:b2:be:
8a:29:66:34:8c:31:2c:0b:b0:df:a9:f8:eb:92:8e:
3a:8f:3e:ad:26:08:89:65:eb:40:86:e9:99:49:82:
d6:a9:7d:b9:cc:e3:c4:e0:c2:6e:f8:55:9c:9f:01:
0f:b1:3e:a0:99:f8:e0:b7:39:93:d6:cc:47:64:9a:
4c:db:fc:08:e7:88:03:f7:a8:59:01:e8:0f:36:14:
b5:c3:3b:43:da:e1:f7:46:a3:ce:6a:cc:f4:98:f1:
2d:db:f7:57:36:72:df:47:12:56:43:0c:0c:f5:e9:
5a:22:b8:a7:40:2c:02:a7:bf:dd:49:73:a7:1a:f6:
74:5a:45:5c:f0:67:05:79:91:58:68:7e:e1:79:9d:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:1A:45:84:54:BE:2B:16:03:63:6D:A5:54:9C:34:23:71:7C:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1d:02:7c:79:ee:52:09:0e:77:38:d8:69:c4:96:1f:e9:a5:
0d:4c:23:e0:b3:56:8c:10:58:7b:c6:18:d7:79:7c:fc:28:52:
0d:84:77:76:6e:ff:f7:c4:3d:76:08:76:31:34:a7:16:a3:65:
e6:de:ce:30:51:80:c1:dc:af:2a:97:27:72:3f:57:2f:4f:07:
cc:7a:4f:34:8a:d4:79:66:7c:81:c2:ec:4b:6a:7d:d2:ff:e6:
2c:d0:30:17:91:cc:a6:5c:7a:3e:52:1b:39:4b:d9:91:3e:6e:
5d:12:a2:69:0d:99:49:28:a5:90:5c:fb:2b:09:db:cd:38:f3:
14:0a:92:3a:5c:39:3f:45:13:85:b7:e4:e2:02:a6:09:db:0c:
a4:20:fa:85:79:94:a6:1f:1e:cd:72:8f:6c:82:76:e5:4c:86:
91:6d:ac:05:7b:ef:1a:41:25:04:1f:26:ef:7e:92:2b:d8:e4:
56:4d:8c:93:29:c2:6c:f2:8d:5a:5f:ab:45:d8:fa:6f:2b:96:
ac:89:6c:88:9e:46:e8:36:ea:7b:16:af:b4:e8:4a:b2:2f:a0:
02:38:f9:f0:d2:c6:46:e1:28:e6:84:00:48:af:8d:d0:41:93:
52:ec:a3:b3:42:4b:21:c9:06:f2:1e:99:2e:a8:16:cf:d3:a7:
7f:5a:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:31 2025 by rpki-client