Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
File: 2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa (raw, json)
Hash identifier: BteLORozK0vTAYUQzEQBaalB/V6fLAbXgbftmZ6XqUs=
Subject key identifier: 25:22:79:2D:37:A2:9D:38:F1:67:4F:50:30:AC:21:98:C4:F8:38:DE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847DD71C40BF4D28FB04C5EF580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
Signing time: Wed 13 Nov 2024 11:02:49 +0000
ROA not before: Wed 13 Nov 2024 11:02:49 +0000
ROA not after: Tue 11 Feb 2025 11:02:49 +0000
asID: 53356
IP address blocks: 172.111.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:71:c4:0b:f4:d2:8f:b0:4c:5e:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 13 11:02:49 2024 GMT
Not After : Feb 11 11:02:49 2025 GMT
Subject: CN=e5988cba-91d4-48a0-af25-ffaf0b0f0720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:e1:46:95:d7:8d:83:2f:0c:66:54:53:be:
5c:bd:63:90:ab:b9:c8:85:30:ff:a1:34:d8:6e:f5:
0a:73:6d:b5:94:ab:73:57:2e:cc:eb:40:16:6a:70:
13:75:55:1b:86:a1:fc:a0:f0:fb:a5:9c:cb:c6:23:
dc:49:de:1c:43:60:34:ea:78:4d:8f:d5:74:6b:c5:
fe:ed:b1:e5:26:4e:fe:22:8b:9e:8e:e2:eb:44:8c:
49:6a:1d:78:b9:ed:e8:bf:6f:c7:3b:d3:e3:79:d3:
9a:13:fb:a9:55:d4:cb:e2:50:a7:3f:57:72:5e:25:
81:e6:b4:df:38:13:b0:67:80:c3:7b:2e:c5:65:0e:
47:bc:03:77:9a:98:b5:d5:5e:36:8a:1d:de:30:2f:
4f:9d:84:11:ec:3b:ec:63:24:e2:7d:c3:01:0a:38:
ef:b4:81:53:46:3a:10:67:29:70:18:57:6c:5d:e5:
f8:a6:4a:7e:9c:e1:aa:5b:9c:df:68:81:8e:e8:d6:
c6:95:4f:fa:ac:22:a2:0b:ed:a2:82:f9:90:6d:54:
5d:a5:b7:7d:b5:f1:2b:57:f4:a0:09:f5:d1:0f:07:
1a:77:e9:59:b3:2b:7b:56:9a:9c:d5:72:cc:d7:60:
97:5d:eb:1a:dd:a6:f3:e1:3e:b2:52:ec:29:53:de:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:79:2D:37:A2:9D:38:F1:67:4F:50:30:AC:21:98:C4:F8:38:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:cc:02:3f:78:02:cd:c7:6b:ff:65:cf:9b:e6:1c:bc:0a:85:
fb:51:9a:2f:18:7c:c4:a6:19:22:92:30:6b:4e:01:22:b6:f6:
ee:c2:ba:fb:5c:19:0b:0e:b2:bd:d6:73:b0:a2:0b:b6:88:bb:
27:b2:c0:8f:43:ac:3c:17:89:50:3f:49:4a:d9:34:f8:36:fe:
3d:7c:8e:ee:78:2e:de:05:45:53:23:2c:98:62:f4:f7:43:b0:
8f:44:88:a7:e1:68:5d:de:1b:49:e3:2c:a1:c3:ea:75:04:95:
69:2f:bd:07:56:1b:1a:ff:5f:b4:79:4c:6e:b0:5e:a3:32:17:
e5:a8:67:d0:fa:61:a0:8e:19:da:8a:36:0e:c1:20:af:08:aa:
31:04:15:85:54:e4:26:23:dc:c5:ce:ac:a6:21:a5:39:cb:87:
d2:41:35:41:9c:d1:cd:bc:bb:af:9e:20:0a:c9:93:2a:4b:04:
29:3d:4f:7b:bc:8a:86:7b:12:37:c8:f2:f0:a3:0e:da:a4:b0:
2c:df:7c:01:f2:37:9e:13:3b:c9:88:da:54:49:73:49:8e:f9:
1f:ea:af:18:4d:73:3e:1e:b6:9a:86:28:8e:3c:07:f1:a7:9c:
4c:3c:f5:e4:fd:80:07:2a:89:5b:81:f9:71:0f:f3:65:e1:bd:
d2:9d:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:54:54 2025 by rpki-client