Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa
File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json)
Hash identifier: oDBAUc7DHTcrUFqs7Z+V14R2PWdgUm78aFunqrusHCI=
Subject key identifier: F7:96:B2:62:09:D7:06:BB:FA:0F:9C:B8:C2:9D:C9:D5:64:BB:AF:4D
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584819CFD509F147C6B85D59F040
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 9009
IP address blocks: 172.111.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d5:09:f1:47:c6:b8:5d:59:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=b5fb9b75-be78-4195-9066-e6a8a314b7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:bd:22:90:fe:a4:19:4d:b9:ef:29:75:12:
74:9d:e1:6a:d7:4b:12:98:ac:96:18:9b:5d:a7:a2:
05:20:66:c1:40:03:3b:d1:ac:e8:f4:cb:fc:6f:33:
7c:68:45:bd:bd:0d:b3:f6:ca:18:66:2a:76:14:63:
85:11:95:f0:22:f8:1c:60:bf:16:41:35:42:2b:3f:
17:7c:b8:be:40:f2:0a:d4:f9:58:c3:63:85:56:e2:
09:9e:01:0d:05:a1:88:7e:fc:49:a7:98:29:85:30:
fd:fb:46:d9:c9:9c:1d:5d:50:fe:43:f7:dc:76:64:
33:a6:83:a0:70:3b:18:86:29:eb:a5:ed:d7:a6:72:
31:aa:46:dd:26:b7:0d:3f:50:71:08:16:79:c4:c1:
30:61:75:19:67:ff:70:f4:a5:81:86:f0:fd:f1:ef:
d8:3e:16:86:8d:7f:a4:05:12:f6:22:21:ec:27:1d:
a6:7f:f4:0a:84:03:08:14:e4:38:47:00:27:ba:b2:
6c:32:b8:b2:23:2b:ba:87:5b:95:32:0f:8c:f6:a2:
5e:34:98:88:8a:06:0d:00:1c:d7:b0:07:61:5a:dd:
21:c9:70:88:ae:3b:e7:98:34:39:42:01:0c:58:81:
25:d4:46:da:58:66:ae:5b:09:7a:3e:54:de:60:44:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:B2:62:09:D7:06:BB:FA:0F:9C:B8:C2:9D:C9:D5:64:BB:AF:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:3e:e5:aa:8c:f6:51:a2:ec:72:d5:01:cf:e1:e1:a4:6a:ea:
4a:e4:72:3f:6e:5f:ba:14:94:66:41:a9:98:86:3d:a3:21:6f:
16:74:ea:56:74:66:2a:c5:06:00:37:6f:c7:b6:46:28:f3:2f:
9b:81:76:46:4a:13:5e:29:59:93:8d:4c:cc:88:62:38:84:d0:
11:cc:39:fe:09:a8:43:14:da:75:ea:fe:e5:cc:e9:c2:32:3f:
47:9a:b7:e7:f4:05:6f:96:9e:e2:a5:11:45:20:7c:d8:29:82:
46:1e:77:a5:3a:ee:2e:d0:7e:79:a7:de:66:fe:9c:ff:19:59:
fe:87:f7:ba:dc:f4:a4:d3:d5:b1:28:4b:33:49:cd:7c:be:46:
91:60:87:57:79:d4:8b:3e:92:d1:97:d2:86:85:63:f8:26:f7:
8b:7a:de:4e:ff:80:73:13:ad:9d:dd:3f:e7:5e:ce:7d:ec:f6:
47:26:80:6c:84:fb:de:bc:97:f4:13:da:e8:3e:77:a5:84:f5:
04:dd:c2:ff:53:03:87:61:3f:09:99:cd:44:d6:40:7c:64:83:
1d:b8:29:d7:c2:cb:af:c0:1b:c2:f4:32:6e:e8:74:fd:80:47:
0c:5e:d8:04:e4:59:95:6b:46:8b:80:2f:6c:7d:f3:ab:ad:b9:
cf:5b:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:23 2025 by rpki-client