Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa
File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json)
Hash identifier: hLmjott/BXidhqkPohrK6scnE+rjJd+2rM8peo5DnSw=
Subject key identifier: 87:EE:90:83:2A:DD:5B:F4:DD:98:0E:24:B2:C2:CC:A3:8F:49:69:C7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584823954EDEF217D2F7CE34E280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 9009
IP address blocks: 172.111.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4e:de:f2:17:d2:f7:ce:34:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=101b85fa-389e-4a2a-bf1c-435618bbc349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:93:20:b8:d7:12:9c:d6:0d:56:84:cb:90:
3b:0d:aa:97:57:9d:33:cf:93:06:92:bf:94:82:42:
5d:2b:a8:9e:39:fc:be:22:e2:d0:6d:f3:52:88:9d:
40:2c:33:54:ae:2c:85:9d:0f:e7:da:01:ed:9e:3d:
86:e8:bc:8d:43:6c:7e:8a:83:40:6b:af:30:21:ad:
aa:0f:a1:55:7f:2f:2b:51:93:e0:94:45:cd:3f:66:
49:c6:46:b1:5b:db:3e:83:e4:c5:41:7a:af:06:0d:
19:66:6e:40:d5:df:66:ae:03:8c:8f:9b:8b:a6:62:
c5:4d:52:62:f1:4d:8c:0e:ed:75:e3:82:1d:a2:74:
0a:8f:6b:41:6f:9c:1a:73:14:d6:bf:57:76:bc:c3:
f5:f1:f8:46:5b:ee:f1:75:16:0f:31:9a:80:9d:3d:
24:07:cf:bb:71:d7:4b:8d:49:27:f6:01:32:79:39:
7b:ba:07:00:bc:0c:b8:60:94:45:ca:f4:14:da:43:
15:bb:f7:ad:60:6b:43:fd:7a:a5:d2:79:b9:c7:c4:
a3:76:c1:30:8a:53:a7:83:f9:d3:2f:31:9a:80:7e:
0f:06:a6:7f:eb:f6:8e:89:d3:1c:52:94:16:47:65:
66:fe:14:c2:47:f1:14:43:8e:d0:b0:3c:49:72:b4:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:90:83:2A:DD:5B:F4:DD:98:0E:24:B2:C2:CC:A3:8F:49:69:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:e2:33:c1:6a:2e:63:8c:41:25:cc:51:50:22:b0:74:ae:9d:
15:1f:9e:33:42:5e:00:82:a5:a3:83:5d:30:d0:32:44:38:24:
c8:22:95:15:c7:ee:7f:c5:73:61:96:ab:05:50:57:dd:2f:42:
f0:62:fb:52:17:63:c6:e1:db:db:7b:8d:9c:e6:14:a2:4f:b0:
a5:30:5b:36:e2:49:a5:3f:1e:10:d9:34:f6:cf:21:0c:50:d2:
8b:94:5d:97:5b:9f:90:57:30:f3:ed:a1:4a:1b:39:0f:75:b2:
af:31:26:48:38:b3:ba:c1:4d:72:a9:32:3c:78:b4:ce:81:f9:
e4:b7:d9:63:2d:68:89:29:36:e9:e5:3a:aa:cc:e4:8d:d5:ab:
4f:30:41:8c:84:c0:17:ca:b7:f8:e7:75:4c:9b:21:78:a4:e1:
86:dd:6d:79:6c:95:a5:fd:26:39:71:fc:18:5e:66:3b:75:89:
8d:5a:c2:98:b9:69:00:a5:ec:1b:57:76:ef:f2:14:7c:5a:e9:
71:3f:f4:37:eb:39:3b:d3:39:0c:d4:41:6d:78:59:72:b8:fe:
65:41:cc:fe:2e:5d:9c:91:1e:06:a9:f0:f0:7f:e4:1a:66:06:
94:ef:12:c6:36:17:19:31:a4:e7:62:ea:50:2e:d3:a0:e6:1b:
76:c3:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:08 2025 by rpki-client