Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
File: 46f6306b-c2ef-317a-b077-b01c1b216d0e.roa (raw, json)
Hash identifier: 2kZXTgO8nICYn/t3V/cROnKqJT7GxJsmHqGK8A6D8As=
Subject key identifier: 5F:04:BD:A3:65:82:3C:EB:12:A3:D6:67:25:A5:CE:31:51:A3:A7:E1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695C9084E8DE45D77A0C260
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.111.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c9:08:4e:8d:e4:5d:77:a0:c2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=f332db25-b38b-4fdc-b857-132c4aa2d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:76:92:51:ba:50:48:21:9a:e9:d2:95:01:
14:4d:f9:18:dc:98:c8:bd:43:75:0b:e9:79:cc:23:
33:de:83:e5:4e:7c:93:c9:b5:30:39:52:4e:47:26:
30:87:13:d8:bb:56:1a:64:03:e4:5f:79:4e:66:9c:
7c:2c:64:61:33:4b:f4:fe:7b:d5:03:14:36:02:76:
a3:35:f2:54:21:fb:62:ae:0e:09:28:45:1d:71:70:
85:bb:ca:a8:72:cf:22:ca:d1:90:4a:16:66:02:de:
3d:6a:19:91:56:bb:ff:da:99:53:4b:e6:07:ad:0a:
d7:1d:80:79:01:95:d8:fe:44:95:9e:4d:5c:33:97:
7a:b2:68:d9:8c:2b:71:4b:d2:1d:53:c5:5d:2b:5e:
c7:46:3a:63:8c:99:ee:79:02:a1:5f:03:56:df:7e:
18:c2:91:f8:7b:2a:4e:60:59:ea:78:4c:ab:e0:8b:
3f:59:2e:75:e3:e2:df:50:f8:e4:5b:94:85:70:ff:
a7:0f:c1:6f:ca:77:da:10:bb:4c:77:d5:2b:6f:ca:
86:02:25:e9:7a:50:ec:1c:65:4e:52:f3:e0:1c:a0:
d9:6e:5a:1e:ed:4a:04:ab:22:08:a1:34:bb:2e:ed:
52:44:e2:f9:c4:2e:e3:94:26:b8:c0:73:e7:74:46:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:BD:A3:65:82:3C:EB:12:A3:D6:67:25:A5:CE:31:51:A3:A7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/46f6306b-c2ef-317a-b077-b01c1b216d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b9:3f:4b:ea:35:58:4e:d9:1a:32:40:b3:02:cc:56:12:c5:
52:43:9e:e9:01:fa:85:d4:43:e3:1c:27:03:ce:95:b1:cf:5d:
84:65:d9:b5:4f:68:e5:f0:dd:a8:26:da:32:23:6d:0b:3a:be:
af:bf:94:65:7f:f1:bc:35:bf:5e:0d:59:60:03:1c:ca:93:2a:
d2:6d:e1:f5:ec:9f:cf:aa:fb:c0:be:e7:54:30:53:8e:69:e0:
44:06:06:fe:40:f3:9e:be:78:18:3f:cd:8b:b2:46:76:85:bb:
be:05:f0:5c:8b:80:3e:89:cc:36:d2:ed:ab:90:73:02:d9:66:
4d:53:aa:d9:57:b3:6e:fc:3a:40:68:0c:b4:3a:ef:eb:03:d9:
fc:49:a8:86:4a:28:81:52:a8:dd:ad:99:a7:0b:8a:e0:b2:dd:
a7:d6:af:62:4d:35:23:51:f2:23:a0:61:73:2a:2a:85:9f:8c:
90:10:0d:09:e9:67:be:bb:78:77:57:de:98:63:fd:0e:1a:28:
53:2b:fc:4d:f6:75:22:77:86:0d:43:42:9c:4b:cb:51:cb:5e:
8b:f3:8e:42:1b:27:57:98:25:03:e0:7e:19:9a:6f:29:e1:46:
7a:71:1a:b1:1f:7d:21:b8:4f:32:bc:db:3d:2c:4a:9e:08:a6:
58:8d:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:04:32 2025 by rpki-client