Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa
File: 4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa (raw, json)
Hash identifier: 9YewNViDqv+z6T99M6QBMvGO96zaIVCihD7kpJBUcIM=
Subject key identifier: F8:D7:05:61:D2:6F:C1:4D:4A:1B:CB:7B:63:3C:B3:64:EA:38:6C:AC
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847EB3ECFA3EE1DB60CCB61F080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa
Signing time: Mon 18 Nov 2024 09:41:28 +0000
ROA not before: Mon 18 Nov 2024 09:41:28 +0000
ROA not after: Sun 16 Feb 2025 09:41:28 +0000
asID: 14618
IP address blocks: 172.111.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:3e:cf:a3:ee:1d:b6:0c:cb:61:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 18 09:41:28 2024 GMT
Not After : Feb 16 09:41:28 2025 GMT
Subject: CN=7c17a8ae-c377-4759-9b10-31f0682735fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:00:8d:7b:dd:aa:fb:eb:be:71:07:4f:ae:
ad:95:43:05:b9:91:fd:81:0b:17:98:8e:db:cb:47:
b2:02:1b:44:81:2b:d3:a3:12:da:b4:b1:da:55:22:
15:25:11:10:88:c1:64:48:23:a7:3c:19:d1:0b:5c:
22:bf:7c:3b:b0:97:2c:15:32:fb:bc:e1:b9:6a:d3:
c6:c9:b4:58:a2:d4:f4:bf:c3:bd:ae:3f:cb:9d:54:
bb:84:2e:36:42:fc:e4:96:f9:05:aa:e0:ef:81:47:
bd:3d:b2:ba:b4:5d:db:4b:51:c6:a3:fb:31:a9:af:
b6:04:6b:38:fa:79:48:94:7f:d5:1f:8f:0f:d1:62:
89:94:80:d9:02:17:ae:c2:76:ed:8d:15:80:d2:f5:
42:fd:df:ff:0e:2a:4a:d1:d8:1c:4c:50:7f:b9:4d:
e0:27:9b:62:02:3e:f2:3b:34:68:e1:2e:96:ee:ff:
e1:1a:e7:68:3b:4a:b1:2c:19:18:c5:8e:d6:ca:4a:
27:e9:a7:96:c3:bc:22:1a:9f:d1:4e:a3:65:86:ca:
46:77:95:89:8d:f8:07:8c:aa:3a:53:b2:5a:fc:6d:
5a:bb:2e:44:de:77:6a:29:e1:15:29:42:56:11:5c:
e8:eb:fe:65:f9:c8:a8:5c:be:48:74:29:01:2a:bb:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:05:61:D2:6F:C1:4D:4A:1B:CB:7B:63:3C:B3:64:EA:38:6C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4be2b2e9-bbff-3fd2-9daf-e8acb755246a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:fd:ec:2c:87:e0:30:ab:57:54:8e:7e:0e:4e:97:c8:d2:c6:
dc:51:07:b1:d6:f5:e8:5c:93:d3:13:30:47:da:42:14:c1:c6:
d0:59:0f:a8:aa:39:b3:e3:4e:f2:f9:48:84:83:3f:ed:16:b5:
03:3b:08:1d:95:c3:de:7f:25:27:97:86:00:73:8d:e0:20:33:
b2:ea:fe:01:5b:0a:ac:38:5e:7b:a8:87:c5:46:da:ef:cf:4d:
d5:44:2d:c5:f1:67:07:7d:1c:6d:c0:ca:ce:45:f1:5b:d8:63:
cc:af:96:09:09:54:1e:cc:7f:49:77:bd:4d:41:ac:39:76:2f:
a2:76:49:36:9f:0b:65:a5:c8:6f:ae:37:2b:f3:f3:87:23:b2:
57:8f:c3:38:54:13:06:42:19:c3:ac:00:ee:f9:a5:ad:4b:1b:
56:93:fd:ec:a7:4c:5f:07:49:4e:b2:46:5b:7b:40:53:00:a6:
c4:59:81:e1:d7:c9:2d:89:a5:f2:88:22:6d:d8:07:17:4a:4f:
c8:67:bc:59:86:3f:0f:9f:61:64:93:a5:c6:82:f2:05:1a:f3:
a7:f2:f5:43:db:a0:74:0b:fd:0c:51:41:d5:9f:cf:df:8f:8b:
5e:31:5d:72:7a:ab:c3:20:6a:64:e7:38:c8:63:ba:0d:ca:54:
41:44:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:27:10 2025 by rpki-client