Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa
File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json)
Hash identifier: B53oyo9mhAgHfbMUlT3DkD79380mmBW+gdxLSJDdPQc=
Subject key identifier: 2F:CE:64:43:5D:5A:FA:80:AE:1F:DA:CF:BA:1D:1F:BB:09:F5:DC:41
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE49DE3A9E83A45091C80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 172.111.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e4:9d:e3:a9:e8:3a:45:09:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=301af7eb-c0a2-4199-aed8-f468683c825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:02:0f:85:cd:bc:58:51:af:35:58:ad:7d:
3a:60:01:b7:5e:7d:97:33:42:fb:7d:73:0b:db:30:
37:e4:9d:fb:62:cb:98:2b:de:3a:64:6d:7d:5d:7f:
9c:ab:09:2a:c7:4a:b2:66:ad:44:22:9a:60:68:26:
ca:c7:05:f2:47:92:7e:b2:04:ec:63:30:a9:4a:64:
02:30:20:a5:a3:7c:63:23:67:c4:0c:54:e9:e9:d5:
13:93:f3:4e:7a:df:0e:c4:08:42:80:52:61:0f:4f:
80:54:0c:fd:e5:aa:56:4e:2c:a0:d7:a1:7a:17:a7:
7f:e3:d7:b3:e4:9d:90:af:29:bf:13:80:9a:f2:d1:
06:3e:a7:a5:0f:2c:bb:64:ab:00:06:8c:ec:31:a0:
c4:85:82:83:a6:03:72:2c:22:96:67:7d:69:db:6c:
9e:6a:00:0c:69:4f:a3:00:85:d5:cf:24:c3:fb:33:
e9:d6:1c:1c:46:08:c9:5f:2f:de:f8:ac:32:8a:f0:
c6:16:ba:df:a1:8d:51:03:d8:7f:68:cd:18:12:50:
f8:02:86:69:9b:98:67:88:8c:f3:31:31:44:b5:5a:
47:88:2f:70:91:db:92:30:ca:e4:98:a3:56:81:2e:
72:d4:73:9d:1f:d3:36:35:8c:25:bb:2e:f2:9c:0b:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:64:43:5D:5A:FA:80:AE:1F:DA:CF:BA:1D:1F:BB:09:F5:DC:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:df:b5:b6:fc:fb:4e:6b:ac:bd:4b:76:3f:b8:2c:3e:ed:ed:
ef:d6:1d:3a:b4:8e:63:1d:63:f2:3e:4c:10:b1:d2:1e:67:3d:
23:6b:91:71:86:40:5f:8f:be:bf:c6:24:f3:9d:2c:26:7b:60:
71:50:f6:d6:27:bc:ed:85:66:4f:c4:8b:74:40:53:5b:6e:3c:
04:f8:9e:de:0a:e1:3e:2b:d0:c0:95:3f:2d:13:d2:d1:37:ae:
ed:d3:1b:fb:1e:d5:9a:ec:5d:d8:8b:9e:b6:4f:32:f4:64:43:
3f:7c:4c:a5:09:84:8d:f7:35:53:27:24:32:d4:06:11:7d:ac:
22:27:32:2f:00:92:47:bc:40:87:9f:51:c2:87:c5:09:c6:38:
97:0d:f8:21:33:d2:b9:b1:b1:26:c7:b0:ac:9d:34:28:f3:13:
1d:37:85:df:a7:1f:3f:1e:cb:07:a0:63:bd:6c:79:82:59:07:
75:39:0e:e8:69:d5:34:44:20:c5:0b:78:d8:12:1a:2e:67:de:
16:d3:d4:4f:69:6d:20:cd:3b:48:17:b2:3c:89:04:10:dd:83:
ff:e6:21:7a:00:d2:b2:15:e3:cd:be:c9:54:5b:cc:b9:5c:2c:
95:b6:4c:8f:ca:54:cb:06:bf:56:9c:5a:52:46:7a:49:16:38:
dd:3f:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:46:03 2025 by rpki-client