Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa
File: 6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa (raw, json)
Hash identifier: 9ekHmQ8cc6N1eTcBemPP4N+WOoqRZfHoCtBpgFkfxAs=
Subject key identifier: E4:53:24:DB:18:57:58:35:3D:D2:BB:66:9C:CA:C9:3C:30:C2:29:26
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486695BCBCE149D17C20D72D00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.111.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bc:bc:e1:49:d1:7c:20:d7:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=b3ce551f-bc81-4201-928d-2a52de69ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:a2:f7:96:af:36:cb:d6:4b:e5:78:f8:b8:
fc:1f:0f:dc:4f:39:0d:f1:13:73:0a:86:e4:2a:88:
96:d4:f1:69:ff:f9:ff:86:fb:06:c4:a0:48:66:f9:
f5:e5:76:d1:c3:5c:14:e3:40:36:07:58:bb:c4:aa:
b5:c2:49:16:83:dc:cd:2e:11:1d:ea:61:16:69:2e:
0c:4e:3a:d9:24:3c:9f:31:be:e6:54:69:4b:b8:bc:
cf:ce:e7:b5:e8:05:a5:55:06:f1:0e:97:cc:a1:dd:
a7:fa:7c:26:54:43:31:f5:a5:b6:90:cd:3d:e8:1d:
3c:bd:1c:0b:d5:bc:6c:e5:e4:eb:f6:b5:72:4c:59:
b0:80:c3:73:5b:e8:34:ae:0d:b4:d5:39:08:98:1d:
1f:d6:e9:db:83:cd:83:1e:be:2b:a4:4d:10:92:ff:
4a:b7:80:0d:da:ad:25:2e:79:0b:b6:43:9b:68:64:
e1:a6:3e:8c:21:8a:ac:84:be:df:ca:7f:44:24:2d:
96:dc:d0:b2:6e:49:14:ff:00:42:66:7c:0d:3e:8d:
63:07:d2:cc:c0:f7:50:6a:94:fb:b2:30:3f:50:dd:
db:72:7f:d6:7d:06:94:b8:52:6a:c1:af:02:8b:9b:
69:44:32:5b:bc:a3:9e:d1:fc:35:f8:13:89:f6:02:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:24:DB:18:57:58:35:3D:D2:BB:66:9C:CA:C9:3C:30:C2:29:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6c385945-dabd-3e5d-a4b5-c6dd31528be7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:80:13:e3:1a:94:bf:63:3b:e9:a0:8a:a1:9a:f9:17:41:2f:
a2:7e:9d:ee:20:6e:6b:71:f6:ed:91:32:74:aa:3a:f9:44:2a:
07:47:b8:0c:9e:5e:e4:52:8f:cb:4a:56:69:cf:1d:e7:bc:97:
9b:23:4f:26:12:88:57:47:d7:d8:27:66:74:6a:75:b2:1c:7d:
bc:a0:9f:f2:91:fd:9f:16:a3:bd:4b:97:9a:3e:3b:c0:68:d5:
a0:6b:b4:87:23:27:30:da:a8:96:0e:90:dd:60:e6:c4:5b:27:
9d:79:20:84:a8:42:5c:6a:fa:58:1d:ec:6f:52:3e:49:cc:24:
61:ee:db:e2:61:cd:31:88:63:ad:6f:62:7e:41:7f:31:99:7a:
cf:e7:3a:5d:7a:d1:a0:e9:63:83:20:46:9c:ab:0d:99:d0:1a:
51:d1:82:68:d9:78:bf:6c:7f:ad:59:b5:eb:be:7b:ea:52:a7:
a4:7f:cf:15:3c:17:b4:52:78:2c:90:ff:af:6c:80:35:40:86:
65:ad:bb:5c:8a:ba:9d:64:dc:f2:5b:0c:45:ab:91:65:e7:0d:
1f:58:f0:ec:0d:44:46:ff:2a:be:7b:5d:fd:3f:ba:f5:a4:da:
e2:88:80:80:ca:1d:3c:a7:a9:c2:dc:26:ad:f1:a0:0a:11:9f:
85:d1:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:11:32 2025 by rpki-client