Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
File: 7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa (raw, json)
Hash identifier: jD7twywvhtDxVlL51u1cR9tQRAjQNyZcNKKnJr6vEco=
Subject key identifier: 1A:68:83:33:B9:C8:02:88:91:9A:72:07:C4:B2:70:A9:AC:4D:FE:DB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584819CFD54E43A9473B25523440
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 172.111.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d5:4e:43:a9:47:3b:25:52:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=76f99fc0-9fbd-4dcb-acc4-d3e119f31f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:7a:f5:11:c1:0b:11:f8:87:7a:19:3c:c9:
3b:49:52:23:f5:52:1a:78:4e:73:30:81:b8:eb:35:
a0:0a:e2:cb:a8:0e:27:ea:31:8b:9f:e7:0d:29:ef:
75:0e:76:af:f1:6f:b9:74:57:84:bf:78:55:a0:f8:
e6:c3:e3:f6:8a:ee:75:16:37:61:c0:02:38:08:49:
6a:2b:3d:10:4f:93:03:2a:76:97:49:a8:a6:4c:f6:
9e:93:b2:cc:bd:83:e5:91:df:44:28:fb:13:c1:90:
65:46:9d:c0:4c:52:e2:91:16:39:e2:d2:10:c9:05:
4a:ce:08:e9:f1:71:22:8c:79:3f:48:53:29:9c:c2:
71:d4:a2:5c:ca:1f:ae:6e:7a:39:71:dd:45:a9:89:
13:80:eb:c5:1f:21:2c:d5:5d:32:67:62:4b:48:9d:
7e:b4:f9:eb:e2:5c:71:6f:22:9f:bb:c5:da:48:7d:
03:9f:77:9b:d2:37:09:55:63:9d:0b:70:0d:a3:08:
08:e3:91:26:7a:56:81:c7:27:b0:6d:4d:c7:2b:6b:
78:4d:52:2b:6d:45:8c:4f:57:a1:3d:65:ec:a6:bf:
d6:a9:62:00:44:6f:60:bd:70:8d:c9:7f:88:11:3b:
6b:f1:ea:e0:dd:47:d0:22:88:fb:e0:37:22:c5:1a:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:68:83:33:B9:C8:02:88:91:9A:72:07:C4:B2:70:A9:AC:4D:FE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:eb:e8:47:48:38:52:d5:0d:d8:75:8b:10:0c:7f:9c:22:66:
60:0c:17:c4:eb:37:a2:c6:5c:e4:91:6d:6a:4e:47:f9:1d:41:
1d:4e:0f:1a:13:c8:eb:ea:d5:ac:59:da:b9:6b:b0:5a:db:de:
cb:77:c9:f1:c9:cc:84:b5:1d:06:29:cd:9f:92:26:e8:66:3a:
1c:76:ff:cc:ea:8a:4e:6a:b1:f7:4c:f9:e8:80:54:86:90:5b:
6b:a8:bd:5d:44:0a:e5:9a:ad:42:62:c1:e9:2a:eb:83:fe:fe:
3f:0b:d4:e6:5e:20:28:b0:1e:4e:3e:94:89:5e:1d:43:68:2c:
7e:0f:22:dd:f2:82:15:82:f0:9e:dc:06:c3:2d:04:d8:95:38:
8d:b7:a6:0e:eb:66:3e:92:2e:ef:a5:af:e9:f5:13:e6:b1:0c:
d0:f4:68:f4:b3:3a:d2:ee:89:c7:2b:41:69:c5:44:74:bb:32:
33:8e:2d:c7:a3:3e:97:03:1f:42:c0:b0:d1:f2:b6:c3:91:82:
69:cc:9c:31:b1:bd:55:90:47:b5:c6:11:6d:96:08:dd:6e:77:
37:8b:7b:ba:4a:47:d4:7e:ed:37:44:30:f1:f0:e6:24:a5:40:
77:1b:e5:63:98:cb:60:a4:fc:0a:aa:0d:cb:24:e6:74:c0:e4:
87:3d:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:18 2025 by rpki-client