Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json)
Hash identifier: QlCbbjU4YQiUJukbBk3FgBlxZCMhkfoQKagQTypL4Uc=
Subject key identifier: FD:5F:0D:54:69:22:4A:2A:D3:A0:5A:9D:36:58:70:C5:85:EB:E2:32
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858483F8036BA4F9661A7A41EC780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.111.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:36:ba:4f:96:61:a7:a4:1e:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=2ea3813b-a14c-4b65-bee9-3648573f7f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:a4:25:72:8b:d6:e6:f9:5c:a6:ba:56:b6:
87:60:a5:1e:3d:6a:0c:86:3e:d1:f1:4c:cf:48:50:
bd:e7:81:b4:09:41:93:24:d7:5b:3d:f7:f5:ed:1c:
23:58:21:61:97:49:4f:fd:bd:26:ec:bd:77:0c:a2:
83:fd:c9:b7:2c:3a:52:f0:01:e1:64:43:15:ba:c8:
b5:d4:a5:76:c6:23:97:8b:dc:7f:59:0b:86:d9:65:
50:4b:7e:a9:d6:4e:9d:31:36:64:c1:74:e3:4c:14:
a3:e5:95:46:46:9c:dc:5b:54:9a:a8:e1:a6:95:9f:
33:a4:b8:7f:d0:7e:76:1a:a1:38:99:22:18:f7:fc:
d3:dc:41:98:6c:61:ba:d6:00:fd:af:9e:89:d8:a5:
df:20:50:6a:05:5a:f7:20:82:d2:3d:9d:27:85:13:
bb:60:fb:8d:73:a5:84:4c:e4:7b:44:4a:5f:5b:ff:
28:59:bb:45:58:fe:51:38:00:e2:53:26:e0:d0:b3:
2f:f3:c4:79:da:8e:9b:4d:61:75:88:3b:d9:b4:f7:
66:7c:a0:d8:f9:a9:3a:db:22:b7:7e:78:25:fe:b5:
91:c2:5a:20:6f:61:44:5b:e5:dd:f6:90:ca:64:24:
51:b0:d6:bd:5d:08:17:9f:fc:25:16:84:41:33:6c:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:0D:54:69:22:4A:2A:D3:A0:5A:9D:36:58:70:C5:85:EB:E2:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fd:7e:21:36:9a:3f:d5:49:c5:a2:f3:f4:9e:d6:47:db:ca:
d0:c9:f2:48:0c:b9:0f:01:3f:8d:86:bf:d9:20:16:c3:e3:8b:
88:25:e0:82:a3:27:cf:8e:a3:83:f7:54:f2:9a:11:a0:c2:d2:
d0:63:74:d0:c7:66:82:00:16:58:ec:55:31:f5:c5:86:69:3b:
da:49:c8:45:44:ee:36:e9:df:37:95:8f:81:0f:1b:74:f8:2e:
9c:94:10:90:e9:5d:84:52:68:fc:d1:97:75:d3:16:2c:0e:8f:
aa:95:5c:fb:72:c6:cb:c7:bd:e1:3b:35:8b:eb:31:a7:f3:14:
fa:53:02:ce:60:cd:46:9e:d2:7a:5c:45:b6:a5:95:fe:f0:c4:
65:c2:e3:3c:52:f5:0d:6a:eb:2f:66:58:05:b2:87:1a:50:ec:
ab:8f:e1:c3:b5:b2:4f:42:f0:60:a8:42:6b:62:be:28:c9:cc:
2a:24:dc:42:36:f7:06:8b:19:9a:d9:78:ec:d5:cb:3a:7c:b2:
0d:b2:55:79:75:a2:ef:44:da:80:22:ad:9f:a8:8d:70:ca:0f:
be:0e:5b:88:ca:c5:78:1c:25:1b:4b:99:c5:29:14:5e:ea:f9:
b9:5f:c7:9a:cc:b1:56:22:98:43:d1:db:5b:3c:13:7e:5d:ff:
a2:98:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:12 2025 by rpki-client