Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json)
Hash identifier: 5ZYKTlLjinnKXROCQQ6gftf5ZqpJXaYCGnZEi+brI+o=
Subject key identifier: 88:1D:CC:97:A6:10:C1:EC:B4:0B:4C:EC:13:58:92:4F:BD:4C:85:81
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858486960590CE13E8E52BF910F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.111.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:59:0c:e1:3e:8e:52:bf:91:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=5f6fefd8-b9fd-433e-af42-219fd935bd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d2:ea:a2:4b:48:2d:da:1b:2b:24:c3:1b:34:
db:77:b4:dd:d8:14:e0:72:23:f8:2d:76:2c:25:a4:
83:e0:91:eb:8a:51:8f:5a:34:f9:be:f1:1b:f2:33:
23:94:a5:37:e9:e0:ff:e9:26:bf:74:0e:0e:dd:7f:
09:72:66:03:2d:f7:0c:c3:57:c5:d6:c1:f2:4b:36:
47:f2:f0:1c:84:93:e7:61:97:c8:c7:f0:2c:e2:2d:
9d:99:6f:82:63:8f:32:a0:d8:d0:bb:3d:c1:cb:5a:
b2:80:65:13:4a:66:74:e3:d5:91:86:69:8e:37:aa:
29:57:b2:3f:12:65:31:cc:f9:7e:6b:18:2c:b3:91:
a2:16:ed:2c:4a:cd:05:a1:6b:ea:5c:99:e6:41:78:
54:3c:d1:4e:79:7d:ef:a4:45:03:47:19:89:47:09:
8e:81:4f:43:4f:e0:ce:2b:0b:7d:7f:a5:c0:85:0f:
27:7b:7f:5d:43:14:ce:c5:32:68:ef:80:55:4f:dd:
e7:ff:be:ca:84:76:b9:d1:e5:a0:f0:8c:f2:fa:2c:
f6:c8:0a:22:33:32:bc:7e:3f:69:3c:9a:33:2c:ce:
a7:8d:81:45:38:b1:3d:7e:93:6b:fb:a8:60:10:f2:
4a:18:05:8a:c1:82:e9:70:54:14:9c:b0:fe:2b:9c:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:CC:97:A6:10:C1:EC:B4:0B:4C:EC:13:58:92:4F:BD:4C:85:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:6b:2b:0b:ec:16:51:06:19:c4:32:87:2a:fe:29:a9:a5:dc:
f4:e1:7d:8e:e6:11:76:c1:54:90:a0:05:b6:73:a3:6a:f5:cf:
d4:6c:0e:98:4b:94:6e:dd:d7:39:30:16:18:20:7b:dd:33:bf:
3e:e4:18:bf:60:8f:0c:22:3e:b1:db:ff:9c:1e:7e:71:15:ed:
59:7e:a0:d4:02:5e:99:b4:6e:b2:20:7d:0e:09:f9:96:25:0e:
60:60:8d:70:d1:a5:3a:92:0f:33:3e:36:2b:4c:89:5c:ef:24:
2d:c4:99:55:78:3b:a3:56:41:75:d2:de:55:65:95:1f:a6:63:
9c:5a:a0:03:21:f0:7f:b7:4b:d9:d6:02:d6:a6:c7:8b:1e:a3:
3f:c3:1f:37:d2:c9:77:be:ed:50:61:ce:f9:66:96:84:2d:81:
19:18:e9:d5:ae:9e:f3:44:a1:a2:5e:fe:38:8c:a0:0d:4a:18:
cc:c3:e9:c4:98:31:96:f5:db:72:83:e8:0b:ad:6b:a4:74:7e:
d7:b3:5e:03:2e:39:c7:9e:53:b4:78:fb:5c:33:a6:f7:78:f2:
73:e5:b8:01:e2:7c:80:41:fd:12:e1:3e:94:6a:9b:cf:84:23:
8c:0b:61:d7:7c:d4:80:21:25:dc:b2:59:72:ae:93:f3:41:59:
32:56:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:17 2025 by rpki-client