Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa
File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json)
Hash identifier: 8p/m9VFtHvaFUl2fahOl0dF3E+yc61nce4imF5XucMA=
Subject key identifier: 7C:9D:74:D3:48:58:CD:51:19:5F:CF:DE:EC:49:3A:52:61:A9:8F:3E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584819CFD53E05302529C8678A80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 172.111.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d5:3e:05:30:25:29:c8:67:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=e9780d9f-e3ae-469a-8672-0a5d8e04b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:0e:06:b4:b9:0e:39:79:c8:f6:ce:61:a8:
7a:5c:2a:ee:4d:e8:34:18:c8:5e:20:12:e8:30:52:
03:49:a4:f5:b4:45:ee:34:fd:b8:d7:87:26:1e:56:
a9:de:4d:67:02:80:91:6f:bc:a5:28:27:3e:4c:85:
52:5a:2c:c0:25:c4:3b:90:05:c8:66:6f:35:44:78:
f7:8e:0c:2c:e3:ee:86:15:a9:10:0f:16:f6:2f:28:
83:87:4e:c5:8f:97:70:17:dd:9c:cc:4b:84:9e:7d:
df:48:b6:3b:98:03:c0:2a:98:84:d2:56:e3:7e:a4:
61:87:0f:f2:72:40:3d:47:4b:2c:4b:17:0d:19:ba:
2c:1c:1e:c3:18:97:1f:cc:06:ab:8d:59:fb:34:e5:
8c:6e:a7:0d:0c:f0:17:b6:2c:eb:02:dc:89:be:e8:
89:27:bc:ac:87:4b:ed:5f:8b:0a:1d:4e:02:8c:50:
d3:cb:21:10:ff:1e:c2:73:c3:8e:72:f1:c9:87:b6:
e4:a0:b6:98:27:3b:16:be:38:7b:42:71:22:01:0e:
51:02:e6:c0:78:de:c8:b0:ee:99:9f:03:24:e8:c0:
a0:c8:be:da:66:f0:0b:6c:2f:1f:de:09:02:29:35:
3c:33:07:ec:0c:fc:43:14:db:44:73:5e:d1:7b:5a:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:74:D3:48:58:CD:51:19:5F:CF:DE:EC:49:3A:52:61:A9:8F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3c:9b:91:f8:11:42:8d:fe:6d:a5:a5:48:07:96:42:33:20:
05:fb:0c:05:a2:99:a8:42:13:b4:00:2e:7b:0b:3f:6f:a1:5d:
05:61:25:bc:2a:a4:37:d2:99:3a:42:46:64:70:7a:d3:51:2f:
e5:bd:ed:11:3e:24:b8:6a:02:5c:d1:0d:78:9d:9c:29:c9:a1:
4d:65:29:60:c3:80:b5:0a:f7:68:e7:93:e5:46:2c:6d:6b:85:
0f:9c:64:1a:cf:07:c1:85:f3:35:c4:8c:35:9e:65:f3:d8:74:
31:54:a0:56:f1:4a:76:b2:91:56:d5:55:bb:a0:f5:76:78:3d:
92:d2:86:f1:60:84:d6:0c:8f:1b:49:f3:ef:49:91:16:12:28:
8b:7f:d1:3c:38:ac:ab:65:10:05:68:32:51:83:29:29:2b:e0:
28:65:78:c7:b8:1c:fc:e1:01:ba:82:f9:7d:3a:56:4b:b0:b8:
00:f3:2e:76:cb:88:59:9a:66:a0:f4:f4:3c:55:4b:a2:26:59:
9c:4c:c7:9f:71:30:14:5b:a7:0c:0a:ca:64:d5:6e:53:44:9e:
d1:c4:43:3f:76:48:7c:7d:fc:4a:d7:5e:68:15:62:72:dd:84:
eb:53:71:f2:89:8a:47:50:ad:29:e9:db:32:2e:c7:76:e3:80:
03:52:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:41 2025 by rpki-client