Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa
File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json)
Hash identifier: VOXe/MgkItVTRjPjEsULzdSTcpKV9zCkVf/Hb/HS44Q=
Subject key identifier: D4:74:48:B0:D9:67:B2:C7:C3:B6:A8:2E:31:D7:D4:46:54:54:9B:17
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A57BEE91BAA1D2135EC7A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 9009
IP address blocks: 172.111.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7b:ee:91:ba:a1:d2:13:5e:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=b2efb6a4-35ad-46bc-a4d0-d1a584263d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:54:71:11:ac:f6:dc:c2:a7:a9:b4:04:47:
47:f6:64:d7:80:2e:50:fe:a8:c8:c8:80:5a:bc:29:
8f:f2:b2:f4:0e:e0:d8:ac:d6:61:4a:4d:22:fb:1b:
55:c2:d4:32:52:36:83:b0:51:1d:53:90:45:d9:ad:
23:83:2c:9c:d8:e1:ca:dc:b6:30:10:25:06:f7:69:
7d:59:0d:1c:c1:8f:01:f6:53:2c:c9:a6:1a:8d:86:
59:28:85:28:d6:e8:56:34:00:62:4d:ac:90:96:4f:
52:cd:92:1f:72:d9:8d:9f:da:6b:66:1e:e8:57:01:
08:39:0f:56:73:6a:aa:54:57:f2:e2:9e:8b:87:04:
1f:a8:06:6d:05:ef:2b:b6:77:ca:76:66:c4:68:b2:
95:8e:b7:0c:83:b2:3e:3f:45:de:b9:89:62:cb:4d:
48:78:f1:e9:f3:1d:e8:9e:0f:a9:2b:e0:21:49:88:
f8:ad:d0:16:3e:71:e7:90:a6:54:96:dc:e0:0b:3b:
55:9c:b1:08:81:2c:6c:0a:9b:48:59:1f:f2:c0:d5:
68:71:eb:6a:8c:f8:c7:b9:9e:74:86:3e:5f:4b:6b:
90:bd:8f:da:13:e0:6b:dd:1d:7b:15:a5:b1:4e:10:
3a:f2:15:9f:f1:10:96:3d:13:6e:b1:f9:6b:05:2c:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:48:B0:D9:67:B2:C7:C3:B6:A8:2E:31:D7:D4:46:54:54:9B:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:86:8f:db:f6:6f:54:8e:d4:5b:59:96:bb:c7:14:40:da:84:
22:fb:5f:1b:69:6f:be:a0:bd:b4:32:15:e5:53:dd:03:ee:4e:
de:2e:0b:24:90:46:9d:02:50:8b:ff:d4:af:57:b6:70:57:76:
85:f0:94:31:91:27:28:d6:f2:1f:0e:cd:56:ce:07:95:06:d0:
d3:56:c0:f5:7f:68:07:c5:a8:59:ad:6b:ea:a6:a1:81:7d:50:
7f:50:35:c0:cc:b1:2e:67:aa:84:a2:d8:2a:07:83:92:fd:47:
14:6e:e8:9e:de:a6:98:30:b1:8b:d6:d9:30:44:e0:01:97:11:
5c:e5:c8:3b:2a:16:a9:2b:39:8b:80:cc:b4:16:92:cc:67:ac:
e4:34:45:eb:0a:3c:54:82:f8:ab:41:ab:1b:5e:b4:e3:1f:ef:
78:68:bd:fd:37:8a:c6:a5:96:49:cd:8e:b2:a8:26:28:36:0d:
6b:f2:3b:fd:b5:00:d6:97:41:48:09:e2:37:82:58:3f:51:96:
79:d7:f4:fe:56:3d:4a:72:9c:eb:b5:6b:dc:eb:40:50:b1:2e:
98:45:8b:d3:f8:be:73:2a:74:f2:99:5a:e4:29:4d:72:ee:9f:
a0:8a:ed:42:12:b0:ab:78:55:91:ea:2f:e1:4a:3c:7b:ac:79:
c7:ea:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:20 2025 by rpki-client