Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa
File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json)
Hash identifier: 4ns/46PXFkJPMhd5gBpRa0WM+RTMcn7ydMweBIpG7q4=
Subject key identifier: DF:1D:2A:44:DD:54:3F:EE:73:17:4E:CA:9D:57:3D:27:4B:64:49:E1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858481C9A8BC7621E691621B8E900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 172.111.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8b:c7:62:1e:69:16:21:b8:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=4cdf17fe-4de9-4be2-aa8b-7ea20c13951b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:89:03:39:09:25:a3:37:be:3c:ca:41:eb:
cc:c9:bb:b6:ca:f5:f0:7c:81:93:f4:09:2c:da:c1:
03:d2:5f:21:93:be:6f:e0:3f:c8:aa:82:e6:30:1a:
1d:26:57:a5:e7:26:9c:66:79:f1:7a:1a:31:9b:d7:
d2:5a:1d:e3:2e:88:34:d3:6c:f0:42:8f:7f:03:5b:
38:34:46:83:d0:a3:5a:c4:46:71:30:b8:48:54:43:
ae:bf:eb:f9:19:01:86:40:3a:e7:f2:e9:37:84:7f:
ca:c3:1c:7c:48:9e:8b:ef:b2:7f:4b:f7:59:0c:bd:
49:9e:ef:61:49:fa:e3:2c:1c:3b:0c:cb:2b:be:b3:
59:0d:df:b4:6a:93:b6:13:22:6b:d3:cb:28:60:c9:
46:c2:d1:32:ed:22:98:9f:a1:fb:5f:81:2d:50:a6:
0b:53:2c:62:29:3a:cf:fc:4a:06:90:58:1e:fd:09:
62:77:95:01:3d:a6:29:56:67:1d:5a:cc:0d:00:d9:
00:f1:c9:84:e5:12:59:aa:a0:3b:c6:be:90:74:12:
f3:dc:bb:a3:1b:0c:9e:be:38:67:e0:15:05:d2:db:
b2:13:b9:42:bd:1d:ad:79:01:97:de:9f:d6:59:d9:
9a:34:55:ad:3a:11:2d:e9:4b:b3:65:e0:ea:9c:04:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:2A:44:DD:54:3F:EE:73:17:4E:CA:9D:57:3D:27:4B:64:49:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:4d:4a:a5:73:f4:97:80:de:36:c8:98:09:de:57:c4:19:3e:
6e:bf:d9:ac:13:1c:31:6d:0c:1d:3e:3d:57:5c:20:47:f6:bf:
0d:59:bd:6c:6e:b3:08:27:8d:fd:b4:a4:b9:d4:20:ae:c5:b5:
eb:e8:af:1f:a2:55:d9:73:0a:c9:16:9b:4a:7a:c4:76:ec:c1:
f8:fa:7b:22:a2:f8:ab:4d:ee:a3:4f:70:33:a3:47:a9:aa:4e:
ec:a4:a6:63:54:29:ec:63:75:02:f9:aa:4b:44:e2:bc:2d:50:
73:70:04:03:66:56:4b:5a:e0:84:b8:51:a6:38:6e:eb:b9:ea:
5a:3c:3e:c2:b2:7b:c8:5b:f4:4d:02:e1:52:5b:94:0e:c4:52:
29:56:47:a6:eb:1c:0b:22:e1:98:a9:26:fa:ee:45:37:ee:14:
fe:f7:f3:41:77:6e:c6:df:de:13:63:ca:9c:6a:df:a9:12:e2:
c9:c9:31:a7:e3:89:ee:0f:40:6b:fb:c1:fb:40:0b:a6:54:1a:
3e:a2:b2:53:11:10:e4:94:db:be:2e:d2:5b:75:03:4b:09:0f:
ed:06:e4:4f:4d:d8:a4:30:ac:92:ac:6b:8c:01:ee:4b:64:65:
03:13:75:d7:ec:28:fb:a1:4b:1b:b4:ef:97:e0:bb:c0:8a:17:
c1:50:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:31:01 2025 by rpki-client