Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa
File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json)
Hash identifier: skVcIGAZ2cqO4erFLUDAg+nskq1uiS22s2mX3YHj1Ko=
Subject key identifier: CF:3E:C8:E5:EC:98:0B:58:4D:22:E1:92:D1:A8:6D:43:50:17:A7:E8
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A57C91396E6E4383C81980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 172.111.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7c:91:39:6e:6e:43:83:c8:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=e46fa0f9-3ea4-4ac6-95e3-8f91b96f6430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:55:5a:30:da:6d:a6:d7:c2:11:4d:69:27:
bc:62:85:7d:59:6f:94:eb:26:2a:ea:13:5a:aa:f8:
be:3f:cc:b9:4c:12:33:2c:31:8f:fb:61:e2:02:70:
d2:59:12:0a:81:81:ad:16:e3:cc:25:7d:ea:91:51:
d6:fd:dd:31:fa:c4:b4:82:63:77:6a:53:ea:38:74:
d5:b9:1f:85:e4:df:be:a9:40:b9:f3:33:13:4c:87:
8c:89:43:31:ff:5c:36:8e:95:75:22:e3:57:97:4b:
74:89:cb:c0:74:1b:4d:12:f3:96:ee:aa:66:05:5b:
8b:e0:23:c4:8f:92:03:00:65:01:65:7b:ec:7e:73:
7a:9f:43:30:e8:d0:aa:8d:0e:de:b0:d9:83:d4:0a:
dd:d4:2f:48:01:44:2b:4b:d2:ce:52:d1:69:32:60:
31:32:d1:bf:94:82:8c:54:69:59:34:20:2c:e9:25:
73:c5:93:f0:2c:62:b0:f0:73:51:2f:97:0a:91:30:
8c:d2:64:58:65:e3:94:65:54:34:4a:ae:51:1e:8e:
6e:1e:b6:1d:12:92:e3:8f:54:16:fd:b4:b2:4c:98:
5e:7a:ae:23:a6:5b:1f:a7:50:a4:f3:2b:58:65:65:
eb:6d:69:b7:7f:0b:71:85:9e:c8:d4:c4:ac:8d:f0:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:C8:E5:EC:98:0B:58:4D:22:E1:92:D1:A8:6D:43:50:17:A7:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:9b:ad:21:52:0f:6f:c7:30:7e:99:1a:fa:9c:d7:56:a8:b8:
b3:d3:de:40:b0:61:9e:43:63:8b:04:bc:c7:8c:2e:7a:6a:44:
1a:c2:03:ae:26:e9:44:02:cb:13:c0:57:8c:15:d0:2e:0a:96:
40:fe:1f:0c:96:95:62:50:eb:b8:ec:e8:1f:25:43:e6:9c:e0:
17:59:b3:59:41:32:2b:bd:86:81:12:f6:f4:22:6e:32:fb:28:
47:14:5c:81:cc:42:39:f3:d4:1d:7d:5f:5e:b5:08:a7:8f:61:
39:9c:fb:ee:e9:c3:34:55:8b:19:5a:18:d7:a4:77:5e:9c:65:
58:4d:90:3f:99:40:69:7e:91:e3:5a:fd:ca:18:5b:c4:ac:38:
d2:c5:6a:ca:97:5a:3e:8b:2a:8b:96:b4:55:ca:35:4f:04:be:
90:92:e7:57:b8:64:e1:74:89:2f:63:61:0d:98:5e:3b:71:25:
94:dd:ea:ab:d0:5d:a2:15:b5:b2:20:65:73:0e:7c:12:9d:94:
5b:a7:91:fe:21:0b:38:7e:36:36:c9:b3:b0:95:6c:b2:6b:0f:
39:15:d8:81:33:f9:86:0c:4e:90:a2:ca:17:68:da:ac:d6:ac:
7a:c6:95:cb:77:16:38:ef:f6:13:df:43:90:4a:a9:bb:05:54:
c6:1f:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:19 2025 by rpki-client