Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa
File: dd286b0d-fea4-3601-918a-5d36548adbf8.roa (raw, json)
Hash identifier: NZ/BQqADKGNrdznnVGLRWBcdZfRLC6wakCN757rIHGI=
Subject key identifier: 9F:84:0E:17:0F:39:E5:32:65:63:7F:8C:8A:56:62:43:7A:ED:61:D1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847DD547907650E473A420121A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa
Signing time: Wed 13 Nov 2024 10:03:48 +0000
ROA not before: Wed 13 Nov 2024 10:03:48 +0000
ROA not after: Tue 11 Feb 2025 10:03:48 +0000
asID: 53356
IP address blocks: 172.111.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dd:54:79:07:65:0e:47:3a:42:01:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 13 10:03:48 2024 GMT
Not After : Feb 11 10:03:48 2025 GMT
Subject: CN=a6d98040-ede4-451e-bfb8-11eca35161af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:8d:81:b5:19:68:00:e0:21:48:5c:cf:7b:
7a:89:d0:7d:7b:f6:08:eb:b9:52:ae:3d:c7:f9:04:
98:3b:02:96:e8:6c:e5:c9:a6:9f:55:4d:82:f2:7a:
f9:49:5c:97:07:9e:10:27:92:b7:31:4d:10:20:e6:
51:88:ff:ab:d5:02:15:8f:23:a4:d6:b3:0a:a8:9f:
14:5d:fc:2f:48:a3:dc:17:87:89:de:ce:b6:e1:9c:
68:58:1b:43:f7:7c:aa:d3:0a:a5:44:c5:c5:31:82:
99:05:16:93:fd:fe:c4:9b:cb:c1:86:23:aa:91:36:
44:2f:c6:b3:1a:f3:ee:36:13:75:2b:e2:e7:f1:26:
4c:a3:ea:0c:4b:11:ae:2e:84:c0:44:1e:3e:c9:d2:
c3:19:ad:02:41:74:db:4d:db:ef:1b:38:11:37:3d:
eb:ce:ba:d1:bb:51:45:8e:98:5b:a5:52:8f:8e:b7:
cf:0c:dc:1c:9e:c9:a5:6f:4b:d1:b5:a3:8a:12:ff:
ba:3a:36:e4:ab:8e:89:9b:91:aa:83:bd:87:16:27:
3e:d1:a3:af:03:d1:b1:63:7e:fd:53:ab:3d:e4:a8:
c2:29:92:d6:cd:7a:39:21:b9:63:e1:d6:61:4c:bb:
72:e3:fd:cc:95:56:22:57:8b:39:df:58:93:7a:6d:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:84:0E:17:0F:39:E5:32:65:63:7F:8C:8A:56:62:43:7A:ED:61:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd286b0d-fea4-3601-918a-5d36548adbf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:fa:df:80:07:1f:ae:57:99:c4:ae:3c:b0:14:d7:79:dc:2e:
19:43:b7:7f:a3:35:90:b2:32:2f:8f:e0:d5:b3:18:6d:16:02:
77:71:75:6f:54:94:5e:39:a1:6b:a2:ef:f5:10:22:0e:53:f5:
6d:59:0b:93:2a:88:18:fe:27:2e:89:1d:a9:41:4f:e9:e8:cf:
5f:67:15:09:30:25:6a:7b:2f:cb:91:8f:11:ce:b9:2d:7b:6e:
ea:f2:e0:71:7f:ca:19:a4:da:88:42:11:ea:ba:dd:bc:ab:15:
37:67:4d:b2:fd:56:32:c1:41:5a:06:36:27:a8:b0:3e:db:6e:
f3:b7:4e:61:55:4b:9a:8b:b2:55:84:65:52:b9:9f:a9:a3:4b:
97:20:9f:f2:47:d5:21:a5:ac:2c:70:a0:46:d9:12:45:74:23:
16:8a:63:0f:d8:27:a2:b2:04:25:48:26:d2:d0:9e:17:49:42:
69:fe:ae:32:a1:73:dd:ca:de:4c:fa:c7:c2:85:2f:1d:66:35:
c6:c5:68:cc:eb:63:5b:81:91:98:65:62:89:81:4f:c3:a3:32:
76:8b:ba:bc:18:0c:ee:f2:ff:46:fa:6a:75:92:bb:7b:a6:cc:
57:cf:2f:80:9e:b6:ce:04:93:54:bd:15:83:04:93:f3:15:04:
25:27:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:21 2025 by rpki-client