Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
File: e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json)
Hash identifier: TzdsjXxkr+lU54VY591uNdROprhh9XjQRHVUTT1fHv8=
Subject key identifier: C4:4A:F0:75:55:D0:32:8C:C6:6E:E7:51:4D:20:A5:BA:EB:7F:CE:94
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A57C10B80C1C376004D7A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 172.111.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7c:10:b8:0c:1c:37:60:04:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=2c505e01-d05a-4f02-8397-e56bf87819ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:e0:c9:26:4f:60:c3:18:49:fb:26:66:54:
eb:4d:53:dd:74:e6:44:27:fc:7f:63:93:97:1b:9d:
42:a9:47:9c:45:b6:ec:54:03:be:30:1f:9d:f6:b0:
8c:bd:8c:b9:bf:55:33:b9:0b:00:cd:5f:db:1b:bf:
ba:91:15:ff:4c:c5:07:58:a5:3b:34:fd:07:da:85:
77:bd:1a:a2:58:ce:7f:83:5b:5a:17:d5:cb:cb:ce:
12:e0:8b:9c:67:2b:bd:e0:dd:20:68:78:43:18:94:
87:3e:d3:18:71:dd:ba:64:e4:63:9b:4c:6a:c1:00:
17:8c:5b:c8:fa:8f:c7:26:2f:4a:7b:3e:81:f9:5d:
b3:01:d1:c7:95:88:5d:53:17:69:aa:dd:3d:a9:14:
a4:ea:9c:cd:19:f8:54:37:f6:bc:28:c5:e4:43:35:
86:2e:f2:72:a6:4e:51:98:a5:f2:a2:5d:70:98:62:
af:b2:cb:8d:3a:a1:3b:e9:aa:e7:bf:e6:85:e9:47:
24:30:7d:85:c5:ed:5b:6c:5c:50:80:e2:ab:19:a3:
aa:46:60:ab:40:dc:17:09:7f:7c:cc:79:84:fc:c5:
84:6a:ff:7b:79:00:d5:3f:70:15:87:95:33:c5:d2:
20:a9:20:03:12:88:f1:29:25:8f:88:0f:3f:58:4c:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:F0:75:55:D0:32:8C:C6:6E:E7:51:4D:20:A5:BA:EB:7F:CE:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:38:db:f5:e4:29:bc:b8:e4:49:ae:97:60:a8:47:2d:3c:40:
c6:7b:f8:d1:a3:90:aa:e8:4a:4f:fd:ca:24:12:65:49:f7:98:
ac:ec:fe:11:35:f2:12:be:88:04:17:5b:98:fb:94:f2:18:81:
f2:03:fc:53:20:4e:ec:40:b2:22:e4:f5:b3:04:01:75:b6:db:
33:b4:b2:c0:3c:38:1e:41:74:80:f7:65:ed:a3:6d:30:f4:fa:
ad:66:86:e1:7a:65:21:64:53:8d:f7:c0:a3:94:b1:e6:8b:df:
5c:07:d8:96:86:61:82:51:ae:56:fc:5d:7b:5c:5b:47:ed:83:
8d:8f:3f:dd:d6:89:18:6a:6e:3b:d5:ba:67:07:21:16:8b:bf:
3c:0a:fc:85:61:73:62:5a:a3:41:4e:b3:7c:6e:19:fb:93:55:
9f:02:d2:83:a8:b4:84:1e:30:60:90:19:4d:97:9e:dc:85:db:
9f:62:50:4d:11:27:c8:9b:db:8e:fa:3f:c6:96:dd:35:2c:16:
f4:1d:45:f6:2c:53:db:a0:c3:be:1b:3a:75:c3:ec:8c:a5:74:
32:39:7f:d0:c7:2b:18:7b:41:57:57:f5:74:ee:32:58:ca:ae:
73:da:bc:e9:28:ae:8f:da:4a:a5:b4:9b:df:82:96:cc:27:ff:
f3:61:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:46 2025 by rpki-client