Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json)
Hash identifier: nYbS+EBhtzX9+zTwbx/eTqjCZhdJO/75cm1xTQz6tuo=
Subject key identifier: 12:E9:4F:8A:93:E7:12:99:D9:C4:17:EB:66:11:22:BF:66:91:C2:F3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847EB40FAE5DA63F76722DAF900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
Signing time: Mon 18 Nov 2024 09:45:50 +0000
ROA not before: Mon 18 Nov 2024 09:45:50 +0000
ROA not after: Sun 16 Feb 2025 09:45:50 +0000
asID: 16509
IP address blocks: 172.111.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:eb:40:fa:e5:da:63:f7:67:22:da:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 18 09:45:50 2024 GMT
Not After : Feb 16 09:45:50 2025 GMT
Subject: CN=eaa8ac1c-fd9c-4d63-9df8-465dcf29c51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:1e:8b:be:f9:a7:f8:f5:0f:72:93:cb:ce:
e4:3b:dd:ed:c4:db:e0:54:3d:18:55:14:bd:5b:e6:
6f:7c:6e:6e:02:24:72:2f:f8:52:75:1d:14:40:b7:
45:a4:a3:20:38:ed:4a:51:24:d6:20:ae:53:ae:0d:
b5:db:1e:64:53:25:9f:1b:23:c9:7b:9c:d9:f0:7a:
17:1d:a8:05:ee:7a:ca:05:7f:42:68:84:53:59:2f:
e6:03:15:66:98:b7:98:76:c7:0d:fa:75:01:12:99:
60:d0:8d:bc:91:61:a5:88:73:f5:c8:29:33:c0:b5:
20:c6:a5:ae:e7:d1:20:6d:e7:41:66:7a:27:11:4c:
f1:99:0a:dc:99:12:2d:f6:a2:c3:d4:8c:c5:87:7c:
a9:e3:7a:ef:ae:5b:91:0d:a0:34:67:90:ae:6f:d4:
9a:fe:f1:77:f5:5a:ff:32:36:90:8b:4d:f6:39:fc:
b4:82:91:af:83:dd:98:17:34:d7:89:34:32:bb:2b:
d7:9d:0b:10:fe:e8:7d:45:87:36:5e:bf:78:84:ee:
78:49:bb:5c:eb:0b:e0:9e:24:e9:8e:00:2a:ef:33:
2c:68:36:9e:aa:5d:f8:f4:cf:7b:25:ec:a8:55:13:
9a:54:b3:ae:0c:43:f4:d3:44:33:a5:fa:4e:ba:e6:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:4F:8A:93:E7:12:99:D9:C4:17:EB:66:11:22:BF:66:91:C2:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:7b:7f:53:ff:de:19:25:19:55:98:b6:b5:22:46:90:7d:b9:
7b:f0:6b:4b:98:63:b0:83:b5:50:b6:b3:fa:39:1d:f0:3c:62:
86:dd:83:49:00:6b:30:47:fb:17:71:f4:8e:8a:3e:c2:2c:fa:
dd:cb:2b:11:32:af:13:50:aa:4c:fe:36:0a:21:9f:63:49:2a:
ae:29:e3:58:46:aa:43:19:34:b4:8a:98:3e:f4:ff:c1:e5:46:
d0:09:3c:89:78:f3:1d:bd:e3:84:84:65:f9:0b:d4:bc:99:b2:
3b:96:b9:a4:4f:ce:c1:58:93:80:ff:a2:21:25:0e:8a:22:35:
8c:c5:2c:8b:f9:fb:f0:26:07:1e:21:bf:f7:33:54:01:81:8c:
cb:b4:75:01:9b:f4:12:6a:80:d4:ef:44:e4:75:87:b6:03:f6:
54:dd:8c:93:3f:bd:ac:08:75:31:46:64:f2:a4:3e:59:e5:e3:
a3:d0:d2:e9:3e:9d:99:e5:20:61:00:5e:f3:43:95:e7:ae:71:
49:5b:ec:bf:f0:11:e6:06:bb:dd:ff:0a:e5:02:63:e6:92:70:
eb:85:a6:26:0c:c6:f5:4e:27:91:d4:91:0b:63:f8:ba:c6:34:
ea:de:e6:85:6e:5f:d0:c0:81:42:33:89:56:6a:b5:5b:6f:77:
39:d3:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:53:44 2025 by rpki-client