Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa
File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json)
Hash identifier: Hi2mfdhF9HE1mFFXKAV286cSfNbHVcjl7xBgfHY+ihQ=
Subject key identifier: 92:14:44:5C:D5:E0:3F:6C:D8:F4:2A:71:C1:85:AB:3F:AF:5A:AF:C0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB0DC7ACC525C15097A620
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 3223
IP address blocks: 172.111.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0d:c7:ac:c5:25:c1:50:97:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=1bc29e8d-c68e-42e9-b904-d95933776617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:fa:65:cc:d7:14:f5:ed:8f:78:d8:44:9b:
9b:cc:29:a8:99:3b:bb:5e:87:86:38:ef:af:07:26:
92:a0:6c:56:ca:f4:8c:ca:ed:97:a8:41:46:77:f4:
dd:a8:a2:0f:ef:f0:6b:a0:f7:ce:e4:1c:69:2f:d7:
12:3d:d7:c1:10:a0:53:c0:ee:31:32:bf:4f:6f:b7:
7a:50:e8:9f:95:dc:75:7d:9c:77:6d:93:09:bd:d1:
14:d4:05:85:59:60:de:c9:cf:35:f9:a2:07:c8:2b:
23:26:fc:b2:87:1a:5b:45:be:d8:94:e8:68:62:c2:
9e:1d:0f:94:4d:45:21:c5:3f:51:7b:0c:ea:2d:fb:
94:b4:b2:dd:51:f0:67:c5:1c:06:d7:4f:6b:23:9f:
a5:1d:d2:70:ad:61:f1:1b:0a:a0:5c:6f:04:02:9c:
5c:e7:92:74:a8:7d:7d:b9:91:d8:38:f7:4c:7b:f3:
2b:f4:28:c9:04:d0:55:da:c1:61:34:72:b3:5b:ab:
9d:50:a9:be:57:cc:46:52:41:37:1b:15:62:17:1c:
20:2b:23:1d:df:f4:99:43:d5:ec:e1:b2:68:48:93:
9d:36:dd:6e:05:34:30:09:c8:ec:f8:4b:4b:a2:c0:
22:ad:f3:38:01:1d:df:db:5d:45:0a:6b:ba:fc:b3:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:44:5C:D5:E0:3F:6C:D8:F4:2A:71:C1:85:AB:3F:AF:5A:AF:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:dc:e0:8c:d6:40:09:9b:80:f3:4d:25:e0:ac:db:ae:64:2f:
b2:68:63:7c:1b:d7:6b:08:09:00:86:64:b9:6e:69:f9:27:b0:
e4:8f:2e:6d:42:77:1e:03:f1:35:e4:55:8e:67:3e:da:6a:30:
6e:59:10:6d:7e:ab:f8:df:96:02:78:ea:3d:05:dd:b2:a0:31:
13:4d:4a:f9:91:8e:d8:95:73:14:fb:6e:1d:3c:02:d1:25:40:
e3:08:be:44:a3:60:85:ca:c6:a5:ac:19:ee:bf:d9:20:32:ec:
10:7e:ee:f5:4b:8c:15:a6:d2:6c:62:d9:19:50:aa:50:80:27:
6b:9b:5d:1a:b9:3a:72:f0:26:50:83:c5:5e:88:c0:7d:50:f6:
be:d1:c6:43:42:3b:ae:6b:f8:e0:69:e9:02:94:ba:37:2f:12:
a9:da:df:a7:d2:e8:4c:34:df:f3:39:51:48:90:7a:89:13:68:
3a:fd:12:8d:ea:66:65:7b:f9:64:87:38:c4:15:52:c9:05:1b:
57:42:f3:26:12:dc:02:da:42:1b:46:16:29:93:5d:5f:4d:f6:
c1:a9:a3:e0:91:13:f2:8c:76:db:4e:94:0a:99:6a:be:df:0d:
dc:b3:37:04:4a:c2:fc:01:f7:6e:04:09:89:ad:6d:dd:fe:af:
da:fe:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:00:34 2025 by rpki-client