Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
File: 12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa (raw, json)
Hash identifier: I/BrUOSjG7zB97q2Ebu+zQDuFTR/SQtbKk4yVyNPBVQ=
Subject key identifier: D8:6D:FE:E8:A1:E2:D2:CF:E0:58:26:A5:2E:84:E5:35:72:D1:EB:3E
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C1A498E6C6161BBEA600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.72.48/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c1:a4:98:e6:c6:16:1b:be:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=9b569eba-5c27-4cda-8b6d-e6c633cabed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:f6:ca:ad:c8:76:a6:6f:fc:ed:31:48:ea:
00:e3:80:98:86:98:df:eb:e0:2c:56:89:09:92:3a:
f1:03:b9:e0:7f:29:23:79:f9:cc:4a:04:37:87:d4:
55:74:c6:9b:f2:63:88:af:59:2f:52:4f:3d:9a:77:
24:9a:da:2f:f4:62:22:b5:4f:c0:c6:1d:51:ac:8e:
a9:64:1e:92:35:12:af:23:43:55:78:1c:52:6b:25:
26:cc:87:d6:4a:67:19:1f:7a:2b:68:23:f2:7b:93:
31:e1:98:f5:11:a2:ba:da:a0:82:00:e8:d0:ba:d6:
ec:2d:f0:71:0f:8c:27:f5:70:87:ac:e6:cf:4e:4f:
ec:5c:d8:93:d1:0f:4d:0b:f4:1a:35:9f:bd:a8:65:
25:86:db:9f:a6:93:b6:c7:4c:3d:12:d2:6d:ae:57:
0a:e7:54:47:c6:23:c0:1a:de:73:d7:b7:0e:26:7c:
ae:ba:e8:9d:32:8f:f9:85:38:a2:a9:3f:f4:ca:54:
29:80:7b:f2:87:c4:ed:80:68:0c:b3:64:fe:7a:28:
cb:6b:70:a5:ee:7c:fe:f3:17:8c:b6:d6:42:c6:5b:
e2:69:2f:25:a5:40:07:92:43:45:0f:70:88:7a:e8:
57:20:07:21:f9:cd:4b:51:9f:c1:54:67:50:ad:dc:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6D:FE:E8:A1:E2:D2:CF:E0:58:26:A5:2E:84:E5:35:72:D1:EB:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.72.48/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1a:08:3e:89:98:d4:53:56:ca:98:c8:df:6b:15:51:7f:89:
85:e8:4e:0b:8d:00:0c:6c:15:b9:0c:cf:77:8e:e5:02:1a:d6:
7d:19:f6:78:d7:31:cf:66:3d:42:43:b3:ef:4c:50:de:c7:a7:
80:ae:4c:6c:8e:32:23:33:84:2d:7e:5c:d1:8e:5d:7e:ba:57:
f2:08:fb:bb:56:2e:0f:78:27:4a:6c:a7:33:f3:4c:b2:40:eb:
d4:c3:f0:8b:bb:4f:74:1f:2e:2d:64:a9:22:06:a0:fd:4c:7b:
97:9b:92:00:81:00:d6:d5:cb:4f:c8:30:93:c2:fc:93:14:bf:
04:37:91:55:d4:29:25:ed:73:21:2a:f0:ca:95:8a:d4:01:04:
f6:89:b2:23:e7:8f:7a:75:b3:8b:6e:8a:aa:72:d4:50:0b:48:
a7:8c:76:53:3b:4e:ff:6b:1c:a1:9b:0c:61:ad:a2:e6:9e:c4:
52:1a:27:e9:42:97:94:7a:7d:52:b6:10:65:b7:10:d0:49:73:
31:a4:b2:61:d1:23:df:e7:88:8b:43:04:7f:97:dc:dd:5d:22:
bc:18:a5:d9:0b:13:c3:bc:96:f0:92:4e:e1:31:f9:57:0d:83:
5b:7b:48:df:13:79:4c:60:44:cb:dc:a2:07:b7:2d:2f:ab:6d:
32:3f:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:09 2025 by rpki-client