Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
File: 27696e81-5b54-32f4-b2f8-7949a99a2057.roa (raw, json)
Hash identifier: O7rCoB/JK1X7uZ8pAE13VWGchDaR1rw6oFQD2/Rq7lk=
Subject key identifier: 25:F1:F1:68:1C:F4:C5:10:3F:C6:E3:6E:01:98:C4:F2:B5:D6:08:EC
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C224044220A5FA10CC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.120.0/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c2:24:04:42:20:a5:fa:10:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=4ec97284-6392-4004-aada-a4c15d0176a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:84:3f:d1:ac:b4:d7:15:93:48:8c:f8:f9:
19:74:37:72:61:7c:10:1f:79:e5:70:23:df:c3:b7:
56:87:fe:ff:36:0b:98:31:0e:3b:c8:c8:11:d5:a0:
c4:83:14:91:d0:57:29:d7:19:39:c3:2c:85:ae:c1:
ef:b7:7b:5b:76:a4:ce:68:16:65:cf:79:53:f2:a2:
95:09:93:d6:58:2f:2e:dc:81:55:ec:47:5d:66:41:
69:d5:f6:b1:0a:fa:07:5c:34:25:e7:b0:03:17:ca:
e2:1c:1c:16:10:28:1a:c0:00:e3:6c:a3:b6:08:2f:
b0:fc:04:68:43:cf:b0:3f:ef:e2:40:f0:9a:47:a6:
63:f4:0b:12:ff:e7:10:fc:8e:ee:f1:22:d0:cd:8a:
71:86:a2:6d:eb:a3:09:54:b4:11:4c:5a:af:eb:ba:
36:69:ca:1e:26:c8:5a:55:2a:dd:42:d0:74:f3:6a:
1a:69:a8:db:9c:fc:60:83:3d:06:db:7f:d3:e7:35:
fd:e3:a2:17:c9:20:7b:e8:85:25:86:2f:6e:89:e7:
01:ae:6e:1b:48:74:ea:19:7a:b7:78:ee:f2:37:47:
f8:de:b0:7b:8c:b5:3d:5c:f1:54:80:46:6c:4d:74:
5c:22:00:6b:3c:19:42:70:b8:f5:ec:e0:55:34:70:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:F1:68:1C:F4:C5:10:3F:C6:E3:6E:01:98:C4:F2:B5:D6:08:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.120.0/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:68:20:fc:de:07:a4:23:bc:12:d8:d5:87:7d:91:b1:f3:4c:
92:f1:fd:b6:20:c9:d0:35:15:c5:5c:31:93:03:10:87:86:db:
92:78:eb:86:ed:1e:3c:9c:3f:14:a9:3c:d0:4d:fd:94:74:a2:
a1:48:39:79:15:2c:19:cd:cd:f0:83:e7:e3:5f:55:81:18:5d:
0a:36:99:3b:0d:0f:c4:c0:9d:4b:f6:fe:7b:d4:5e:0a:31:9a:
c6:39:87:1a:4b:d5:36:e3:9a:20:3f:dc:6f:18:50:a6:2e:2c:
0d:9e:22:11:90:c6:e6:6b:08:a6:83:94:b3:14:70:27:cd:20:
77:51:b3:62:e8:c3:ef:5d:3f:09:5b:58:cb:94:37:bb:c2:32:
b8:7e:bf:99:86:53:64:83:0b:65:b2:b4:44:7f:ab:41:c3:d5:
59:01:9f:24:f6:54:c6:3a:81:42:92:18:49:9a:a5:ac:89:95:
0b:0a:af:0a:2e:58:d1:e0:1f:ba:88:ce:b3:96:d5:72:1b:bc:
40:68:3c:55:e6:68:a3:db:da:45:4e:f3:1b:f1:da:60:1e:e1:
d5:60:02:66:03:c5:e1:bb:0f:a0:e0:ce:bb:31:d2:e8:38:93:
dd:f1:da:dd:27:13:ea:42:ba:17:f6:1a:1e:b5:f4:65:b3:ad:
57:ed:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:27 2025 by rpki-client