Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
File: 3523baea-e454-3068-b7aa-2b5588e904f2.roa (raw, json)
Hash identifier: WbhCshuSkFNmaigYYHRrke6CYETeJPdkzXnHDRuwyiM=
Subject key identifier: 01:17:37:1A:F3:67:62:1A:BE:3B:36:63:EE:B8:C5:EF:3B:BE:41:36
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C7A45D23DAF0B8AC3340
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.124.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c7:a4:5d:23:da:f0:b8:ac:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=c8b7e01f-2df2-4d93-a495-fb6603e8e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:4a:63:83:a9:67:e7:d0:13:f8:7b:92:06:
82:60:7f:47:15:af:4d:31:94:4e:ea:bb:9b:47:b8:
d8:40:e8:34:04:6c:7f:c0:e3:91:90:55:6c:5c:d9:
87:5c:01:a3:c5:09:7f:16:ae:2f:a7:6d:3b:8e:7e:
91:05:a4:a1:c7:78:4e:f5:23:20:c3:13:38:0d:28:
da:bc:6b:b8:e3:36:88:34:52:01:ae:65:2c:c0:7c:
a0:50:0d:14:e4:b8:91:f6:ae:e5:82:9c:02:ad:d5:
89:4b:61:4a:3d:0a:b5:c3:40:a1:a2:ba:67:c2:88:
f6:43:ad:93:de:af:5e:2e:d8:16:ce:9a:36:ac:dd:
08:61:97:5b:a9:f6:f5:c9:d8:ee:10:d3:2c:81:0e:
72:2d:50:60:51:85:fd:11:d4:25:e0:a1:5f:0d:7a:
e4:21:af:5d:10:7b:bc:ac:b8:d4:6f:23:fe:27:d4:
9c:09:e2:32:79:ab:f3:ef:12:3b:50:12:cc:4f:35:
b6:d3:36:7d:7a:dd:26:db:cb:e7:f6:75:ef:c9:2b:
fd:40:15:40:f4:9d:e2:c3:ac:77:af:00:0a:da:f4:
03:a5:65:41:a4:e2:35:33:97:6e:01:83:2f:f8:07:
dc:d2:81:d0:b7:d1:3a:d9:5b:b7:c4:f2:25:c3:20:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:17:37:1A:F3:67:62:1A:BE:3B:36:63:EE:B8:C5:EF:3B:BE:41:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.124.64/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:d0:5f:d1:68:da:a0:d1:76:96:79:6c:b5:4f:06:c7:f4:ce:
b2:0f:b9:67:30:b7:f4:f7:1e:c9:20:dd:ed:3f:10:90:44:ac:
08:1c:e1:d5:c5:93:0c:76:50:c7:3b:17:13:f8:27:0c:57:cd:
05:c7:e7:c9:0b:8a:00:a8:e1:49:84:14:3d:4f:81:55:43:64:
68:d5:66:80:bc:ba:48:a0:01:a5:da:ec:d1:e5:e3:07:69:f0:
27:61:aa:02:d2:20:a1:ac:4d:27:5f:b9:9d:9e:0a:3d:69:d1:
73:54:a1:ff:20:aa:f4:bf:46:27:4f:b4:44:19:b3:5b:06:5c:
7b:9c:1f:19:08:34:af:53:06:40:73:2d:24:a6:22:20:46:76:
58:ff:bc:31:42:62:5d:e8:97:13:5f:5c:43:28:63:e5:c9:1b:
a2:6f:38:ba:4a:80:1b:37:8a:56:9b:ae:f8:bb:b9:e0:e8:af:
07:79:b9:15:cf:d4:d8:b3:f2:a5:37:2b:81:fa:40:f1:fe:c0:
fb:b4:52:fe:35:49:01:66:9c:64:6d:4f:79:5f:97:dd:00:f2:
37:df:aa:3a:ab:38:34:9b:f9:2a:c9:bf:9b:0e:83:76:4b:8f:
5e:86:e1:3a:68:1d:bd:ed:96:eb:cc:38:05:d5:a9:4a:a9:17:
23:28:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:04 2025 by rpki-client