Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
File: 4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa (raw, json)
Hash identifier: ZYoCc6UELKL2lcLl4+ehsUtyGMkEnyL02nb9JMjY73M=
Subject key identifier: 53:92:5C:7D:A8:56:C6:5D:D2:1A:84:D9:6B:17:30:DD:48:A2:6C:68
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C1F92A942F2AEE8992A0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.117.16/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c1:f9:2a:94:2f:2a:ee:89:92:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=682ea86e-d689-47ab-ab89-ce23e8d729d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:af:a2:94:61:a4:ea:c0:f1:c0:b8:d4:ba:
7a:38:ad:55:17:7c:3d:54:ec:6c:9d:2b:48:d9:b6:
1b:4b:9a:0c:d2:11:bc:00:b1:29:79:2d:5d:02:98:
ad:27:6e:f2:17:d8:75:62:a7:c7:b4:ea:a0:32:c7:
db:21:a8:ba:f8:15:de:a6:ac:33:9e:9a:f4:39:49:
4d:ab:09:68:eb:27:1e:c0:49:c8:45:76:3e:f0:9a:
88:80:37:cf:2c:d5:93:f8:c3:7d:d5:88:a3:aa:b7:
b6:48:5f:47:f2:e1:1f:3d:05:a2:1e:da:2d:6f:22:
60:22:2c:5a:40:e6:99:7f:a5:73:b2:9e:9d:95:46:
7c:d0:1d:b8:7b:6a:0e:b0:03:c1:8f:c9:aa:e3:b6:
ba:3f:e0:5d:5c:d0:7e:67:ad:ed:be:fb:3f:9d:a9:
c0:23:76:70:37:ae:6f:8c:87:5b:a4:14:92:38:eb:
d2:18:7c:2a:51:32:1f:ee:c3:06:93:1c:fb:98:84:
83:37:d9:0f:88:d0:41:39:1a:d4:20:e0:52:5b:9b:
ed:f1:d2:43:d0:b2:2f:fc:3a:5c:91:90:16:72:fc:
58:54:a2:c5:f6:ce:b1:eb:4d:58:1b:61:54:06:aa:
8a:18:7c:80:e4:59:fd:d3:c6:48:81:08:70:3a:e5:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:5C:7D:A8:56:C6:5D:D2:1A:84:D9:6B:17:30:DD:48:A2:6C:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.117.16/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:2d:7f:87:da:a9:e9:8a:de:f0:45:a4:1d:2f:2f:2c:5b:10:
0a:0e:3a:bb:66:da:9c:19:ce:83:ff:82:75:f1:2f:7f:f6:31:
b1:17:89:2b:4d:f9:ba:ef:44:d6:58:fe:98:ae:5a:7d:c3:fd:
63:1e:77:32:f5:26:b4:bf:ec:ec:48:1a:aa:21:38:f9:3a:aa:
ea:69:1b:ba:2d:92:16:9c:99:16:8d:97:a3:fb:3c:27:ed:6b:
f3:6a:4d:e5:46:4e:75:d6:87:3c:fd:3f:42:3a:4b:94:19:49:
7a:ba:16:25:67:ac:00:64:bf:ce:5c:ee:2a:ad:ad:c1:ac:f0:
32:45:8c:91:95:45:64:4d:fb:51:a4:d4:6b:90:3e:84:38:6f:
ac:cd:73:ed:44:2a:24:5f:f9:10:50:e5:bb:08:15:31:44:59:
f1:67:57:4f:1f:08:c4:df:4a:ae:f8:16:43:ec:5a:5d:37:0a:
88:bd:16:82:c8:83:50:4e:9d:9d:7a:0a:71:7d:be:18:24:51:
2f:12:3b:77:ce:11:9e:04:81:9c:30:ff:13:ad:1d:3c:35:b4:
28:d7:6c:e7:75:c4:8e:32:37:bd:01:2e:de:d0:b1:a6:58:d0:
0d:c4:08:cc:67:31:2b:83:6f:3b:30:ea:bf:be:b1:07:3c:76:
e1:d9:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:38 2025 by rpki-client