Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
File: 543a399a-5087-3cd5-964f-19091aae8b0e.roa (raw, json)
Hash identifier: XtDFoelShs+yw6owbPuOIgakd8Iy5p6GpaDzI0io8tg=
Subject key identifier: 64:9E:DA:6C:33:CD:5E:2F:E9:FB:4B:1E:95:46:57:35:D4:8F:8A:4E
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325CA34551DF2A7451DAF80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.67.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ca:34:55:1d:f2:a7:45:1d:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=373febc2-0211-4682-9f0b-d095e97543c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:1c:c4:7b:0c:6a:af:3c:59:27:98:be:03:
39:6d:0e:a9:ee:9e:77:4b:9f:a3:f2:a1:80:ad:fb:
bc:f2:59:c7:54:6c:6b:01:17:3b:a1:5a:b9:47:22:
33:85:2e:aa:67:87:b3:ba:76:65:d2:47:f0:74:e9:
28:9f:ba:89:b9:c6:ee:16:ee:62:f7:da:29:91:d7:
be:77:9e:00:21:5d:1a:c1:ab:a0:13:ac:d7:6c:14:
9b:3b:5f:75:07:47:46:d3:65:2f:b7:8f:c2:56:35:
45:32:92:92:80:0e:e2:49:1a:05:b1:ab:e1:11:dd:
79:8d:b2:be:f7:73:fd:a8:71:ac:94:3f:ea:a3:d6:
a3:9e:ab:dd:1b:ee:a8:63:9a:0f:c4:24:0c:72:8e:
0e:b9:8e:ff:2f:7e:34:3f:a0:22:4f:81:80:51:02:
28:75:31:7c:2a:12:eb:d3:03:37:36:13:79:34:4e:
b1:c6:bf:53:55:ce:7f:e8:6e:d5:cf:cf:54:b4:ad:
ac:b9:ae:f3:40:86:3f:d8:2b:64:2f:79:a5:b2:db:
00:0b:c8:7a:61:89:be:9a:ac:08:65:04:d8:73:1e:
69:f4:bb:0f:a2:82:70:79:38:7c:dd:2d:28:e5:23:
25:ce:5b:6d:64:7f:b8:02:99:e2:de:7e:f9:76:ce:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:DA:6C:33:CD:5E:2F:E9:FB:4B:1E:95:46:57:35:D4:8F:8A:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/543a399a-5087-3cd5-964f-19091aae8b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.67.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:cd:2e:1b:48:6d:34:41:99:37:86:5d:a0:bd:eb:c4:6d:74:
bd:f0:47:a0:f4:79:7b:4e:73:0c:c3:bc:a9:97:a7:f4:28:df:
a3:31:80:52:f7:40:e3:d6:c4:40:ce:1d:ca:91:2c:39:85:01:
6c:c5:b2:ab:11:ca:f8:e0:bc:a3:af:7f:4a:5d:50:e0:b4:22:
44:b8:93:e1:9f:e0:d4:e8:27:ec:ef:0e:03:45:d1:0f:a0:6b:
bc:45:b0:7f:d5:42:a6:b6:8c:17:f9:04:2c:14:3e:1a:3d:bb:
b0:5c:08:f9:d0:06:45:ed:37:e3:b0:4c:b0:c5:04:dd:c7:6e:
c8:ea:e0:f4:c6:93:92:cb:24:c0:ce:ec:fb:7c:b9:d1:0f:0d:
b2:9a:3b:00:71:d2:c3:e8:63:5c:cf:92:c4:b5:ba:4a:78:63:
10:79:6e:f8:32:a0:2d:62:2e:1f:ba:52:30:8e:24:42:1c:35:
94:ad:e3:5e:65:df:b3:75:e6:be:29:75:97:ee:3d:9e:3d:36:
8a:8b:74:16:cf:36:ef:80:08:dc:53:62:5c:74:a5:dc:72:c2:
1f:aa:04:f1:6e:28:ab:a1:fc:88:58:0f:f0:b9:af:dd:fb:1f:
f1:49:3e:75:2c:c1:b3:cf:13:97:ab:53:e9:08:71:97:ea:1e:
81:8a:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:10:39 2025 by rpki-client