Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a5a784f-04e5-3220-8a62-a90a32237391.roa
File: 8a5a784f-04e5-3220-8a62-a90a32237391.roa (raw, json)
Hash identifier: cMAxaiuMgkBEawgSbnA9AtI5o/DYoilv2/4Vzkxr2iY=
Subject key identifier: 2B:FC:38:96:96:35:5B:73:64:E2:2A:DC:BB:39:54:C8:4D:B8:C7:AB
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C69A3802063B95DC0480
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a5a784f-04e5-3220-8a62-a90a32237391.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.69.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c6:9a:38:02:06:3b:95:dc:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=70bfd889-e86a-490c-a308-3cb0c1627cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:b1:70:fc:1a:07:f7:86:ba:d6:05:9c:18:
d7:1a:42:17:3e:b7:4f:4e:41:62:2d:7e:29:3e:7c:
3d:c8:df:ad:e1:1d:cc:b9:72:42:ec:8d:55:c4:11:
62:82:a3:4e:49:0f:09:fc:78:77:0d:cc:4c:8b:2a:
e5:92:5e:55:2f:15:27:fb:17:2d:3f:ef:90:69:7d:
bc:fa:a7:d8:34:0e:c2:5d:46:57:a7:63:48:99:50:
82:da:ba:7b:49:be:a6:df:a8:51:53:06:79:ed:ca:
11:6e:32:37:2c:36:a0:21:7f:d9:43:a5:d8:c6:ec:
9f:26:52:b1:3a:3d:09:be:f0:88:27:fe:06:6f:81:
fb:31:74:d8:e6:a4:1b:57:b2:97:61:29:a3:6e:73:
0e:77:36:0b:24:e1:07:ed:16:3d:58:74:d9:25:20:
34:be:49:df:3a:14:88:b4:5a:63:5d:cf:ae:57:93:
9c:a9:25:e3:a7:29:c9:df:39:73:9d:71:39:c4:1e:
2e:ce:45:ba:31:5a:77:03:4b:2e:e0:80:b6:47:f0:
0b:45:6a:bb:56:38:85:1c:9f:01:a8:07:e8:78:63:
3c:10:06:3b:36:02:2b:bf:59:08:c3:90:be:7d:67:
04:6b:72:93:a7:f0:64:58:db:4b:c7:50:11:4b:56:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:38:96:96:35:5B:73:64:E2:2A:DC:BB:39:54:C8:4D:B8:C7:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8a5a784f-04e5-3220-8a62-a90a32237391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.69.64/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ed:3f:0f:11:4e:52:f7:36:9f:8d:75:dc:e1:61:32:f2:68:
1c:a0:01:13:9b:8d:78:7f:31:72:d1:1e:78:d0:38:ce:36:77:
ba:d0:3b:fd:a6:cf:63:f9:da:9c:1b:1b:a7:88:ce:80:35:bf:
59:b1:ea:7c:7f:09:0c:6d:20:78:ba:0e:6d:e6:ba:eb:b1:66:
2a:d6:f1:88:41:4e:4d:a5:18:10:a5:ab:66:48:f4:15:70:49:
dc:17:01:d9:40:f1:a5:68:b8:cc:a2:93:72:14:f3:f6:44:1e:
7a:0f:77:67:dd:cd:b4:d4:fc:db:c5:2b:46:fa:69:b2:a1:c0:
12:b9:3c:7d:5a:80:d3:fe:19:d7:d0:7f:93:57:7d:2c:49:18:
c2:be:4f:6f:65:d2:46:64:b1:fe:d5:2e:60:ef:3c:61:fb:0e:
ea:dd:a5:87:34:31:50:e3:19:51:79:78:ea:4c:fc:ae:25:fc:
cd:8a:95:36:8d:89:2e:f4:86:2f:9e:80:7a:3b:77:d5:5a:df:
cc:89:10:5a:de:5e:0d:a3:be:aa:ac:1a:96:77:da:42:0d:8d:
3f:49:ae:95:ed:86:ef:4e:19:5b:4f:3b:17:90:6b:28:35:46:
97:c2:18:46:3e:95:3a:ce:7e:96:57:ef:18:bb:b6:fb:3a:87:
0d:3b:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:31:13 2025 by rpki-client