Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
File: a6850040-56d1-3e81-afa3-abda2afd2118.roa (raw, json)
Hash identifier: 1z3qwXPTWoFKfXqilQQJmJnAPmBXpnU2FLRfDEMwo90=
Subject key identifier: 64:A8:87:BE:8F:41:E3:41:E9:A2:F4:F8:48:E5:54:41:60:53:C3:3E
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C183059C7820AE503B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.70.64/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c1:83:05:9c:78:20:ae:50:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5dd58be9-7ea9-4c18-9eae-370039e667ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:d4:6b:53:53:cd:58:3e:46:43:54:77:0f:
03:83:9c:48:7a:54:09:6b:f3:dd:95:2c:8e:8f:03:
f0:be:07:d3:40:f9:d6:51:42:a6:66:b0:ee:fc:21:
61:c4:54:8c:24:cb:c3:5e:ca:14:4a:45:4f:bd:e8:
9b:93:06:00:69:da:3c:ed:b1:d4:d7:cd:d0:9f:b1:
91:45:d6:6c:ba:84:02:3b:97:10:84:94:5d:0a:84:
0b:98:99:d2:e0:c8:db:f0:f3:7c:0c:d6:a7:53:91:
c8:70:dc:f1:1b:e2:80:06:9f:65:56:90:ae:24:8c:
8b:74:b4:39:e3:5c:42:28:80:f0:af:45:8f:ad:e4:
5e:82:06:44:88:18:e4:bb:95:78:b1:8f:8c:8d:e0:
fb:ad:88:a2:ae:b7:02:f1:2b:fa:a1:af:de:71:cb:
64:a3:67:6f:2d:30:24:94:7d:bc:fa:09:58:fc:fe:
0b:8d:cd:67:2a:e3:99:ce:a3:9a:05:86:4c:db:51:
84:03:fc:91:9b:c8:db:ce:3a:ed:f6:3d:77:c6:95:
c4:24:d1:07:49:6b:3e:6b:f8:24:b3:53:05:43:73:
e2:f1:69:8d:dd:25:14:bf:8f:71:8d:1b:0e:ca:e9:
21:fb:53:ac:7c:a7:fc:24:2a:14:8e:20:b1:16:bc:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:87:BE:8F:41:E3:41:E9:A2:F4:F8:48:E5:54:41:60:53:C3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.70.64/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:72:61:6a:53:b2:e1:07:03:3e:ea:5a:27:36:f4:ea:be:82:
10:55:bf:21:de:45:2c:59:70:e3:3d:be:71:f9:37:ee:33:ec:
66:06:e3:d2:28:ef:d2:40:f8:e8:f6:e5:4e:88:dd:ac:5c:a2:
3c:4a:aa:55:30:4f:19:6a:bd:b1:8f:42:c4:db:c6:55:58:ac:
e3:83:66:f6:22:e3:e1:a6:2e:52:78:f8:93:d5:9a:1e:9e:ae:
8f:a9:3a:43:a2:5f:19:67:94:75:b0:79:d9:dc:07:63:d0:25:
0a:4c:38:b0:b7:d2:e9:39:81:2d:09:99:37:30:b2:b6:4f:1d:
ad:71:59:0e:dc:b2:30:38:97:37:ba:40:de:6e:16:ca:d5:33:
cb:f9:64:5e:08:64:e0:56:31:ba:b4:ed:59:68:74:be:51:bc:
ea:d1:03:77:26:92:6e:60:cb:4f:e4:fb:81:d2:63:2d:76:a5:
63:4c:87:2d:6e:41:0c:2a:8d:87:c7:b0:c5:ef:5e:d3:da:4c:
f2:a7:2d:63:7b:62:cc:31:75:1c:7b:c9:c5:e4:88:c4:54:2e:
00:29:9a:dc:31:a5:a9:31:41:36:89:d9:3f:af:b9:94:8f:95:
96:f6:56:e9:d3:03:2a:88:d8:a6:dd:49:e1:f6:17:61:c8:2f:
68:6f:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:43:00 2025 by rpki-client