Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa
File: b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa (raw, json)
Hash identifier: GSRyRL0UK5lUfd9WTi+vNEGqWeJy1RlTxIUg3bO4DUg=
Subject key identifier: E7:81:AC:42:88:5D:2F:88:B2:CC:3B:93:81:EC:0C:27:D4:61:57:72
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C786956B041F0E236200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.122.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c7:86:95:6b:04:1f:0e:23:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5cd11d46-367b-4e45-a300-b7151f966b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:58:44:b3:00:37:00:91:26:fa:5c:05:6d:
0b:52:b2:5a:14:e8:8d:b6:8d:41:11:8e:c4:ed:cf:
77:86:87:54:bf:d0:1b:5a:36:35:eb:fb:71:13:fb:
ce:7b:41:af:fb:35:04:34:cc:4a:16:7b:da:1c:8e:
45:8a:7a:19:8d:21:b8:b1:1b:00:84:e1:32:c3:93:
cc:c8:18:35:d2:31:c0:5a:a1:d9:7b:94:0c:37:82:
bc:36:85:62:e8:27:fa:de:b0:75:23:e3:a1:1a:ce:
f5:0d:f7:f1:a8:57:95:1e:39:1e:44:24:75:d9:59:
25:16:ce:65:48:2e:fd:7f:84:ef:3f:91:da:b9:30:
40:3a:b4:9c:83:d4:9f:df:c2:11:84:ac:4f:d2:7d:
bb:60:8a:cd:71:75:cf:e7:bd:c6:06:01:fd:9a:ef:
01:d6:a6:3f:2c:ab:33:73:76:da:f6:b0:e6:e6:61:
9f:8f:4c:a8:64:54:d0:dc:e1:8c:9b:e1:d6:ec:8e:
e8:ce:86:8f:65:7f:2c:6e:7f:db:d5:c3:bf:03:91:
fe:72:95:e1:1b:d7:69:f0:9a:3e:f5:5f:b9:a1:fb:
18:cf:51:85:df:b9:10:d0:ec:b2:2a:62:6b:a9:7e:
da:fd:17:04:c8:c4:e1:11:fc:c8:5b:18:63:a7:43:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:AC:42:88:5D:2F:88:B2:CC:3B:93:81:EC:0C:27:D4:61:57:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.122.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:51:52:62:52:b6:33:1c:0d:56:a2:bf:2c:74:75:05:91:aa:
92:f6:63:93:0a:75:30:5e:2a:d8:d4:18:8f:59:ea:59:eb:c9:
46:0d:5a:80:63:f1:c1:d7:c8:76:55:9d:19:93:2a:46:4e:fa:
ce:68:ca:e3:2b:61:ec:63:61:33:6c:28:0a:54:27:dd:53:e4:
e0:9b:c3:51:b4:c4:17:97:c4:05:54:c8:79:4e:5b:18:9a:99:
18:7c:d0:96:ba:be:02:c8:0d:56:c1:c5:c1:f3:a4:b5:cf:e6:
e1:82:f3:ee:df:1b:09:3c:62:f5:2a:96:41:f9:8e:37:90:e7:
78:44:31:95:ef:a2:1f:19:7d:99:4c:be:73:fe:ea:4a:52:ec:
15:bd:bd:2b:17:21:ec:6b:01:ce:7d:c9:a2:14:f2:a8:c6:e9:
57:5c:20:68:4f:a9:cf:a3:10:68:43:dd:8e:fd:7a:81:c1:04:
c8:a7:ab:70:95:29:21:76:fb:fe:1f:90:e6:86:5b:26:2a:6f:
f0:10:04:4b:2c:cb:e3:0f:44:6a:10:e9:4d:80:fc:84:46:85:
6c:4c:f3:89:b2:ae:7f:9b:3f:69:78:2c:53:d5:3a:34:64:5f:
cf:18:36:7c:e2:73:12:8a:7c:30:22:e1:f2:f4:3e:aa:31:79:
65:b3:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:15 2025 by rpki-client