Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa
File: deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa (raw, json)
Hash identifier: SbHeVaL6TWsRnA8QtnPgklLm1eDkKV1LXU8DVsX8QBY=
Subject key identifier: 4D:44:F9:72:FA:15:E0:EE:C2:F1:B1:77:DC:43:54:83:81:1A:CC:09
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C24744B07670CD8BF800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.122.0/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c2:47:44:b0:76:70:cd:8b:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=d8e06ed2-e533-445b-b684-40f7ca11c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:42:a4:5d:70:f9:38:04:bc:2c:56:2b:6f:
61:d9:fb:f1:da:4d:2a:d9:8b:3b:d2:c4:df:d0:c3:
4f:c1:7f:41:4f:b5:a8:33:64:62:c4:91:56:cf:87:
88:93:eb:51:c4:e1:91:e1:8d:0e:15:87:30:60:9c:
73:7d:e4:9d:70:d2:d6:fd:48:c5:74:49:79:21:47:
d4:ac:a1:8a:02:53:65:80:67:56:1d:e7:b0:b5:ac:
75:c8:62:fc:74:10:91:05:3b:45:d8:dd:25:4f:b7:
71:fa:44:68:79:d1:f2:f6:e1:bd:76:0b:73:e8:09:
80:1a:d9:bc:5c:a7:7b:90:05:8b:c2:76:fd:23:c2:
75:08:24:f6:4d:31:04:be:31:54:32:00:a6:76:c0:
5d:89:d5:21:3f:6c:89:cb:5f:89:87:67:ac:f5:03:
70:ab:1a:48:bf:4b:fe:cb:3c:51:bf:29:2f:87:3c:
d8:47:e7:76:a5:59:f8:95:c9:75:0d:8e:3a:46:77:
44:50:bb:f0:b9:7f:d4:61:14:aa:95:e7:11:b1:81:
48:d0:29:81:9c:5b:d9:b0:d0:d0:13:10:46:d3:11:
fd:54:0b:0b:a0:54:02:a3:86:fb:86:42:4e:f7:86:
c0:7e:e2:7d:4c:4c:33:84:61:5f:a9:62:35:31:12:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:F9:72:FA:15:E0:EE:C2:F1:B1:77:DC:43:54:83:81:1A:CC:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/deca1d9c-f58c-3c3e-bc17-07dc1e801f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.122.0/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:95:03:42:59:f0:b5:94:01:a5:52:15:bd:f2:46:26:e9:e5:
91:91:35:dc:d8:40:59:a2:49:7e:cc:67:57:2b:78:67:59:37:
14:1f:59:64:40:91:78:1d:25:3b:53:5a:65:83:b1:fc:97:2f:
34:bf:b9:e6:c5:2b:1d:61:c0:4a:ef:c8:17:ae:e0:4f:d8:53:
03:eb:c6:e6:f3:75:4c:94:5c:95:cf:89:73:10:2f:2e:eb:49:
2f:94:39:25:88:67:8f:83:f1:ec:b5:e5:bf:b9:33:de:52:73:
bf:7a:61:e6:82:e9:f6:a6:3d:ba:40:57:75:e0:39:75:21:1b:
5e:03:07:52:e4:5a:66:6b:44:c8:98:dc:86:03:1f:67:6a:a1:
83:30:d7:ae:f4:0b:ec:e4:a4:65:55:93:74:cb:49:64:be:41:
fc:8b:ce:0e:54:b0:c8:ab:5d:b9:12:f6:a6:ab:56:ba:33:7a:
3f:09:12:e0:22:94:ea:fd:f8:f5:ae:98:1a:92:e1:97:d6:e5:
5f:86:5b:30:39:5b:4f:56:c1:69:ad:04:27:29:91:c5:eb:76:
83:54:5a:23:f5:fe:63:3a:f8:89:6c:f1:f4:f9:7e:72:b0:e7:
b3:b0:02:d4:01:45:a2:d0:a5:83:c3:ce:96:cc:ed:90:ff:e7:
6f:0e:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:49:09 2025 by rpki-client