Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa
File: fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa (raw, json)
Hash identifier: Dsa3FEOSHiUMGr/IMnagDwnPaMaTJQNiI1M7Dh47kIc=
Subject key identifier: 91:97:65:30:7D:8E:28:2B:80:55:A6:F4:E5:55:A1:7D:A2:EE:56:03
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325CA7450AAF6897383CE80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.71.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ca:74:50:aa:f6:89:73:83:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=ddcfb3f0-0457-42c1-a4c7-736c4f079a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:3b:c8:82:00:c0:9f:53:51:89:10:23:e5:
79:68:45:f8:eb:ad:ca:d2:5e:2b:5e:c1:b9:c0:c7:
cb:24:11:69:dd:3a:0b:6d:e3:97:35:0b:b9:9b:e1:
91:6d:b1:e9:a2:3e:ae:04:b2:6e:e8:3d:31:6a:e1:
0b:cd:50:e8:2f:0f:2c:09:8d:cb:b6:30:1d:aa:1c:
d5:72:76:1d:b8:ed:2e:62:50:d1:c3:8e:df:27:bb:
90:97:35:53:0d:5a:26:56:28:3d:73:c4:e3:89:39:
e8:3f:ab:03:0e:d1:19:0d:f4:ae:81:c9:c8:77:17:
43:ee:e4:bb:05:d1:ef:83:fb:a2:10:fe:fe:f7:00:
6a:b8:65:92:bd:d0:39:c2:c5:1b:80:88:fd:4e:e8:
ce:6f:1c:8a:57:d2:48:b5:7c:f9:1f:23:ec:e2:db:
41:44:b2:a7:94:fc:a6:4d:72:c9:46:15:9b:eb:68:
6a:c7:a8:ac:9f:df:3b:7d:a7:9a:d1:66:93:4d:ec:
2d:d0:95:d4:33:ba:db:91:2e:36:e6:3e:7c:77:d3:
42:f6:12:45:4d:d2:e5:0a:56:70:d0:f7:5f:27:de:
0f:63:71:25:b9:a8:f9:c9:32:10:4a:a5:cb:d4:63:
e1:6d:a4:13:e6:6c:65:0d:f8:98:fc:48:45:28:84:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:65:30:7D:8E:28:2B:80:55:A6:F4:E5:55:A1:7D:A2:EE:56:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.71.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:0c:d1:7e:9e:bf:10:f8:e5:dc:18:bb:56:73:6d:cd:70:ff:
2c:80:73:a2:35:2c:b8:44:03:87:52:4f:4c:6c:26:b4:cf:e0:
35:05:8b:01:e3:e4:2c:bb:8e:47:ab:7d:e6:0b:a7:4e:bf:13:
9f:f2:e5:e3:29:b0:fc:c6:52:0f:56:c3:96:07:72:04:fd:c3:
59:31:36:85:b1:11:e6:0f:6f:c4:c8:b3:ea:cb:75:0b:7f:59:
a4:4a:0f:d8:5c:73:01:b2:fd:db:ac:57:52:ac:d7:16:70:58:
b1:ea:fe:35:4d:bf:52:70:23:3f:d4:73:1c:4d:3f:5e:53:df:
bc:89:3b:b1:e5:d7:b0:43:1a:8c:bb:43:d7:15:e3:c5:58:e8:
83:a2:ea:40:a5:40:3b:3f:85:ff:29:26:aa:c7:89:d6:e9:d4:
62:ae:29:3a:53:6d:06:de:e7:2c:52:a4:19:dd:2d:78:ae:8e:
9b:f7:f4:9b:58:f2:5d:c5:5e:5c:ed:a1:13:a6:20:0b:dd:61:
90:62:ee:41:9d:54:03:41:b6:90:70:01:19:cd:31:10:3e:0c:
31:b3:1b:ad:91:03:d0:30:13:59:60:91:75:c6:17:78:af:95:
c2:a5:e1:f4:5f:93:10:54:46:48:db:ed:b4:4e:c7:f7:c9:b5:
26:2b:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:15 2025 by rpki-client