Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
File: 90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa (raw, json)
Hash identifier: 0KPiSQDJ4FPRiPmAiHFZ4OWxC0jBHUCQnOj+p/rkpFg=
Subject key identifier: CD:0D:0B:C6:F8:52:2C:FC:E7:F6:24:5C:6A:6F:E5:67:6F:BE:E9:FF
Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial: 010D0C9F432858480644F7831AC180D07FE93B40
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 192.111.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f7:83:1a:c1:80:d0:7f:e9:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=5e648a0e-e92d-4dbf-9b66-c35be107bea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:52:02:af:1a:a1:90:0d:51:f5:7f:52:a7:
89:b4:5d:3c:d3:e8:63:b6:ba:4a:fa:97:aa:f7:a2:
63:bf:fd:5c:03:4e:c0:39:87:64:2e:4a:0d:17:a8:
ac:5f:54:f9:d5:31:38:af:55:40:20:fe:08:a9:77:
00:8a:97:86:f0:68:04:05:f6:fd:9b:17:a4:b8:b9:
97:84:10:98:8f:10:4d:76:18:0b:66:d2:85:41:a7:
1f:f5:77:d5:d3:fd:70:95:0c:2f:bd:1f:49:3d:ca:
77:05:9b:4e:93:32:95:57:17:b3:14:a6:0c:79:d6:
8a:12:7f:eb:31:b9:55:7a:3a:b3:52:2b:4c:80:ea:
7d:40:eb:63:f9:47:ef:62:0c:cc:91:6f:c1:9b:a1:
24:bb:3d:a8:f2:2b:83:75:3b:de:d6:5b:62:b8:3a:
07:ea:ca:1e:a2:c0:63:8b:3d:65:66:4d:0e:4d:ea:
e2:37:63:d2:ad:43:d3:15:be:84:f7:b3:8c:03:65:
75:b0:86:d3:24:bd:e4:5b:17:4b:ed:9c:f9:3d:ae:
58:82:63:5e:b6:e7:f6:44:1b:84:d2:c6:c5:2a:12:
72:b0:7e:16:30:d6:4f:2f:96:f2:4c:6a:f0:ea:de:
d4:0d:86:27:f2:f0:80:e7:0a:6c:c5:b3:1c:76:d3:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:0B:C6:F8:52:2C:FC:E7:F6:24:5C:6A:6F:E5:67:6F:BE:E9:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/90f8ae9b-c3b9-34b4-9b38-179d6e5a0326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
X509v3 Authority Key Identifier:
keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:10:5b:b1:b8:de:ab:20:6e:5d:5d:b1:1b:d4:10:24:15:8d:
ce:23:65:24:15:8c:76:3c:fa:60:a1:37:3d:57:d3:78:5b:2c:
e3:2e:69:ab:be:54:68:96:e3:26:01:8f:e6:2f:6a:25:f0:af:
9a:31:7d:9b:0b:b5:d2:0f:d6:ea:85:cb:57:86:89:4e:ed:f2:
70:67:9c:e5:f8:70:1b:5e:60:bf:b2:63:2c:e6:9e:6f:01:9c:
16:7b:a0:81:7c:75:de:4d:d3:4c:b0:2b:2c:82:de:a1:e2:8a:
64:d7:ba:0f:45:84:fe:cb:c7:6f:05:2b:19:6d:2b:3c:69:33:
fc:d1:f5:ab:90:d5:58:5d:dd:03:78:0e:ce:23:45:c9:a4:8b:
18:72:ba:d7:17:c9:fd:86:38:eb:9b:9e:bf:b6:51:5e:05:9d:
e1:9f:20:ce:ba:93:e3:32:da:49:0e:72:ab:ad:93:a8:97:84:
4b:b7:38:c6:94:b2:22:1e:c7:39:0c:74:07:51:db:61:a4:cd:
16:23:4b:2c:5e:c4:0b:ab:bd:df:b0:ec:2b:db:7d:b5:88:ac:
88:10:25:b9:c8:ef:21:9f:9e:85:d2:88:f0:81:42:cd:c3:de:
24:96:43:63:d1:c1:0e:8a:43:0f:0a:be:ba:ec:86:32:40:66:
80:e1:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:53 2025 by rpki-client