Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa
File: 91f86db8-b3a9-3f88-8959-fe31be15f550.roa (raw, json)
Hash identifier: vqO7Bar8araGvRLZKi76GkcVn+8TXyJV43kSv3/4KUA=
Subject key identifier: 97:1A:29:D5:48:4A:D1:C6:35:E8:91:C7:8A:3B:3D:80:74:10:51:E1
Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial: 010D0C9F432858480644F77029132B103A68B580
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 192.111.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f7:70:29:13:2b:10:3a:68:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=5a1d5136-a3d3-4ec5-84a0-dce05b8614d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:a6:fb:70:17:72:5c:d8:a0:fe:b0:ca:6b:
0c:70:26:5a:9a:1f:ba:5b:18:a9:7c:cb:74:3a:96:
91:be:f2:0a:49:56:c7:6d:85:d4:6f:0a:0a:6c:2d:
da:ff:3b:79:08:e0:cb:c3:18:63:6b:de:40:ce:9b:
3d:76:08:76:de:41:2e:34:ea:19:48:61:c2:fa:61:
e1:d1:de:cd:a4:75:d2:7f:46:21:75:5f:d4:a3:25:
36:fb:01:cd:f4:2d:40:26:86:21:0c:d3:35:81:6b:
5a:47:6d:f0:87:8d:d2:05:0a:35:78:25:e2:a9:18:
37:b4:a5:b4:ff:b1:0a:f8:76:e9:95:ce:93:3c:e1:
54:d1:1f:d1:dc:81:d4:28:36:14:cf:8c:85:a1:76:
3a:3f:95:6c:47:89:6d:85:ca:dc:c1:a0:b1:4a:36:
12:d2:0a:23:58:70:9a:fc:46:0c:18:6f:43:cd:fd:
72:92:1e:c9:06:1f:70:7e:8a:38:4d:a6:5b:ad:fa:
53:62:cb:29:8a:60:bd:3f:da:70:db:b8:3c:d0:ce:
2f:b2:2a:01:8e:4d:e2:80:71:a7:be:59:4f:82:8b:
41:46:c9:79:ff:af:c6:5a:ee:12:41:6b:ee:20:14:
cb:45:4f:8d:ac:69:84:63:89:3f:a1:b7:48:16:44:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:29:D5:48:4A:D1:C6:35:E8:91:C7:8A:3B:3D:80:74:10:51:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
X509v3 Authority Key Identifier:
keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f1:97:02:fb:73:cb:c2:47:4a:be:8a:d6:81:56:b9:b1:43:
55:17:7a:16:54:85:14:0a:40:d1:2f:3c:e0:1e:93:75:e9:6d:
5e:68:75:4f:eb:78:a0:d4:09:c8:c4:b1:91:48:0e:9f:71:85:
9b:d5:91:01:ea:3a:99:5d:a5:3f:93:41:3d:4f:8e:1d:e1:79:
30:40:2c:5e:71:7f:0d:d5:89:0b:84:25:09:da:bb:af:cc:08:
db:eb:62:30:5a:49:a5:c5:f1:8e:c2:fa:6a:98:6e:c2:42:2d:
2d:8b:3f:07:c6:43:08:d4:f3:f7:84:04:6a:6b:f3:8d:61:2b:
f6:af:f3:a6:32:2d:6a:bb:64:79:cd:95:45:06:5b:f0:eb:5c:
2c:cc:7c:53:81:8c:05:e9:98:8c:0b:89:5a:2c:bd:cf:a6:14:
82:f6:d5:cb:fb:d2:31:56:7f:dc:1d:60:55:00:a0:62:36:03:
45:8f:90:34:1f:b2:02:8c:46:36:9b:f2:15:2e:ed:13:32:78:
bf:ac:3c:60:8e:e5:df:3f:29:55:fc:0a:23:1f:15:40:a7:8a:
8a:eb:b5:e2:7a:2b:a9:5d:2f:fd:50:fc:24:66:e0:ce:7f:33:
b9:db:e8:34:96:82:7d:8b:8c:0d:71:c5:f5:bf:7c:94:c2:a2:
24:4b:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:28 2025 by rpki-client