Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa
File: 04ec2b42-8e4e-3906-b856-c409b7151e2a.roa (raw, json)
Hash identifier: +nqSFWVonywh74HS5B7y45yobEQqoNrJmmB7x4UpkbY=
Subject key identifier: 1F:0E:04:6A:8C:A7:F9:88:0F:DF:44:CB:CB:02:1D:B7:3A:D3:C1:78
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858487FB5CF839C898A1977140A80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 63025
IP address blocks: 172.111.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:cf:83:9c:89:8a:19:77:14:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=7d9406a3-e0ff-4367-af22-5da78e2bde38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:85:ec:8b:68:37:a5:0b:6d:c4:2c:73:d7:
ef:45:e6:a0:1f:26:6b:16:cb:39:ba:9a:ab:a0:62:
95:e7:cd:d9:85:fc:b7:39:a6:3f:c9:dd:e3:e8:47:
17:8b:39:69:08:c8:ee:5a:0b:8a:b0:19:18:0f:c7:
77:f9:c8:ec:8e:9d:16:ef:23:55:fe:89:76:d6:23:
8c:a7:8e:3f:30:b7:53:23:ec:a3:81:70:7a:6f:84:
18:92:b4:6d:3c:e3:d1:4d:e7:77:11:f8:0a:fc:3c:
2d:97:8f:e1:34:3a:c0:c7:55:58:cb:e4:be:55:ec:
9a:d1:d5:9f:39:b2:d7:bd:19:c4:a1:30:ff:2e:6c:
59:d3:34:60:55:1c:05:06:a7:40:9f:ea:e5:0d:d0:
47:03:d0:a4:17:72:1a:f7:ec:bd:23:7d:5e:77:50:
1f:7b:b7:d6:50:17:c0:a6:2c:71:6a:4d:0b:7b:2a:
76:6b:86:06:26:4b:58:62:74:a6:6d:ad:46:4f:10:
32:e1:7e:7a:5f:f4:80:f9:0d:1a:e4:a8:ec:91:40:
e0:34:93:71:df:5f:87:fc:c7:0f:e6:f0:65:2b:f0:
d3:48:4a:20:d4:f4:3d:bf:20:33:03:9a:7a:de:7a:
31:8c:a1:09:00:3c:cc:cc:c1:05:55:70:32:c1:4a:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:04:6A:8C:A7:F9:88:0F:DF:44:CB:CB:02:1D:B7:3A:D3:C1:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/04ec2b42-8e4e-3906-b856-c409b7151e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:9e:79:2f:2b:4e:c4:e8:4a:2a:0b:cc:2b:e1:57:65:65:db:
50:54:09:23:25:c1:ff:55:12:88:02:12:56:2a:f9:89:94:67:
e9:07:e4:91:c8:bb:0b:44:75:ad:f0:16:bb:6c:e3:cc:fe:df:
d8:fb:85:47:2a:a5:df:8e:5d:db:68:23:68:6a:9c:af:a8:c3:
b6:ba:8d:d9:60:11:e1:76:59:c1:61:be:7c:36:01:0f:c0:c8:
32:1a:33:01:fc:b1:c6:fd:45:a5:20:5f:9e:cd:af:55:11:b9:
77:10:d0:d9:3a:c4:a4:1c:57:7a:be:e8:42:41:ff:16:76:39:
7c:91:5a:b7:a6:57:fc:6a:04:12:2f:e3:3e:e2:ae:e4:b0:a9:
f5:9a:cd:da:b5:f7:71:1c:71:a0:57:e3:2e:19:1f:97:a5:1d:
98:b7:dc:3c:8f:79:37:1a:45:35:19:6f:53:cf:dc:31:b3:e3:
d5:f3:b9:a5:e9:2b:71:63:1a:bf:5c:43:fc:81:f7:be:28:a2:
8d:4e:3b:dd:03:d8:9d:97:fd:7a:32:7a:0e:ec:4d:f9:d7:f3:
f7:b1:a9:50:ef:ed:42:92:e9:3e:83:36:32:72:4d:46:d4:b8:
b6:c7:54:12:ca:fe:4a:58:a6:ed:f1:c7:c1:f6:2b:19:01:80:
b3:69:f6:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tc+DnImKGXcUCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
N2Q5NDA2YTMtZTBmZi00MzY3LWFmMjItNWRhNzhlMmJkZTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnciF7ItoN6ULbcQsc9fvReagHyZrFss5upqr
oGKV583Zhfy3OaY/yd3j6EcXizlpCMjuWguKsBkYD8d3+cjsjp0W7yNV/ol21iOM
p44/MLdTI+yjgXB6b4QYkrRtPOPRTed3EfgK/Dwtl4/hNDrAx1VYy+S+Veya0dWf
ObLXvRnEoTD/LmxZ0zRgVRwFBqdAn+rlDdBHA9CkF3Ia9+y9I31ed1Afe7fWUBfA
pixxak0Leyp2a4YGJktYYnSmba1GTxAy4X56X/SA+Q0a5KjskUDgNJNx31+H/McP
5vBlK/DTSEog1PQ9vyAzA5p63noxjKEJADzMzMEFVXAywUptMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8OBGqMp/mID99Ey8sCHbc608F4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDRlYzJiNDItOGU0ZS0z
OTA2LWI4NTYtYzQwOWI3MTUxZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6eeS8rTsToSioLzCvhV2Vl21BUCSMlwf9VEogCElYq+YmUZ+kH5JHI
uwtEda3wFrts48z+39j7hUcqpd+OXdtoI2hqnK+ow7a6jdlgEeF2WcFhvnw2AQ/A
yDIaMwH8scb9RaUgX57Nr1URuXcQ0Nk6xKQcV3q+6EJB/xZ2OXyRWremV/xqBBIv
4z7iruSwqfWazdq193EccaBX4y4ZH5elHZi33DyPeTcaRTUZb1PP3DGz49XzuaXp
K3FjGr9cQ/yB974ooo1OO90D2J2X/Xoyeg7sTfnX8/exqVDv7UKS6T6DNjJyTUbU
uLbHVBLK/kpYpu3xx8H2KxkBgLNp9jI=
-----END CERTIFICATE-----
Generated at Mon May 12 15:22:58 2025 by rpki-client