Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
File: 0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa (raw, json)
Hash identifier: me3E2PdyIPjAOLAQJevBtTK8aUfsXF2/hekTjWiaa88=
Subject key identifier: 77:48:C9:E9:E1:C2:D4:1E:3C:8A:89:8F:81:F1:F1:13:1E:F5:BA:A6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584820CA8EB7E1C76B94C86831C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 9009
IP address blocks: 172.111.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:8e:b7:e1:c7:6b:94:c8:68:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=54ffec4a-0f7e-47bf-805b-0e6ac8c83924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:59:60:11:32:27:58:ea:f9:21:41:fe:82:
10:90:fd:70:de:bc:f8:fc:c7:39:e7:d3:7b:db:00:
66:51:a0:db:95:5b:11:24:46:45:a5:24:44:31:73:
4a:03:7c:71:23:eb:6a:af:55:d4:3f:3a:74:ee:23:
de:06:30:e5:35:12:0c:47:81:1a:16:5c:ec:e1:5f:
0f:64:4e:7d:e4:8a:f6:e2:27:39:43:a1:20:4e:f8:
37:08:29:12:d6:77:c3:07:52:f9:fe:99:26:cd:b4:
92:66:db:f6:fb:85:35:2b:6d:f8:9c:a6:e4:e7:a6:
c9:d4:85:a7:93:14:dc:cf:99:86:d4:9f:f1:fa:33:
09:50:5f:78:99:b8:3d:57:aa:a8:22:21:1b:74:d6:
e7:b7:44:47:fb:99:db:95:07:a6:54:00:d3:47:a6:
67:46:fc:09:46:4d:02:a2:82:06:19:fa:4b:dd:23:
10:4c:0b:e0:f0:ec:4a:c9:7e:d3:c0:76:96:21:d2:
25:cd:35:be:ce:ee:92:a3:4e:15:7a:a5:10:8e:b3:
ba:eb:46:95:90:68:b6:fe:59:e0:d6:de:3c:f7:71:
74:e7:5a:d4:90:09:f7:3e:a9:cc:46:a3:c7:e9:1d:
00:f6:bf:1c:f6:7a:5e:aa:ed:e3:f8:2a:04:1a:d4:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:48:C9:E9:E1:C2:D4:1E:3C:8A:89:8F:81:F1:F1:13:1E:F5:BA:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f3:2c:3b:a4:09:b8:1a:f6:22:bf:94:30:6f:bb:d3:db:d1:
c4:f3:52:b4:10:44:be:c2:3d:93:6c:f5:1f:c2:2e:04:c7:79:
21:98:fe:68:9b:26:28:36:6c:6e:81:d0:5c:22:fd:22:01:24:
f8:15:89:04:79:08:9c:7e:af:05:04:82:a9:b8:d5:01:82:20:
42:e6:6f:9a:f7:d2:d5:f8:c2:92:9b:06:6a:98:60:ae:ae:1f:
79:9e:34:d1:b8:72:80:ec:cb:ac:92:29:a0:e2:9d:f9:b8:31:
a7:e1:82:42:76:8e:fc:89:f9:f5:e2:68:5b:50:4b:15:86:93:
f7:c6:10:eb:f8:f2:2c:29:3a:ff:c9:7a:e7:01:e3:63:68:f7:
f2:14:5f:3d:03:4c:fe:fb:e8:7c:4b:b0:ec:5e:45:7f:83:6f:
88:18:73:38:b0:f9:35:83:94:50:72:e4:ca:6f:3a:a6:41:9b:
fe:bf:2a:d0:fe:67:c9:40:1f:2f:d1:93:dd:02:ec:fe:13:f7:
7a:41:c2:cd:e3:3a:da:8a:00:c1:6e:f0:62:ee:63:bd:44:2c:
c8:50:31:b8:26:84:b1:88:f4:71:b1:d7:da:78:47:ea:4e:5f:
78:7e:cb:60:1e:77:5a:dc:a4:e8:86:35:39:6a:38:2d:86:a8:
c4:68:ae:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEggyo634cdrlMhoMcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwNzE0MDA1MVoXDTI1MDMwNzE0MDA1MVowLzEtMCsGA1UEAxMk
NTRmZmVjNGEtMGY3ZS00N2JmLTgwNWItMGU2YWM4YzgzOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbVZYBEyJ1jq+SFB/oIQkP1w3rz4/Mc559N7
2wBmUaDblVsRJEZFpSREMXNKA3xxI+tqr1XUPzp07iPeBjDlNRIMR4EaFlzs4V8P
ZE595Ir24ic5Q6EgTvg3CCkS1nfDB1L5/pkmzbSSZtv2+4U1K234nKbk56bJ1IWn
kxTcz5mG1J/x+jMJUF94mbg9V6qoIiEbdNbnt0RH+5nblQemVADTR6ZnRvwJRk0C
ooIGGfpL3SMQTAvg8OxKyX7TwHaWIdIlzTW+zu6So04VeqUQjrO660aVkGi2/lng
1t4893F051rUkAn3PqnMRqPH6R0A9r8c9npequ3j+CoEGtR4+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdIyenhwtQePIqJj4Hx8RMe9bqmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGZkY2FhMjQtZTNiMC0z
ZWNhLTk4M2EtYzg2NjQ2YjE2ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzzLDukCbga9iK/lDBvu9Pb0cTzUrQQRL7CPZNs9R/CLgTHeSGY/mib
Jig2bG6B0Fwi/SIBJPgViQR5CJx+rwUEgqm41QGCIELmb5r30tX4wpKbBmqYYK6u
H3meNNG4coDsy6ySKaDinfm4MafhgkJ2jvyJ+fXiaFtQSxWGk/fGEOv48iwpOv/J
eucB42No9/IUXz0DTP776HxLsOxeRX+Db4gYcziw+TWDlFBy5MpvOqZBm/6/KtD+
Z8lAHy/Rk90C7P4T93pBws3jOtqKAMFu8GLuY71ELMhQMbgmhLGI9HGx19p4R+pO
X3h+y2Aed1rcpOiGNTlqOC2GqMRorsk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:10 2025 by rpki-client