Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json)
Hash identifier: hSDRlAm20BfmLj0RYkIIDHJb2v5bEiDZveccg5wKYGE=
Subject key identifier: F3:E7:7A:7F:1B:04:25:BC:C1:63:C7:FA:09:A0:00:E8:69:72:13:87
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE1FA6D6EA5B7FE3BFF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 172.111.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e1:fa:6d:6e:a5:b7:fe:3b:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=8bdb0503-aecd-400d-b17b-c63ce74cb5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:14:9a:3f:bd:f0:40:18:d2:7c:82:0c:16:01:
1c:5e:97:e2:6e:99:3a:26:e4:0b:78:e8:23:68:76:
9e:b4:05:20:e8:0a:5f:ef:94:67:eb:1a:cb:71:97:
1c:01:b2:e0:7f:2a:52:ec:d3:7c:95:40:b3:b2:83:
e4:e6:88:3a:c4:b8:00:c5:e7:91:93:77:35:c0:27:
95:f9:41:57:cc:95:44:d8:8b:31:8e:93:df:ef:8f:
d2:98:6b:be:ad:33:48:0c:fe:bb:51:c6:30:87:92:
d3:0b:f3:e0:09:b9:38:9a:d0:6d:eb:78:3f:c7:15:
91:34:d7:c2:7b:aa:ac:67:a0:27:0a:5e:47:18:4d:
cc:f9:c9:4d:5c:42:03:3e:8c:59:63:be:19:55:05:
1a:c6:74:7d:d5:5b:25:f7:d8:3c:29:53:1d:8c:e7:
fc:fe:c2:cb:88:d7:19:7d:6c:99:20:92:76:89:44:
e1:2e:d9:1c:4f:fe:7c:60:8e:93:e8:44:c5:6e:6a:
d1:6d:96:d9:0b:db:4e:21:72:d4:62:a7:02:56:9d:
ec:7f:31:9b:e1:af:75:42:79:fc:ef:14:23:c6:f4:
51:bb:cc:b5:ae:d9:c9:f7:86:b1:f5:28:ed:1e:7f:
57:45:7c:62:27:6c:ab:2e:26:9e:3a:24:29:dc:1a:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:7A:7F:1B:04:25:BC:C1:63:C7:FA:09:A0:00:E8:69:72:13:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:55:df:22:e6:80:6c:39:8a:68:71:e6:b6:74:4b:18:43:ac:
cc:51:7a:a0:ba:fa:96:25:fd:41:f1:60:57:2a:90:f5:2c:17:
86:26:f6:71:d3:1a:ad:00:af:5d:f3:5d:17:05:3f:93:6c:0a:
18:e0:27:79:b2:43:37:30:41:98:2c:20:99:4d:c8:6c:10:bb:
7f:09:44:08:f3:d7:66:02:61:c5:9c:f7:ab:b8:f1:cf:6b:5a:
41:cb:de:90:ba:6c:b3:22:e2:48:50:85:96:90:0f:95:f4:51:
77:88:4c:b6:e0:8e:fc:98:50:1a:4c:ce:8b:f0:5d:6f:12:30:
e8:60:8c:f9:19:cf:24:bf:ed:7d:77:df:28:63:ba:84:91:a8:
a0:75:d2:50:47:fd:a1:2d:d2:75:89:1d:79:7a:e8:da:f0:c9:
de:67:bf:e4:c6:2d:d8:7c:16:a4:94:8a:40:73:3a:39:4e:24:
cc:87:06:06:ca:4b:b6:3f:b2:52:cd:6e:35:d4:01:20:a6:89:
79:18:3d:07:23:d4:44:c4:e1:44:4b:70:0d:a5:54:99:7f:cf:
82:ba:77:9d:f2:aa:9c:52:d4:6f:57:51:c2:a7:51:1a:07:4f:
e3:5f:10:09:89:6d:dd:67:b3:c3:45:4b:b9:2d:0f:81:fa:6f:
08:dc:c5:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquH6bW6lt/47/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
OGJkYjA1MDMtYWVjZC00MDBkLWIxN2ItYzYzY2U3NGNiNWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BSaP73wQBjSfIIMFgEcXpfibpk6JuQLeOgj
aHaetAUg6Apf75Rn6xrLcZccAbLgfypS7NN8lUCzsoPk5og6xLgAxeeRk3c1wCeV
+UFXzJVE2IsxjpPf74/SmGu+rTNIDP67UcYwh5LTC/PgCbk4mtBt63g/xxWRNNfC
e6qsZ6AnCl5HGE3M+clNXEIDPoxZY74ZVQUaxnR91Vsl99g8KVMdjOf8/sLLiNcZ
fWyZIJJ2iUThLtkcT/58YI6T6ETFbmrRbZbZC9tOIXLUYqcCVp3sfzGb4a91Qnn8
7xQjxvRRu8y1rtnJ94ax9SjtHn9XRXxiJ2yrLiaeOiQp3Bo5uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPnen8bBCW8wWPH+gmgAOhpchOHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z
YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJV3yLmgGw5imhx5rZ0SxhDrMxReqC6+pYl/UHxYFcqkPUsF4Ym9nHT
Gq0Ar13zXRcFP5NsChjgJ3myQzcwQZgsIJlNyGwQu38JRAjz12YCYcWc96u48c9r
WkHL3pC6bLMi4khQhZaQD5X0UXeITLbgjvyYUBpMzovwXW8SMOhgjPkZzyS/7X13
3yhjuoSRqKB10lBH/aEt0nWJHXl66Nrwyd5nv+TGLdh8FqSUikBzOjlOJMyHBgbK
S7Y/slLNbjXUASCmiXkYPQcj1ETE4URLcA2lVJl/z4K6d53yqpxS1G9XUcKnURoH
T+NfEAmJbd1ns8NFS7ktD4H6bwjcxUQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:36:10 2025 by rpki-client