Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json)
Hash identifier: oKVYjNZg0avfq/b28etW5vH5N7JH5OWCu3qORwEmDB8=
Subject key identifier: 68:4F:E3:7A:96:C2:97:A4:0E:07:0B:86:A3:AE:95:BA:1D:81:47:FE
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584863CB0FC5C8502035EE6421B8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 9009
IP address blocks: 172.111.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0f:c5:c8:50:20:35:ee:64:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=9e47d290-6641-4df4-b222-407da8aa97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:07:73:66:bf:b0:28:c1:92:47:e9:e6:c1:
d0:e0:08:55:82:c2:f9:3d:e1:2e:df:f4:35:4e:d1:
4f:48:65:f5:a4:8a:6f:80:36:24:1d:12:be:0d:2b:
0d:4e:e2:41:bf:a2:af:7b:ae:14:1b:88:df:da:40:
7a:1b:f6:cb:ab:64:bc:20:2c:38:7e:ca:4d:06:fe:
80:17:c9:44:23:c1:ac:f4:f4:4e:55:45:03:9a:36:
ae:5a:27:bf:39:81:9b:06:ea:99:5e:75:14:64:f2:
1c:38:ae:55:95:58:8e:13:c2:21:2f:e7:8e:e6:d7:
81:b4:4b:5e:60:32:6a:aa:96:08:9c:9e:8b:6e:f3:
82:9e:5f:e9:29:9b:d5:be:73:c0:7c:4f:99:9c:bb:
a8:39:62:01:e1:c9:35:15:6a:07:dd:4e:bf:3f:ef:
d4:7b:e1:60:25:d4:4a:f3:1b:42:5b:12:69:1b:ec:
d3:4e:0d:10:c7:c7:e8:dd:ad:ef:a4:62:85:fb:4d:
fb:f4:c9:3f:f6:18:59:47:67:5b:cb:d8:d4:09:dc:
2f:30:ca:47:f8:b7:f6:9d:10:d5:ea:49:52:a6:8e:
28:63:81:bd:0d:8d:0d:df:bd:f8:c2:cd:ea:5c:0a:
5c:8a:78:7f:60:e0:8e:68:07:4a:91:29:de:77:d0:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4F:E3:7A:96:C2:97:A4:0E:07:0B:86:A3:AE:95:BA:1D:81:47:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:9c:8e:5f:36:41:51:c1:1c:b0:a8:a7:54:55:b2:9f:f3:1f:
d2:77:37:e6:91:1a:bd:9e:89:bf:d7:e8:ef:82:e4:54:aa:7c:
9a:4e:77:0a:0c:e1:1d:d8:25:88:d1:94:54:0b:da:80:9a:0f:
ab:7a:f9:94:ca:02:53:0d:a2:54:fa:58:e2:52:27:53:67:5f:
d2:d1:7d:98:56:d1:d2:46:5f:3f:be:70:c1:be:52:1b:8d:5f:
50:71:ac:fc:ba:a1:11:c0:62:a5:1d:39:85:15:e5:5d:19:f1:
41:73:93:17:1e:eb:66:13:45:8f:47:b3:df:9f:7f:77:fc:07:
a1:57:ca:18:4d:bd:26:64:9d:ad:47:23:81:d4:ef:d4:c8:c6:
8f:9e:bd:6d:c8:74:9e:a8:39:31:01:8b:1a:bc:b1:73:95:20:
cf:18:e6:0a:6c:5b:b8:9a:06:9b:0e:d0:7b:6a:4d:d2:a6:1f:
7a:5a:4e:cb:0e:5a:82:a7:02:03:65:90:6b:86:e6:c4:23:f4:
01:0c:71:8a:d6:ad:0b:d0:9f:ea:45:bf:82:e0:d8:cf:35:4b:
38:c4:ae:9c:24:35:db:5c:8e:cd:83:88:bf:77:42:bd:e3:de:
33:0f:e7:be:cc:ab:38:e1:17:d5:73:d0:6c:59:6a:0e:5a:c3:
43:7a:d6:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyw/FyFAgNe5kIbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
OWU0N2QyOTAtNjY0MS00ZGY0LWIyMjItNDA3ZGE4YWE5N2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhacHc2a/sCjBkkfp5sHQ4AhVgsL5PeEu3/Q1
TtFPSGX1pIpvgDYkHRK+DSsNTuJBv6Kve64UG4jf2kB6G/bLq2S8ICw4fspNBv6A
F8lEI8Gs9PROVUUDmjauWie/OYGbBuqZXnUUZPIcOK5VlViOE8IhL+eO5teBtEte
YDJqqpYInJ6LbvOCnl/pKZvVvnPAfE+ZnLuoOWIB4ck1FWoH3U6/P+/Ue+FgJdRK
8xtCWxJpG+zTTg0Qx8fo3a3vpGKF+0379Mk/9hhZR2dby9jUCdwvMMpH+Lf2nRDV
6klSpo4oY4G9DY0N3734ws3qXApcinh/YOCOaAdKkSned9D5jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhP43qWwpekDgcLhqOulbodgUf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z
YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCcjl82QVHBHLCop1RVsp/zH9J3N+aRGr2eib/X6O+C5FSqfJpOdwoM
4R3YJYjRlFQL2oCaD6t6+ZTKAlMNolT6WOJSJ1NnX9LRfZhW0dJGXz++cMG+UhuN
X1BxrPy6oRHAYqUdOYUV5V0Z8UFzkxce62YTRY9Hs9+ff3f8B6FXyhhNvSZkna1H
I4HU79TIxo+evW3IdJ6oOTEBixq8sXOVIM8Y5gpsW7iaBpsO0HtqTdKmH3paTssO
WoKnAgNlkGuG5sQj9AEMcYrWrQvQn+pFv4Lg2M81SzjErpwkNdtcjs2DiL93Qr3j
3jMP577MqzjhF9Vz0GxZag5aw0N61gQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:31 2025 by rpki-client