Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
File: faee21e8-c5a4-3d46-95b6-41c129d39826.roa (raw, json)
Hash identifier: 421/1Z/iDfbphUgjFnS6q4JzV73xjWx83wn7kN0BN6c=
Subject key identifier: 45:BE:B3:1A:F1:8E:15:90:26:B2:CB:E0:86:E5:9D:FA:A7:4F:60:94
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C31D5AB8152CF3DB8AA0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 172.111.114.0/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c3:1d:5a:b8:15:2c:f3:db:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=103ec8cf-7ddf-4b94-92fd-832fa2ee8aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:52:56:4c:c2:ae:8a:f1:8c:a5:0e:19:a2:
17:85:58:12:4e:62:9f:55:28:4e:04:64:19:df:1a:
3a:ec:9f:db:96:c7:29:a6:08:80:0b:15:65:74:dc:
68:11:6a:25:d8:1f:6c:4f:c3:67:98:9d:d4:bd:2d:
37:79:84:5e:c6:ba:01:01:17:a6:90:60:56:85:d0:
db:ad:4f:29:22:18:8e:82:2d:89:4c:6e:0f:d3:d1:
47:c0:1f:5a:ed:5e:ee:be:07:d4:21:e0:24:e0:ed:
89:45:03:a7:54:20:b2:ad:e5:9e:c8:6c:0d:78:3c:
31:30:8e:60:df:9c:b2:86:eb:af:14:44:45:e2:b7:
d4:e0:4e:43:d9:12:f0:5e:9f:de:98:ad:0f:b0:ef:
b9:b2:7b:7e:bf:a7:d6:c6:99:6f:ba:c2:c8:c6:f3:
d2:09:51:2e:a2:4b:f3:04:2f:fd:67:c3:e1:e2:c5:
3a:f9:40:08:de:32:34:67:53:5c:f4:b7:f7:0e:93:
62:47:16:55:c1:2e:f6:fa:25:c9:e1:a3:db:92:af:
49:78:1d:26:72:fb:b1:b9:41:92:2e:5a:03:f9:f4:
04:f6:56:8e:08:0a:90:b7:4b:33:3a:63:6b:bb:cc:
5e:bc:d2:51:77:db:75:c9:11:48:80:fc:f4:49:38:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BE:B3:1A:F1:8E:15:90:26:B2:CB:E0:86:E5:9D:FA:A7:4F:60:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.114.0/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:4a:6a:67:a4:8c:23:44:e8:96:ae:5b:59:66:09:43:72:55:
c6:d7:2f:0d:a3:3d:94:16:a2:70:e2:4a:54:45:c4:6d:fd:14:
0a:f6:98:c1:f0:a4:42:94:c1:53:95:79:75:15:26:b3:9e:c0:
6e:09:80:24:f6:19:39:88:73:57:35:51:b7:bd:3c:3d:07:85:
b8:01:74:8a:48:3d:68:2e:32:57:10:31:f3:79:f3:a5:42:bd:
d7:64:a6:76:73:e7:36:db:97:4b:7e:50:2a:de:b3:b9:84:d2:
0e:96:97:2c:da:23:24:c1:76:7c:4f:d7:7a:a7:5f:ef:de:27:
c8:f5:d6:49:0e:00:03:f8:2c:25:d1:7e:91:85:56:eb:b2:58:
0e:d7:5f:78:76:09:6f:e4:37:9c:e5:80:0c:fc:4b:eb:a7:8f:
7e:13:34:41:50:ad:c4:fa:0c:b4:c6:53:a2:d1:8c:ff:30:8a:
3c:88:52:11:a3:aa:74:8f:5f:25:b6:b0:1a:01:e3:6e:75:f3:
85:07:b5:9b:86:9f:1d:03:52:f0:82:ab:e8:f9:0b:1a:f9:55:
f6:f6:49:eb:39:84:34:98:86:34:96:ab:00:6d:8d:1a:2a:5b:
e8:71:e8:1e:dc:ed:de:14:75:bc:1e:c3:10:22:ce:53:47:cd:
a8:8e:ee:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhzJcMdWrgVLPPbiqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
MTAzZWM4Y2YtN2RkZi00Yjk0LTkyZmQtODMyZmEyZWU4YWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyVSVkzCrorxjKUOGaIXhVgSTmKfVShOBGQZ
3xo67J/blscppgiACxVldNxoEWol2B9sT8NnmJ3UvS03eYRexroBARemkGBWhdDb
rU8pIhiOgi2JTG4P09FHwB9a7V7uvgfUIeAk4O2JRQOnVCCyreWeyGwNeDwxMI5g
35yyhuuvFERF4rfU4E5D2RLwXp/emK0PsO+5snt+v6fWxplvusLIxvPSCVEuokvz
BC/9Z8Ph4sU6+UAI3jI0Z1Nc9Lf3DpNiRxZVwS72+iXJ4aPbkq9JeB0mcvuxuUGS
LloD+fQE9laOCAqQt0szOmNru8xevNJRd9t1yRFIgPz0STjOGwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEW+sxrxjhWQJrLL4IblnfqnT2CUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmFlZTIxZTgtYzVhNC0z
ZDQ2LTk1YjYtNDFjMTI5ZDM5ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG9yADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5SmpnpIwjROiWrltZZglDclXG1y8Noz2UFqJw4kpURcRt/RQK9pjB
8KRClMFTlXl1FSaznsBuCYAk9hk5iHNXNVG3vTw9B4W4AXSKSD1oLjJXEDHzefOl
Qr3XZKZ2c+c225dLflAq3rO5hNIOlpcs2iMkwXZ8T9d6p1/v3ifI9dZJDgAD+Cwl
0X6RhVbrslgO1194dglv5Dec5YAM/Evrp49+EzRBUK3E+gy0xlOi0Yz/MIo8iFIR
o6p0j18ltrAaAeNudfOFB7Wbhp8dA1Lwgqvo+Qsa+VX29knrOYQ0mIY0lqsAbY0a
Klvocege3O3eFHW8HsMQIs5TR82oju4K
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:10:47 2025 by rpki-client