Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16a23db-606a-3c56-90ae-2a240a33f522.roa
File: e16a23db-606a-3c56-90ae-2a240a33f522.roa (raw, json)
Hash identifier: DaVV1uXbsRZcYFep5U7Z3vLmGTBUXPkfzJnZctYSUBk=
Subject key identifier: 51:0B:E4:9F:7E:7A:03:84:17:2A:6B:0B:B0:D0:5A:7D:52:D2:7A:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143CDD70B4ED95C504FD67F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16a23db-606a-3c56-90ae-2a240a33f522.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:dd:70:b4:ed:95:c5:04:fd:67:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=71202f0f-ab49-4f1a-b2fd-ab4ab0b1a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:ae:45:84:f4:21:bd:bf:77:a9:ec:36:bf:
d6:b4:71:35:6e:24:6f:7b:13:18:d0:f6:32:1c:1e:
a9:2c:a0:bc:69:46:ef:7f:b3:db:36:76:76:a3:fe:
e0:9c:9c:c5:20:02:dd:b0:9d:a2:96:a1:f0:28:f1:
5b:e6:6b:d5:fc:d2:51:d9:58:5b:ad:24:82:33:31:
29:cf:e4:dd:30:ca:e1:2c:50:a3:94:6a:2c:b7:6d:
01:d7:69:ff:bb:ca:48:1b:86:72:26:89:00:63:f5:
92:39:d0:17:a9:1e:80:e1:f7:c1:d5:64:a9:fa:3f:
58:98:cd:e8:41:31:8c:00:eb:84:49:80:c5:9c:86:
f0:68:c5:89:59:24:6b:1e:88:17:96:fb:22:00:2e:
f6:b3:ae:29:fe:42:da:dd:91:a9:af:19:63:fe:bc:
50:55:82:19:2f:5b:d1:35:c4:bd:9f:1a:30:38:b5:
b7:ad:6e:24:48:09:9d:62:ef:ac:96:cf:ad:37:2b:
61:41:1c:d7:14:d5:71:11:d4:83:df:4a:12:17:ff:
e3:51:0b:c2:02:f5:fc:98:e0:ee:ce:87:9a:dd:da:
9d:40:96:0d:4c:b7:f4:d0:9b:b7:4b:a3:e0:5f:17:
34:f2:cf:22:e7:e3:d2:56:d2:4f:42:b0:67:c3:73:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:E4:9F:7E:7A:03:84:17:2A:6B:0B:B0:D0:5A:7D:52:D2:7A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e16a23db-606a-3c56-90ae-2a240a33f522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:bd:29:04:ca:20:6f:46:3f:79:d5:81:63:90:f2:e1:38:17:
90:f3:21:18:c9:3a:46:17:05:9d:4d:8d:35:bc:3d:ed:de:90:
f6:21:85:3a:a0:67:b1:64:b5:8f:77:88:10:cb:85:7b:d5:6d:
d0:96:95:8d:9e:8d:a2:2e:b2:a0:bb:26:80:69:0d:1a:98:9e:
b1:b0:38:80:11:17:3a:54:e4:ca:75:1e:08:bf:ce:26:a1:e7:
21:67:5e:d4:10:04:1c:cf:18:78:38:97:ba:de:7f:cd:4a:45:
84:dc:1e:f2:68:a0:d5:ae:58:58:26:03:2d:4c:7b:84:01:8a:
cb:ce:7a:8e:b2:f3:3f:77:b3:c9:f6:30:77:b1:7c:87:93:60:
35:9d:d0:3b:0e:a0:fe:92:f6:24:b4:21:ff:b4:62:f0:d4:3d:
04:c1:f9:ed:bf:ca:3a:a9:ac:9f:20:6c:6a:87:1e:86:8f:ff:
f6:72:a5:09:a4:4e:47:da:56:89:04:e7:51:7b:e0:af:2d:de:
19:b3:ef:13:79:59:b5:ad:4e:87:ce:5c:aa:c2:e8:00:f8:f1:
e2:15:4d:df:60:a3:5b:9a:51:eb:84:55:b2:ac:f7:0c:fe:4d:
26:f5:07:0a:75:b1:ae:63:94:60:72:dc:ca:53:a0:d2:4b:6f:
0c:25:bb:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPN1wtO2VxQT9Z/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NzEyMDJmMGYtYWI0OS00ZjFhLWIyZmQtYWI0YWIwYjFhMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tyuRYT0Ib2/d6nsNr/WtHE1biRvexMY0PYy
HB6pLKC8aUbvf7PbNnZ2o/7gnJzFIALdsJ2ilqHwKPFb5mvV/NJR2VhbrSSCMzEp
z+TdMMrhLFCjlGost20B12n/u8pIG4ZyJokAY/WSOdAXqR6A4ffB1WSp+j9YmM3o
QTGMAOuESYDFnIbwaMWJWSRrHogXlvsiAC72s64p/kLa3ZGprxlj/rxQVYIZL1vR
NcS9nxowOLW3rW4kSAmdYu+sls+tNythQRzXFNVxEdSD30oSF//jUQvCAvX8mODu
zoea3dqdQJYNTLf00Ju3S6PgXxc08s8i5+PSVtJPQrBnw3M0MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEL5J9+egOEFyprC7DQWn1S0nrkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTE2YTIzZGItNjA2YS0z
YzU2LTkwYWUtMmEyNDBhMzNmNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG9KQTKIG9GP3nVgWOQ8uE4F5DzIRjJOkYXBZ1NjTW8Pe3ekPYhhTqg
Z7FktY93iBDLhXvVbdCWlY2ejaIusqC7JoBpDRqYnrGwOIARFzpU5Mp1Hgi/ziah
5yFnXtQQBBzPGHg4l7ref81KRYTcHvJooNWuWFgmAy1Me4QBisvOeo6y8z93s8n2
MHexfIeTYDWd0DsOoP6S9iS0If+0YvDUPQTB+e2/yjqprJ8gbGqHHoaP//ZypQmk
TkfaVokE51F74K8t3hmz7xN5WbWtTofOXKrC6AD48eIVTd9go1uaUeuEVbKs9wz+
TSb1Bwp1sa5jlGBy3MpToNJLbwwlu/8=
-----END CERTIFICATE-----
Generated at Sun May 4 11:05:46 2025 by rpki-client