Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa
File: 321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa (raw, json)
Hash identifier: 00ESOrBj+BIyJG5qK9IWZ9ycdTSM88W467g4Z8QL2nY=
Subject key identifier: C8:3B:55:EF:0C:BC:B5:90:0D:59:D5:C9:BA:61:D9:57:48:1D:C4:E2
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FF9C1400FFBFE73E30700680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa
Signing time: Tue 25 Feb 2025 09:32:30 +0000
ROA not before: Tue 25 Feb 2025 09:32:30 +0000
ROA not after: Mon 26 May 2025 08:32:30 +0000
asID: 329007
IP address blocks: 172.111.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:9c:14:00:ff:bf:e7:3e:30:70:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 25 09:32:30 2025 GMT
Not After : May 26 08:32:30 2025 GMT
Subject: CN=106d28a2-8aee-491a-b935-939200235807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:e9:09:f7:08:10:3f:76:24:0f:18:32:22:
7b:5e:51:fe:71:6d:b8:6f:bf:7a:39:7e:3f:35:16:
8f:83:4e:8d:64:b4:74:b9:6a:1d:7f:6f:d1:e4:0a:
dc:f0:3e:ac:76:17:81:46:f6:3a:92:57:af:3d:5a:
fd:9b:22:ac:5e:30:01:62:a2:2f:81:cd:f3:7e:c1:
6d:10:2a:a0:0c:2a:3d:2b:ec:69:f3:77:83:ad:a5:
01:7d:cb:b9:57:a6:89:92:d5:b0:47:63:75:bf:d4:
9c:f5:78:fa:8f:80:d9:7b:66:56:1f:ef:60:69:da:
3e:d7:c2:17:31:4a:ca:b9:5c:aa:e6:a8:1f:00:b1:
75:89:a5:9c:95:66:87:40:db:c5:15:20:4a:51:b8:
9a:0a:12:01:a7:e7:33:ef:ae:f0:ad:1e:09:9e:e4:
95:f4:08:22:38:8b:ed:85:72:cb:ac:73:e4:e6:b6:
85:af:3e:3f:f3:db:a0:53:33:63:84:02:e1:a6:05:
1e:c7:b6:aa:04:82:fd:59:3a:52:06:30:a4:30:65:
9a:91:95:3b:d7:dc:ec:0b:6a:41:e9:4b:96:b6:6d:
4e:dd:2b:2f:df:01:a0:a5:a0:c1:64:c3:9a:df:f3:
14:ef:12:6d:88:12:01:de:8f:ce:fa:0c:46:62:54:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:55:EF:0C:BC:B5:90:0D:59:D5:C9:BA:61:D9:57:48:1D:C4:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:16:c2:37:09:40:7b:55:22:2c:a5:d4:11:59:7d:62:b1:e3:
ba:e1:89:3f:39:2d:b7:17:55:9a:c0:5f:38:dd:23:43:e9:68:
98:42:e1:81:90:4d:03:81:6f:33:bd:a0:a5:0d:63:75:48:8f:
54:e6:66:e7:2d:1f:b4:39:9d:4b:1d:b9:f2:ee:6d:e5:98:a8:
05:3c:a7:23:fc:68:d8:36:cc:0e:dd:bb:c0:50:bf:c1:84:37:
d8:9b:17:64:ae:bf:24:4c:45:b7:9c:5c:a6:65:6b:fd:72:ba:
9a:b4:5d:b7:0b:1f:75:9c:23:3d:95:bf:17:e5:c5:61:71:79:
a8:24:77:4e:a8:9d:16:61:d4:57:7b:f0:f3:ea:79:5d:b2:97:
68:ea:54:a8:09:bf:8a:6a:25:31:68:89:be:6b:f8:e2:ae:fb:
70:51:2b:2b:fd:ba:0d:5f:b9:05:45:b3:d2:b1:72:88:e7:9f:
74:99:b5:32:e0:94:cd:66:ce:af:2f:f4:ec:a0:f1:52:de:10:
56:cf:e3:0a:53:aa:8d:0b:fd:2c:10:6e:c0:de:b4:a4:1a:7a:
39:80:c4:9a:67:65:62:ba:1d:a6:f5:1c:d0:fd:e1:d3:ad:a7:
ff:c2:3f:37:75:c6:ac:05:db:ba:fd:3d:a1:d0:c8:01:cd:e5:
9c:f0:95:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/nBQA/7/nPjBwBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIyNTA5MzIzMFoXDTI1MDUyNjA4MzIzMFowLzEtMCsGA1UEAxMk
MTA2ZDI4YTItOGFlZS00OTFhLWI5MzUtOTM5MjAwMjM1ODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbpCfcIED92JA8YMiJ7XlH+cW24b796OX4/
NRaPg06NZLR0uWodf2/R5Arc8D6sdheBRvY6klevPVr9myKsXjABYqIvgc3zfsFt
ECqgDCo9K+xp83eDraUBfcu5V6aJktWwR2N1v9Sc9Xj6j4DZe2ZWH+9gado+18IX
MUrKuVyq5qgfALF1iaWclWaHQNvFFSBKUbiaChIBp+cz767wrR4JnuSV9AgiOIvt
hXLLrHPk5raFrz4/89ugUzNjhALhpgUex7aqBIL9WTpSBjCkMGWakZU719zsC2pB
6UuWtm1O3Ssv3wGgpaDBZMOa3/MU7xJtiBIB3o/O+gxGYlSjzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMg7Ve8MvLWQDVnVybph2VdIHcTiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzIxZDlhMDEtMWVhYi0z
MzQwLTk1YmYtMmJlNmRhMmVlOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcWwjcJQHtVIiyl1BFZfWKx47rhiT85LbcXVZrAXzjdI0PpaJhC4YGQ
TQOBbzO9oKUNY3VIj1TmZuctH7Q5nUsdufLubeWYqAU8pyP8aNg2zA7du8BQv8GE
N9ibF2SuvyRMRbecXKZla/1yupq0XbcLH3WcIz2VvxflxWFxeagkd06onRZh1Fd7
8PPqeV2yl2jqVKgJv4pqJTFoib5r+OKu+3BRKyv9ug1fuQVFs9Kxcojnn3SZtTLg
lM1mzq8v9Oyg8VLeEFbP4wpTqo0L/SwQbsDetKQaejmAxJpnZWK6Hab1HND94dOt
p//CPzd1xqwF27r9PaHQyAHN5ZzwlbI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:57 2025 by rpki-client