Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/42952f39-5d71-36fc-b5e9-01cff0863a4f.roa
File: 42952f39-5d71-36fc-b5e9-01cff0863a4f.roa (raw, json)
Hash identifier: FKl2Ku8W+VSRWnSUCkMQUHw5Bdr2tsg7oMHtXYPjBXk=
Subject key identifier: 5C:08:62:00:3E:DA:79:AD:7C:48:DB:E6:6B:78:A0:19:77:EF:3A:51
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493A559D4A2738CE5FD6063900
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/42952f39-5d71-36fc-b5e9-01cff0863a4f.roa
Signing time: Tue 18 Mar 2025 10:23:13 +0000
ROA not before: Tue 18 Mar 2025 10:23:13 +0000
ROA not after: Mon 16 Jun 2025 10:23:13 +0000
asID: 36352
IP address blocks: 172.111.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:55:9d:4a:27:38:ce:5f:d6:06:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 18 10:23:13 2025 GMT
Not After : Jun 16 10:23:13 2025 GMT
Subject: CN=f97b2e6b-3acb-48de-a81d-679115a7c14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:f2:a6:6b:51:dd:cb:22:22:26:ac:10:7c:
86:03:ef:dd:28:9d:b1:4a:34:0d:43:ea:59:c5:08:
20:96:dd:de:5b:1c:8a:82:1c:9a:c0:49:b5:e5:b3:
9c:aa:32:f2:ce:26:5b:56:40:df:3d:e2:d1:b6:6f:
ec:26:8f:1e:8e:f7:05:cd:df:75:65:a4:53:9a:a0:
a8:8b:78:a8:44:6f:34:2d:07:d4:fd:25:c4:79:2f:
e5:7a:9f:2e:ba:ce:13:1c:af:bc:62:bf:a5:d5:44:
24:de:b3:94:75:3c:04:2b:a7:5c:e9:3d:2c:d9:71:
e8:b9:f2:8e:97:98:50:38:90:67:02:59:f4:84:d0:
f7:7e:cf:23:0d:f1:37:8d:fc:3b:b4:6b:0f:50:fc:
20:83:35:3b:28:27:c1:74:86:65:77:f3:b2:4f:bf:
26:9b:d7:81:2d:75:5e:4c:b5:b6:b2:3e:2e:04:27:
12:8e:85:95:2b:6f:e7:49:09:f1:d8:88:b8:fb:b0:
02:ab:8a:33:06:dd:a2:c9:93:11:c2:3c:e5:1a:23:
fa:f4:58:ec:6f:5b:75:6e:79:99:16:54:8d:aa:1b:
b5:df:eb:52:9b:52:10:6c:26:7a:7b:80:89:88:09:
f4:b1:0d:65:71:cb:d7:b1:78:ab:fe:53:81:d5:e0:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:62:00:3E:DA:79:AD:7C:48:DB:E6:6B:78:A0:19:77:EF:3A:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/42952f39-5d71-36fc-b5e9-01cff0863a4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:03:a9:fa:ea:ee:96:bf:35:8a:50:5f:1d:2b:08:66:41:48:
c3:e3:da:f6:33:72:74:55:59:90:c7:2d:41:a1:b4:59:82:09:
6e:96:91:cb:8b:c5:01:8e:31:75:0a:52:09:23:25:9f:6c:05:
fc:34:7c:64:19:5c:e6:ed:36:cc:73:74:84:95:e1:0e:56:c3:
fb:32:fc:84:52:a6:87:b9:01:4e:b4:1a:bc:12:c1:50:91:ef:
f1:ec:c0:ad:4f:f0:09:2d:1c:29:5b:94:31:96:30:35:c7:52:
ae:26:24:a5:f1:90:c1:1f:8c:d9:ef:85:ae:17:6d:b0:53:fb:
b2:09:82:40:60:73:43:f7:10:3f:4a:81:99:ae:05:96:14:58:
35:48:0d:60:ae:82:ad:ca:e4:72:03:a8:7d:8c:93:79:3f:b0:
af:fe:6e:29:60:b0:3b:87:1e:e9:3e:1f:e0:7f:14:6d:db:43:
83:a9:af:43:1f:f3:34:ee:4a:e8:c5:db:68:21:66:46:4d:40:
de:b5:80:d8:51:c0:e7:da:40:33:32:72:2e:d6:de:1c:18:8e:
b2:4e:07:90:69:82:1e:d0:47:a0:b1:4b:0f:b7:95:ad:6e:dc:
aa:6a:e5:30:70:41:c5:77:9f:75:7f:74:84:fa:13:7c:2f:15:
0d:99:f4:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6VZ1KJzjOX9YGOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxODEwMjMxM1oXDTI1MDYxNjEwMjMxM1owLzEtMCsGA1UEAxMk
Zjk3YjJlNmItM2FjYi00OGRlLWE4MWQtNjc5MTE1YTdjMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkenypmtR3csiIiasEHyGA+/dKJ2xSjQNQ+pZ
xQgglt3eWxyKghyawEm15bOcqjLyziZbVkDfPeLRtm/sJo8ejvcFzd91ZaRTmqCo
i3ioRG80LQfU/SXEeS/lep8uus4THK+8Yr+l1UQk3rOUdTwEK6dc6T0s2XHoufKO
l5hQOJBnAln0hND3fs8jDfE3jfw7tGsPUPwggzU7KCfBdIZld/OyT78mm9eBLXVe
TLW2sj4uBCcSjoWVK2/nSQnx2Ii4+7ACq4ozBt2iyZMRwjzlGiP69Fjsb1t1bnmZ
FlSNqhu13+tSm1IQbCZ6e4CJiAn0sQ1lccvXsXir/lOB1eCQOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwIYgA+2nmtfEjb5mt4oBl37zpRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDI5NTJmMzktNWQ3MS0z
NmZjLWI1ZTktMDFjZmYwODYzYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIDqfrq7pa/NYpQXx0rCGZBSMPj2vYzcnRVWZDHLUGhtFmCCW6WkcuL
xQGOMXUKUgkjJZ9sBfw0fGQZXObtNsxzdISV4Q5Ww/sy/IRSpoe5AU60GrwSwVCR
7/HswK1P8AktHClblDGWMDXHUq4mJKXxkMEfjNnvha4XbbBT+7IJgkBgc0P3ED9K
gZmuBZYUWDVIDWCugq3K5HIDqH2Mk3k/sK/+bilgsDuHHuk+H+B/FG3bQ4Opr0Mf
8zTuSujF22ghZkZNQN61gNhRwOfaQDMyci7W3hwYjrJOB5Bpgh7QR6CxSw+3la1u
3Kpq5TBwQcV3n3V/dIT6E3wvFQ2Z9N0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:20 2025 by rpki-client