Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57fdb124-0101-3d1b-b0a8-70e64992c24a.roa
File: 57fdb124-0101-3d1b-b0a8-70e64992c24a.roa (raw, json)
Hash identifier: Sr7HYDko2F7H3a07l00X1/dxIwTtET1Yk3TeD/46qLs=
Subject key identifier: 5D:C3:A7:C2:1D:6C:8E:E5:36:85:24:E2:E1:47:59:E0:3D:11:D2:C9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584926455A4D539E444A64D57700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57fdb124-0101-3d1b-b0a8-70e64992c24a.roa
Signing time: Tue 11 Mar 2025 05:54:17 +0000
ROA not before: Tue 11 Mar 2025 05:54:17 +0000
ROA not after: Mon 09 Jun 2025 05:54:17 +0000
asID: 329007
IP address blocks: 172.111.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:26:45:5a:4d:53:9e:44:4a:64:d5:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 11 05:54:17 2025 GMT
Not After : Jun 9 05:54:17 2025 GMT
Subject: CN=a6ff2ee1-69e8-4472-a641-30dba51e8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:3b:ac:c5:26:53:21:7a:2b:83:f3:97:20:
f8:cb:18:e5:d6:f8:48:48:3c:d8:5e:32:07:38:bb:
35:03:d2:44:00:46:f5:dd:79:96:43:72:d0:de:d2:
fc:e9:71:0c:48:5d:08:69:56:aa:64:8e:19:33:da:
0f:9c:44:51:56:f1:b7:1f:9a:2a:3e:66:6d:fa:88:
a4:65:2d:4d:6c:29:68:7e:55:db:fb:af:c1:78:11:
e0:cf:3e:7e:30:72:b1:99:86:39:fc:de:bf:cc:82:
8d:e2:a4:b6:96:7a:53:72:25:fc:3e:2d:31:3f:36:
94:6c:aa:e9:b5:38:b9:28:bd:0b:a3:cc:31:82:8d:
aa:a4:02:e6:51:37:0d:45:0f:d7:95:58:ae:22:3b:
cd:6e:d5:e7:00:9d:3f:43:fe:66:97:c1:32:44:a9:
02:aa:2a:c4:04:43:f0:7e:3b:e6:01:fe:f6:42:2a:
cf:58:ec:91:0c:7c:d2:7a:5e:20:f2:6e:cc:1f:bc:
b7:f5:3b:78:23:41:45:44:c4:64:8a:c2:c1:ea:47:
db:88:91:22:f3:07:c8:8b:18:4d:71:8b:cb:d9:ae:
30:36:0e:ad:ca:ea:f9:af:b8:41:11:d1:80:fc:07:
a9:8b:4d:40:91:ff:78:a8:84:da:a6:3f:bd:c3:df:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:A7:C2:1D:6C:8E:E5:36:85:24:E2:E1:47:59:E0:3D:11:D2:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/57fdb124-0101-3d1b-b0a8-70e64992c24a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c2:37:7f:5b:52:f1:24:23:17:92:65:da:10:29:1c:f6:50:
d4:fc:58:17:0f:66:58:ea:5c:fc:a2:61:e4:d6:97:98:36:d5:
2b:0b:6a:1e:fd:17:7b:2a:65:02:41:11:9b:c9:01:4e:19:6f:
e1:de:ee:ba:b3:4f:c9:cf:0e:37:68:42:26:06:5d:d4:78:10:
1a:11:3c:f4:d8:13:89:e2:fe:07:5c:50:d5:55:45:2d:e1:0a:
06:f0:f6:90:b0:e2:53:27:41:e0:d9:c3:55:74:2a:f5:19:4c:
a6:14:2d:18:52:33:cf:39:32:8c:60:f9:83:0f:87:5e:d8:af:
9b:b4:9e:5b:2d:09:cb:e4:a9:5d:ff:7b:0f:9b:65:a0:1c:23:
5d:88:ea:1a:a5:3c:5b:25:47:1d:6c:73:8f:fc:65:70:b7:c2:
bc:55:7b:c2:22:c1:8c:fb:4b:3e:d8:b8:71:a6:09:e0:23:6f:
94:ab:b1:e8:78:a1:8f:6b:08:6a:66:1e:fa:17:35:26:bd:52:
e2:73:92:96:63:f2:cc:df:09:3d:1b:43:05:db:0f:2c:4c:50:
62:98:e0:40:db:34:cf:d2:3b:77:54:f2:bb:ce:50:52:c8:4d:
90:43:8f:ea:60:b6:de:4e:79:e2:09:ba:c7:27:4a:ab:bf:6f:
a0:6c:ae:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkmRVpNU55ESmTVdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxMTA1NTQxN1oXDTI1MDYwOTA1NTQxN1owLzEtMCsGA1UEAxMk
YTZmZjJlZTEtNjllOC00NDcyLWE2NDEtMzBkYmE1MWU4Yjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr87rMUmUyF6K4PzlyD4yxjl1vhISDzYXjIH
OLs1A9JEAEb13XmWQ3LQ3tL86XEMSF0IaVaqZI4ZM9oPnERRVvG3H5oqPmZt+oik
ZS1NbCloflXb+6/BeBHgzz5+MHKxmYY5/N6/zIKN4qS2lnpTciX8Pi0xPzaUbKrp
tTi5KL0Lo8wxgo2qpALmUTcNRQ/XlViuIjvNbtXnAJ0/Q/5ml8EyRKkCqirEBEPw
fjvmAf72QirPWOyRDHzSel4g8m7MH7y39Tt4I0FFRMRkisLB6kfbiJEi8wfIixhN
cYvL2a4wNg6tyur5r7hBEdGA/Aepi01Akf94qITapj+9w99PhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3Dp8IdbI7lNoUk4uFHWeA9EdLJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTdmZGIxMjQtMDEwMS0z
ZDFiLWIwYTgtNzBlNjQ5OTJjMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/CN39bUvEkIxeSZdoQKRz2UNT8WBcPZljqXPyiYeTWl5g21SsLah79
F3sqZQJBEZvJAU4Zb+He7rqzT8nPDjdoQiYGXdR4EBoRPPTYE4ni/gdcUNVVRS3h
Cgbw9pCw4lMnQeDZw1V0KvUZTKYULRhSM885Moxg+YMPh17Yr5u0nlstCcvkqV3/
ew+bZaAcI12I6hqlPFslRx1sc4/8ZXC3wrxVe8IiwYz7Sz7YuHGmCeAjb5Srseh4
oY9rCGpmHvoXNSa9UuJzkpZj8szfCT0bQwXbDyxMUGKY4EDbNM/SO3dU8rvOUFLI
TZBDj+pgtt5OeeIJuscnSqu/b6BsrtE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:51 2025 by rpki-client