Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1d2c3e-efc1-3797-9f2d-35c4f13bbf13.roa
File: 8a1d2c3e-efc1-3797-9f2d-35c4f13bbf13.roa (raw, json)
Hash identifier: 0C1JAlM19AaDD3VX034PNdbkWg6FvXsGotTDlD8tXs4=
Subject key identifier: 61:59:22:EF:A8:A9:0D:CA:EA:59:26:0C:86:18:9F:96:F5:34:43:2F
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848D37655A537C237CF1F2E3F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1d2c3e-efc1-3797-9f2d-35c4f13bbf13.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 151106
IP address blocks: 172.111.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:55:a5:37:c2:37:cf:1f:2e:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=af2130ed-c589-43b8-901f-a2c036e89c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:66:c5:a9:ec:75:77:2d:e9:dd:be:da:45:
c8:91:ee:cd:c9:50:cf:84:b8:b2:a9:fb:8f:cb:89:
ed:a7:bf:00:9c:f2:4e:b9:39:c8:8c:a6:77:cd:61:
6a:3b:f7:d4:73:a2:0d:e6:cc:d6:af:74:88:e0:55:
6e:9a:2c:bb:d6:29:d0:86:e1:80:27:e2:da:70:b2:
ec:52:83:b5:a5:e3:ec:1e:ec:a8:eb:ef:8f:98:e8:
40:b4:32:fc:76:c0:27:4b:58:2e:03:ca:55:dc:72:
92:28:50:79:c5:82:76:2a:5c:4d:22:38:d8:48:1b:
92:bc:e6:f3:ed:44:da:8b:8e:64:13:81:78:a9:18:
cb:85:a0:5b:77:de:be:2e:2b:1d:b1:b6:b7:ae:17:
ff:07:9b:64:b2:8a:d2:0c:bc:a9:c9:4c:3c:6c:69:
2d:eb:e1:f7:ce:cb:01:db:02:a8:2d:d7:ee:3b:d3:
ca:05:6c:ad:1e:09:b4:f5:7f:47:ca:3d:b0:82:25:
e2:e1:3b:f8:dc:ad:d7:47:12:b0:f0:4b:99:ea:4c:
73:7c:00:d0:91:0b:ce:e7:8d:0d:26:cf:cf:5f:ce:
94:db:6e:21:82:29:34:e9:1a:53:28:e9:eb:eb:72:
d4:3f:e3:1d:a6:22:30:6c:47:f2:d0:e6:16:7e:6a:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:22:EF:A8:A9:0D:CA:EA:59:26:0C:86:18:9F:96:F5:34:43:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1d2c3e-efc1-3797-9f2d-35c4f13bbf13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:9c:85:2d:a7:4e:ea:cf:68:fb:7c:b9:ab:7d:d4:73:5c:5d:
a5:20:c9:f4:43:b1:db:ba:4d:c1:f4:03:6d:e9:c5:f6:f9:0d:
77:ff:c0:cb:8a:3a:1d:3b:ec:61:10:8e:d4:c4:93:f6:ab:83:
87:fb:12:b8:0e:8b:18:bf:9d:a6:1c:c5:e2:dc:37:41:c5:52:
1e:00:3b:97:9a:0d:c7:9e:11:35:1d:35:2c:c2:1e:d0:fb:ff:
46:33:b1:64:0c:5e:66:e7:ae:80:d6:e0:d8:7c:c0:c9:5a:0a:
c9:f4:3f:97:10:23:46:cd:ff:47:c5:a5:71:b4:4b:39:92:ee:
ee:12:f7:00:e2:11:24:d8:f8:2d:49:f8:37:bb:88:97:13:4c:
20:cd:e9:b8:e7:dc:bd:b3:c9:53:a5:07:af:af:5a:ca:07:10:
2e:c0:7b:26:5a:69:3a:93:6c:9e:7c:39:44:c4:fd:77:9b:e1:
85:44:cb:01:aa:3d:fc:c7:84:f8:e8:ea:ce:00:cc:2f:1b:f1:
a7:2f:72:6f:23:85:59:de:e8:d9:c8:fd:ec:19:4e:15:0f:16:
9f:d3:54:20:9d:b2:08:2b:5a:28:08:da:88:a5:ed:5e:99:03:
8d:4e:40:9b:81:cf:ed:71:0b:f3:df:6b:6a:39:38:20:18:8e:
a7:d4:39:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlWlN8I3zx8uP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk
YWYyMTMwZWQtYzU4OS00M2I4LTkwMWYtYTJjMDM2ZTg5YzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6NmxansdXct6d2+2kXIke7NyVDPhLiyqfuP
y4ntp78AnPJOuTnIjKZ3zWFqO/fUc6IN5szWr3SI4FVumiy71inQhuGAJ+LacLLs
UoO1pePsHuyo6++PmOhAtDL8dsAnS1guA8pV3HKSKFB5xYJ2KlxNIjjYSBuSvObz
7UTai45kE4F4qRjLhaBbd96+Lisdsba3rhf/B5tksorSDLypyUw8bGkt6+H3zssB
2wKoLdfuO9PKBWytHgm09X9Hyj2wgiXi4Tv43K3XRxKw8EuZ6kxzfADQkQvO540N
Js/PX86U224hgik06RpTKOnr63LUP+MdpiIwbEfy0OYWfmp9uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFZIu+oqQ3K6lkmDIYYn5b1NEMvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGExZDJjM2UtZWZjMS0z
Nzk3LTlmMmQtMzVjNGYxM2JiZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKchS2nTurPaPt8uat91HNcXaUgyfRDsdu6TcH0A23pxfb5DXf/wMuK
Oh077GEQjtTEk/arg4f7ErgOixi/naYcxeLcN0HFUh4AO5eaDceeETUdNSzCHtD7
/0YzsWQMXmbnroDW4Nh8wMlaCsn0P5cQI0bN/0fFpXG0SzmS7u4S9wDiESTY+C1J
+De7iJcTTCDN6bjn3L2zyVOlB6+vWsoHEC7AeyZaaTqTbJ58OUTE/Xeb4YVEywGq
PfzHhPjo6s4AzC8b8acvcm8jhVne6NnI/ewZThUPFp/TVCCdsggrWigI2oil7V6Z
A41OQJuBz+1xC/Pfa2o5OCAYjqfUOSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:27 2025 by rpki-client