Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19bf41c-eb1e-3bc0-ae43-4af6c96e917b.roa
File: a19bf41c-eb1e-3bc0-ae43-4af6c96e917b.roa (raw, json)
Hash identifier: qc7AQbUMxTOYaEW7YlMTrt4Vt80Ff6hlKtlReYR1uCk=
Subject key identifier: 5A:6F:69:47:C1:FC:94:FF:E1:66:02:05:3B:9A:E6:81:CB:41:EF:B4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493A54D5D9F77C5AE90C6E3DC8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19bf41c-eb1e-3bc0-ae43-4af6c96e917b.roa
Signing time: Tue 18 Mar 2025 10:21:39 +0000
ROA not before: Tue 18 Mar 2025 10:21:39 +0000
ROA not after: Mon 16 Jun 2025 10:21:39 +0000
asID: 36352
IP address blocks: 172.111.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:54:d5:d9:f7:7c:5a:e9:0c:6e:3d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 18 10:21:39 2025 GMT
Not After : Jun 16 10:21:39 2025 GMT
Subject: CN=4dced81e-4935-4e87-96ed-60efeee8f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:10:e2:5d:fc:92:92:95:cb:59:52:62:6c:
2e:9e:ec:fa:9a:91:28:89:90:43:64:85:59:e1:fb:
75:26:48:2f:1b:8f:7b:57:63:8e:3e:10:40:df:0e:
b9:ba:5b:88:ce:10:b0:46:1b:c8:05:0c:9d:57:59:
8a:6f:3f:ff:66:86:17:97:97:49:b0:0c:ae:b7:f3:
f9:9d:73:23:8e:3d:c7:b4:d0:3a:87:e1:3b:ca:42:
9e:a9:dd:48:4d:ec:3d:26:e8:6c:dd:33:15:7f:e7:
ad:b8:ae:07:4a:b0:f0:1e:97:b2:de:1b:c7:30:b0:
17:38:48:db:2d:c2:6a:67:d8:e7:86:33:65:c4:bb:
25:e2:40:ba:a6:00:90:df:a1:da:1e:e9:b0:a2:6b:
2e:a9:02:22:4e:11:a3:23:35:09:ec:a4:ad:77:23:
31:28:d3:3c:b2:e5:a4:53:c7:ea:54:c7:43:8b:79:
26:f9:e4:25:93:10:5b:62:05:c4:0f:6f:54:56:a2:
72:e8:1c:c1:11:c0:06:94:38:5e:be:0c:8e:3e:d2:
f7:56:1f:7d:55:59:8f:25:28:eb:9a:7a:62:f4:8f:
62:04:ab:83:56:e8:f5:9d:d6:70:dd:f9:3c:94:71:
58:e9:32:70:12:30:1a:55:e0:2e:ca:11:f8:10:43:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:69:47:C1:FC:94:FF:E1:66:02:05:3B:9A:E6:81:CB:41:EF:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a19bf41c-eb1e-3bc0-ae43-4af6c96e917b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:73:05:d5:3e:8b:bc:21:a3:61:86:2e:ef:b7:79:b7:07:cd:
5f:78:eb:fd:4c:64:02:df:5a:45:a7:81:c3:3a:af:4a:f4:57:
f4:04:91:0e:43:9f:26:1f:5a:08:7e:d6:7b:6b:ff:3f:54:a9:
8c:56:06:a2:d1:4d:64:ae:7b:66:3f:2b:f6:72:48:7a:c1:70:
4e:a6:5b:e7:5c:b2:f3:73:ed:a0:31:35:b6:c0:94:b2:ed:2d:
0a:79:5f:01:43:d5:a4:0b:81:84:89:00:4d:42:1d:56:a3:47:
cd:aa:5d:54:d5:3a:72:57:67:50:a6:1a:60:82:d8:96:a4:4e:
25:c7:47:29:9f:5e:04:39:17:0b:26:8e:91:92:ef:86:ae:3c:
7e:49:b1:61:6a:5a:93:56:ad:b7:d5:44:1f:54:41:41:cb:c7:
b1:72:de:0d:fa:0a:b4:7b:e4:76:06:2a:9d:a9:25:87:0e:34:
b0:ff:5d:6a:e7:8a:d6:0e:1c:65:5e:fa:c6:f9:30:61:05:9e:
6d:39:de:72:7d:56:f3:9a:dc:0a:18:9b:d4:af:39:19:e4:db:
89:ea:da:2c:c9:9c:df:fc:ff:53:d7:47:d2:28:c6:78:07:fe:
59:47:38:e4:d7:5a:e9:54:10:3d:e1:12:a5:a8:5c:53:93:e2:
64:01:8a:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6VNXZ93xa6QxuPcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxODEwMjEzOVoXDTI1MDYxNjEwMjEzOVowLzEtMCsGA1UEAxMk
NGRjZWQ4MWUtNDkzNS00ZTg3LTk2ZWQtNjBlZmVlZThmNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX0Q4l38kpKVy1lSYmwunuz6mpEoiZBDZIVZ
4ft1JkgvG497V2OOPhBA3w65uluIzhCwRhvIBQydV1mKbz//ZoYXl5dJsAyut/P5
nXMjjj3HtNA6h+E7ykKeqd1ITew9Juhs3TMVf+etuK4HSrDwHpey3hvHMLAXOEjb
LcJqZ9jnhjNlxLsl4kC6pgCQ36HaHumwomsuqQIiThGjIzUJ7KStdyMxKNM8suWk
U8fqVMdDi3km+eQlkxBbYgXED29UVqJy6BzBEcAGlDhevgyOPtL3Vh99VVmPJSjr
mnpi9I9iBKuDVuj1ndZw3fk8lHFY6TJwEjAaVeAuyhH4EEPXEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpvaUfB/JT/4WYCBTua5oHLQe+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTE5YmY0MWMtZWIxZS0z
YmMwLWFlNDMtNGFmNmM5NmU5MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNzBdU+i7who2GGLu+3ebcHzV946/1MZALfWkWngcM6r0r0V/QEkQ5D
nyYfWgh+1ntr/z9UqYxWBqLRTWSue2Y/K/ZySHrBcE6mW+dcsvNz7aAxNbbAlLLt
LQp5XwFD1aQLgYSJAE1CHVajR82qXVTVOnJXZ1CmGmCC2JakTiXHRymfXgQ5Fwsm
jpGS74auPH5JsWFqWpNWrbfVRB9UQUHLx7Fy3g36CrR75HYGKp2pJYcONLD/XWrn
itYOHGVe+sb5MGEFnm053nJ9VvOa3AoYm9SvORnk24nq2izJnN/8/1PXR9IoxngH
/llHOOTXWulUED3hEqWoXFOT4mQBiio=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:18 2025 by rpki-client