Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af2676d1-ee13-31fb-8725-5c57a151fc10.roa
File: af2676d1-ee13-31fb-8725-5c57a151fc10.roa (raw, json)
Hash identifier: xcwR+cznnbl4fL1dk18MvTEnyJu+MlFLbSpkjzclYYw=
Subject key identifier: B8:09:4A:22:38:63:0B:7C:F2:06:AA:AC:51:62:6E:EA:6D:72:61:E0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E8F15B516238894828C577F0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af2676d1-ee13-31fb-8725-5c57a151fc10.roa
Signing time: Mon 17 Feb 2025 06:40:44 +0000
ROA not before: Mon 17 Feb 2025 06:40:44 +0000
ROA not after: Sun 18 May 2025 05:40:44 +0000
asID: 213676
IP address blocks: 172.111.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:f1:5b:51:62:38:89:48:28:c5:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 06:40:44 2025 GMT
Not After : May 18 05:40:44 2025 GMT
Subject: CN=6a69b1a1-494e-43b7-acd1-62e1ee9978d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:62:db:b4:f9:29:9b:f9:e4:f8:4a:32:8f:
d9:93:88:8f:42:40:ac:c5:ae:88:8c:a0:e3:f7:72:
6f:d1:33:8a:03:1b:c7:3b:95:b8:a6:0f:be:db:26:
f0:3b:68:9d:0d:8b:34:c9:49:fe:e7:61:c7:d3:99:
a6:18:f8:66:e2:a6:99:b8:5c:f2:fb:73:f1:cb:71:
47:37:f4:6d:08:23:00:ea:31:4f:28:07:aa:c1:66:
ae:8c:a1:93:70:db:49:9b:c2:3b:cc:aa:ce:8e:d9:
75:f2:73:9a:f8:40:af:60:5a:5f:78:77:e7:83:a1:
7a:2d:c8:61:b6:53:54:a8:37:ae:43:3a:cd:86:da:
1e:ab:1c:cb:41:d1:af:42:1e:1f:60:f2:48:37:87:
5c:bc:60:8a:dd:55:ae:0b:dd:d2:5a:bd:1f:d4:93:
29:b8:8a:c9:18:51:aa:17:27:f5:a5:13:64:74:61:
d4:20:c4:f4:a9:94:b3:f7:54:03:37:37:2a:bb:84:
b5:72:82:09:52:fb:85:96:7e:3e:3c:45:0e:e9:00:
9c:3b:5c:65:72:3c:27:34:4d:51:86:62:40:02:e5:
46:0e:72:ed:c5:1e:a8:12:91:94:c2:70:75:dc:81:
db:12:97:84:36:3d:dc:5b:82:00:1e:fb:b8:37:11:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:09:4A:22:38:63:0B:7C:F2:06:AA:AC:51:62:6E:EA:6D:72:61:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af2676d1-ee13-31fb-8725-5c57a151fc10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:80:0e:82:5d:7f:9e:b5:33:58:b4:89:5b:24:45:ee:d8:1e:
3e:bf:e1:f6:48:99:ad:a5:74:f5:02:7d:9e:02:8e:a5:1b:70:
c4:1c:86:5e:52:7a:3b:cb:be:ca:05:62:a5:bc:b9:0c:29:21:
0f:4d:19:72:13:54:c7:0a:ea:b1:1f:21:82:d8:15:72:dd:a5:
55:21:60:87:a1:33:98:5b:4e:a0:80:da:ce:5b:ff:d5:ac:d8:
64:bf:f3:df:62:3e:e9:d1:f8:3e:1d:13:17:64:ab:b8:5d:87:
7d:4f:24:74:fb:89:0c:cc:f5:17:db:7d:89:f6:97:b3:0d:41:
c4:69:2a:f3:96:b0:42:e2:5b:9b:0c:55:0d:4b:7a:94:de:53:
cb:51:1e:6a:2c:e1:7b:e6:9e:03:12:bc:11:e7:6f:80:50:71:
e9:dc:bf:ba:a7:c8:09:65:ff:b5:8c:2e:47:ce:4b:3a:a4:b3:
7e:25:72:2d:b0:14:82:56:b2:c9:a9:78:85:0e:cc:81:8e:38:
6e:40:90:16:c0:ee:58:a3:6b:5f:3d:29:cc:57:49:75:ed:4d:
3f:16:02:a6:4d:85:52:4e:a3:1d:10:a4:f7:e1:b8:04:0a:59:
f2:b4:f6:73:32:39:fd:d2:ec:ae:f5:bb:e5:85:01:6e:38:6c:
a1:ee:6f:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjo8VtRYjiJSCjFd/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIxNzA2NDA0NFoXDTI1MDUxODA1NDA0NFowLzEtMCsGA1UEAxMk
NmE2OWIxYTEtNDk0ZS00M2I3LWFjZDEtNjJlMWVlOTk3OGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1i27T5KZv55PhKMo/Zk4iPQkCsxa6IjKDj
93Jv0TOKAxvHO5W4pg++2ybwO2idDYs0yUn+52HH05mmGPhm4qaZuFzy+3Pxy3FH
N/RtCCMA6jFPKAeqwWaujKGTcNtJm8I7zKrOjtl18nOa+ECvYFpfeHfng6F6Lchh
tlNUqDeuQzrNhtoeqxzLQdGvQh4fYPJIN4dcvGCK3VWuC93SWr0f1JMpuIrJGFGq
Fyf1pRNkdGHUIMT0qZSz91QDNzcqu4S1coIJUvuFln4+PEUO6QCcO1xlcjwnNE1R
hmJAAuVGDnLtxR6oEpGUwnB13IHbEpeENj3cW4IAHvu4NxFMuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgJSiI4Ywt88gaqrFFibuptcmHgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWYyNjc2ZDEtZWUxMy0z
MWZiLTg3MjUtNWM1N2ExNTFmYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWADoJdf561M1i0iVskRe7YHj6/4fZIma2ldPUCfZ4CjqUbcMQchl5S
ejvLvsoFYqW8uQwpIQ9NGXITVMcK6rEfIYLYFXLdpVUhYIehM5hbTqCA2s5b/9Ws
2GS/899iPunR+D4dExdkq7hdh31PJHT7iQzM9RfbfYn2l7MNQcRpKvOWsELiW5sM
VQ1LepTeU8tRHmos4XvmngMSvBHnb4BQcencv7qnyAll/7WMLkfOSzqks34lci2w
FIJWssmpeIUOzIGOOG5AkBbA7lija189KcxXSXXtTT8WAqZNhVJOox0QpPfhuAQK
WfK09nMyOf3S7K71u+WFAW44bKHub84=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:21:36 2025 by rpki-client