Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf38f5b0-12e8-3dd3-bf09-6a5d0d4d8530.roa
File: bf38f5b0-12e8-3dd3-bf09-6a5d0d4d8530.roa (raw, json)
Hash identifier: ONX88hwK0vzVvZPwcZIJTwMf9ZMdKM8jC/xMPReB464=
Subject key identifier: D5:56:CD:7B:E0:24:5C:15:3C:05:A3:1F:DB:6E:94:BE:D0:1B:28:AB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285849184A19F696481C75FCE88D80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf38f5b0-12e8-3dd3-bf09-6a5d0d4d8530.roa
Signing time: Thu 06 Mar 2025 05:42:32 +0000
ROA not before: Thu 06 Mar 2025 05:42:32 +0000
ROA not after: Wed 04 Jun 2025 04:42:32 +0000
asID: 9009
IP address blocks: 172.111.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:18:4a:19:f6:96:48:1c:75:fc:e8:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 6 05:42:32 2025 GMT
Not After : Jun 4 04:42:32 2025 GMT
Subject: CN=ffbc3b9f-7262-42ff-895e-81d16659b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:db:6f:18:a9:b2:3a:61:9d:1f:f8:77:66:
0a:21:f8:99:51:e9:34:e0:97:d9:48:c2:71:a1:d0:
04:97:3e:df:51:6b:63:58:c0:f9:a1:05:47:b5:dd:
d4:0d:3f:99:f1:0f:cf:01:ef:1b:c1:c5:45:4c:39:
5e:ea:6e:76:71:09:0c:19:71:c2:25:31:b1:89:1e:
89:dc:3f:ef:ae:9f:db:19:a4:fd:25:5c:3f:52:bf:
d7:ed:30:e8:f8:17:dc:8e:72:48:ad:b7:65:7b:0a:
5a:b1:59:c6:a8:4e:15:6d:1b:71:fe:6b:38:3a:7b:
1b:f1:e7:61:63:05:d1:23:5c:0b:48:7f:9b:24:e9:
48:67:57:36:33:d6:ea:4b:68:a7:25:14:8a:ad:88:
1e:1e:2d:eb:dc:04:64:04:c5:c1:aa:d6:a3:e1:35:
2a:52:ba:ef:1c:0c:a3:80:c8:06:a0:a8:d4:07:ce:
99:f6:6c:0c:7d:82:93:0b:b3:e8:8e:28:ef:ef:6e:
49:65:4d:cf:c0:5c:c9:77:11:f7:30:02:c7:72:35:
55:8a:64:f1:a0:c2:a0:d8:2d:41:87:1f:f0:72:47:
f6:94:04:21:60:f4:1b:57:c8:aa:da:48:6c:86:68:
82:13:3f:2d:43:47:97:28:83:b9:36:14:5a:7b:b2:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:CD:7B:E0:24:5C:15:3C:05:A3:1F:DB:6E:94:BE:D0:1B:28:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf38f5b0-12e8-3dd3-bf09-6a5d0d4d8530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:b9:5e:61:f1:db:57:21:81:10:48:25:c2:72:d1:b1:7c:4a:
02:ff:f0:c0:fa:7f:5c:e2:f1:09:32:e9:9b:e1:00:81:f9:b6:
de:1c:33:96:7d:d0:0d:b0:bd:5a:8d:75:ba:1d:df:c0:43:eb:
3a:80:03:7e:4c:c6:10:ac:a5:1c:9b:3b:9d:c7:63:7b:39:22:
24:f3:78:de:df:67:a0:3e:c2:71:d2:1a:a9:e5:bb:c0:37:47:
09:48:4f:74:6c:88:fb:f5:da:7b:3a:76:7c:62:c7:66:f5:d9:
0b:94:e3:76:fe:86:ff:3c:20:6e:1d:9f:91:de:9f:34:dc:e6:
04:ab:a4:50:58:3f:d5:aa:58:58:93:fb:47:41:5d:0e:72:29:
c8:1f:9f:fb:e7:a3:36:3e:ea:eb:bd:ae:20:5b:46:96:6e:4e:
8b:5f:d8:6a:37:6d:16:a7:77:6f:a5:07:87:0a:0a:eb:9b:14:
09:56:78:e1:a6:5b:a1:d7:0c:d1:24:ce:72:28:36:a9:bc:ae:
c6:f9:a6:d6:86:67:be:09:8e:df:19:04:78:f2:f5:eb:c4:49:
f9:d9:7d:ad:87:05:17:28:59:32:fc:0b:e2:c2:c3:e1:f2:2e:
f7:14:3b:08:db:c8:1e:a8:f8:6a:72:09:41:50:a6:d6:7c:fd:
86:bb:c8:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkYShn2lkgcdfzojYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMwNjA1NDIzMloXDTI1MDYwNDA0NDIzMlowLzEtMCsGA1UEAxMk
ZmZiYzNiOWYtNzI2Mi00MmZmLTg5NWUtODFkMTY2NTliNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2vbbxipsjphnR/4d2YKIfiZUek04JfZSMJx
odAElz7fUWtjWMD5oQVHtd3UDT+Z8Q/PAe8bwcVFTDle6m52cQkMGXHCJTGxiR6J
3D/vrp/bGaT9JVw/Ur/X7TDo+BfcjnJIrbdlewpasVnGqE4VbRtx/ms4Onsb8edh
YwXRI1wLSH+bJOlIZ1c2M9bqS2inJRSKrYgeHi3r3ARkBMXBqtaj4TUqUrrvHAyj
gMgGoKjUB86Z9mwMfYKTC7Pojijv725JZU3PwFzJdxH3MALHcjVVimTxoMKg2C1B
hx/wckf2lAQhYPQbV8iq2khshmiCEz8tQ0eXKIO5NhRae7LEswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVWzXvgJFwVPAWjH9tulL7QGyirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmYzOGY1YjAtMTJlOC0z
ZGQzLWJmMDktNmE1ZDBkNGQ4NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK5XmHx21chgRBIJcJy0bF8SgL/8MD6f1zi8Qky6ZvhAIH5tt4cM5Z9
0A2wvVqNdbod38BD6zqAA35MxhCspRybO53HY3s5IiTzeN7fZ6A+wnHSGqnlu8A3
RwlIT3RsiPv12ns6dnxix2b12QuU43b+hv88IG4dn5HenzTc5gSrpFBYP9WqWFiT
+0dBXQ5yKcgfn/vnozY+6uu9riBbRpZuTotf2Go3bRand2+lB4cKCuubFAlWeOGm
W6HXDNEkznIoNqm8rsb5ptaGZ74Jjt8ZBHjy9evESfnZfa2HBRcoWTL8C+LCw+Hy
LvcUOwjbyB6o+GpyCUFQptZ8/Ya7yHE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:33 2025 by rpki-client