Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa
File: fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa (raw, json)
Hash identifier: 0xh+yIApjVzviM4UWouA3KebmLfW8K+826hgEIVM8xM=
Subject key identifier: 02:3C:7E:47:9F:BB:76:FA:60:37:FD:11:45:83:65:AC:D7:FF:17:1E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848828080532444FFED4A9F2380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 197071
IP address blocks: 172.111.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:80:53:24:44:ff:ed:4a:9f:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=99f09576-4f1c-4762-aef8-6fe23fd36639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:bc:d8:c9:f6:64:1f:be:05:0d:23:93:e2:
14:cf:83:38:e5:b4:8d:e5:4a:fe:d5:68:4e:28:4e:
12:36:7c:14:7e:b0:77:a8:80:66:82:0f:94:a8:17:
af:28:4d:a1:3f:52:d8:7d:2b:b8:ca:bd:70:c4:f1:
3d:52:3a:b1:12:29:11:ba:b3:ac:8f:42:d0:4d:c1:
06:20:da:2b:8b:e6:47:b8:78:8d:b9:45:a8:07:99:
c1:1d:87:f0:85:9a:bc:1c:5c:14:0f:32:4d:3e:75:
1a:42:f5:d5:cb:65:bb:1e:8c:6e:35:8a:a2:22:c3:
63:af:26:d9:dd:2a:ce:8a:80:1b:98:9c:57:64:53:
5b:c6:cf:3f:4b:f7:46:ee:a8:1a:8a:f6:ca:57:18:
d9:7d:60:50:f1:67:b5:7e:6e:6c:ec:81:7c:4a:e4:
ca:cf:7d:89:46:c9:a6:09:6d:58:6e:db:fd:a2:be:
56:3c:cb:f9:8e:5d:fa:cb:ed:a2:84:18:f6:8e:ed:
cd:71:88:73:34:59:b9:19:70:a4:d6:c5:a1:29:db:
74:b5:3f:c6:3c:0d:e9:7b:a7:89:0c:a6:88:c4:c1:
ba:08:65:5c:a3:0a:48:65:79:ba:79:fe:4e:6b:01:
cc:1a:d1:98:2c:16:6d:6e:bb:8f:48:f3:84:80:ee:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3C:7E:47:9F:BB:76:FA:60:37:FD:11:45:83:65:AC:D7:FF:17:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fbef1aae-1406-3b2a-8227-bb0f6e60e175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:0e:57:a2:3e:7c:c2:96:74:10:de:f0:0c:ae:56:e7:58:6b:
e9:2f:1f:0d:07:df:32:ac:7a:71:33:b2:18:f4:6f:70:0b:63:
6d:b8:fd:28:63:8f:af:03:63:dd:48:03:09:80:be:c8:ab:3d:
75:c4:c2:c5:7a:c2:ae:d5:d3:50:0d:b9:ba:8a:d4:ff:eb:75:
55:08:a3:6a:e5:a8:a2:96:80:f3:76:af:33:c5:44:43:33:c6:
aa:ab:57:b2:5d:9a:51:e9:66:ce:6f:00:8b:bc:43:34:38:ee:
54:65:78:4a:09:4c:2f:3f:f7:ae:94:d0:9a:3b:47:ff:f0:7a:
67:80:d2:3d:15:f7:44:1f:3a:40:9b:b3:48:a4:3d:29:53:d8:
a6:42:dc:02:d9:b9:94:5d:f3:33:e3:ec:8f:34:4f:b3:a1:75:
d7:5c:bb:df:90:7f:de:54:e9:18:60:9f:2a:22:fc:14:d4:a3:
0d:87:12:6b:08:e1:ef:ea:4c:eb:b6:54:7f:5d:4b:99:1d:33:
42:9e:de:e2:b9:40:7c:c4:c5:61:89:4c:8f:72:94:c9:91:4f:
da:2c:5f:9f:df:47:01:fc:68:ce:ee:33:fb:3c:ff:d9:78:6a:
5f:f7:65:f4:11:77:4e:7f:d9:46:82:79:6d:30:9a:e8:a4:d0:
e7:a1:48:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIBTJET/7UqfI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OTlmMDk1NzYtNGYxYy00NzYyLWFlZjgtNmZlMjNmZDM2NjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksK82Mn2ZB++BQ0jk+IUz4M45bSN5Ur+1WhO
KE4SNnwUfrB3qIBmgg+UqBevKE2hP1LYfSu4yr1wxPE9UjqxEikRurOsj0LQTcEG
INori+ZHuHiNuUWoB5nBHYfwhZq8HFwUDzJNPnUaQvXVy2W7HoxuNYqiIsNjrybZ
3SrOioAbmJxXZFNbxs8/S/dG7qgaivbKVxjZfWBQ8We1fm5s7IF8SuTKz32JRsmm
CW1Ybtv9or5WPMv5jl36y+2ihBj2ju3NcYhzNFm5GXCk1sWhKdt0tT/GPA3pe6eJ
DKaIxMG6CGVcowpIZXm6ef5OawHMGtGYLBZtbruPSPOEgO7O2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAI8fkefu3b6YDf9EUWDZazX/xceMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmJlZjFhYWUtMTQwNi0z
YjJhLTgyMjctYmIwZjZlNjBlMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoOV6I+fMKWdBDe8AyuVudYa+kvHw0H3zKsenEzshj0b3ALY224/Shj
j68DY91IAwmAvsirPXXEwsV6wq7V01ANubqK1P/rdVUIo2rlqKKWgPN2rzPFREMz
xqqrV7JdmlHpZs5vAIu8QzQ47lRleEoJTC8/966U0Jo7R//wemeA0j0V90QfOkCb
s0ikPSlT2KZC3ALZuZRd8zPj7I80T7Ohdddcu9+Qf95U6Rhgnyoi/BTUow2HEmsI
4e/qTOu2VH9dS5kdM0Ke3uK5QHzExWGJTI9ylMmRT9osX5/fRwH8aM7uM/s8/9l4
al/3ZfQRd05/2UaCeW0wmuik0OehSOY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:08 2025 by rpki-client