Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffb606d7-9399-3948-a86b-adc69eada3e2.roa
File: ffb606d7-9399-3948-a86b-adc69eada3e2.roa (raw, json)
Hash identifier: v+FI6n4iys93iDueZLqqEjM3Yz8AhpxwKArWsv+a/38=
Subject key identifier: 88:42:10:71:A9:35:63:16:B1:A9:7C:11:60:84:D1:D7:59:04:28:D6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493A56E48597E077AB889CEC00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffb606d7-9399-3948-a86b-adc69eada3e2.roa
Signing time: Tue 18 Mar 2025 10:25:47 +0000
ROA not before: Tue 18 Mar 2025 10:25:47 +0000
ROA not after: Mon 16 Jun 2025 10:25:47 +0000
asID: 36352
IP address blocks: 172.111.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:56:e4:85:97:e0:77:ab:88:9c:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 18 10:25:47 2025 GMT
Not After : Jun 16 10:25:47 2025 GMT
Subject: CN=57cc4451-c786-4512-9467-c17a82c38f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:cc:da:73:48:a6:74:c6:02:99:c0:ca:fc:
b2:33:30:41:62:1b:cc:2a:89:a2:32:82:26:d8:96:
3b:85:10:41:74:76:8f:34:80:d2:da:cc:66:a1:d4:
f4:92:82:a7:26:e8:4e:3c:f9:2d:15:9b:ce:70:6d:
ef:c4:f8:8b:1c:26:24:8f:23:b5:90:82:16:88:a9:
69:ce:2f:f1:24:7f:3b:89:39:b7:04:3d:e2:91:88:
3f:26:a4:81:2d:1b:1a:ff:53:34:f7:d8:46:fa:ea:
77:a0:42:f1:bd:a7:e8:bd:f5:66:d5:1c:54:83:04:
14:fe:52:9e:46:0e:38:68:72:35:53:1b:b1:8c:30:
10:c5:df:e7:fd:4d:64:d2:49:b1:29:8d:96:23:b8:
99:42:eb:01:a8:a2:c1:54:9a:63:67:01:22:e4:00:
ff:62:84:74:48:f7:74:c4:63:ac:8a:73:92:83:91:
80:d6:2a:fc:c8:05:1e:79:8a:65:b6:ef:ae:5b:0d:
d2:d6:cd:10:16:b0:f6:e2:70:1f:43:5f:81:fc:83:
fd:85:2c:b1:89:2b:a1:35:88:be:3f:2d:3c:67:1e:
ef:af:38:7d:17:4f:30:b8:b2:ad:51:51:c2:86:f4:
ce:3b:a3:76:8e:1b:ba:69:05:07:62:a6:c7:e8:bd:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:42:10:71:A9:35:63:16:B1:A9:7C:11:60:84:D1:D7:59:04:28:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffb606d7-9399-3948-a86b-adc69eada3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:95:2f:48:71:b7:43:0a:ad:79:30:6b:c0:14:d0:1b:4c:61:
3c:c0:d9:e5:00:26:a5:bc:78:32:8e:d6:b1:73:7e:e5:90:a3:
f1:1c:9d:b6:f4:f3:cb:f2:1a:3e:8a:e8:03:5e:48:c9:0e:22:
dd:4d:bd:9e:4a:ef:dc:5a:62:83:95:83:91:d0:a9:39:2c:ef:
d8:09:af:a8:66:85:67:29:e0:f5:8f:60:f4:bc:16:e6:01:94:
34:ed:31:b6:51:a7:1c:43:0b:88:cb:d1:03:e0:14:61:eb:40:
1e:b3:b9:f1:54:18:1e:e4:c2:79:90:72:7d:d6:95:2b:c1:a8:
6d:9e:93:4d:59:96:9d:65:2c:d7:fc:b0:f0:f0:f1:de:60:c3:
f8:b6:92:14:ca:29:15:e7:a0:5a:0c:13:72:f9:4d:59:4e:8a:
9b:ec:a9:76:1f:1d:60:1d:87:1e:d6:a2:bf:e6:e4:67:d3:eb:
fa:73:1e:a0:9c:7e:8d:fc:2f:7f:0c:0c:7d:d8:b0:e5:df:a1:
61:67:48:bb:a4:ba:1e:94:97:82:0f:3e:da:e1:09:22:8a:40:
a2:fd:8b:a4:5c:6b:82:dd:b2:83:17:ce:a4:21:d2:a7:09:63:
20:c3:ad:2f:87:81:e1:0d:27:26:e9:af:f0:26:af:ff:71:5a:
91:a2:8b:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6VuSFl+B3q4ic7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxODEwMjU0N1oXDTI1MDYxNjEwMjU0N1owLzEtMCsGA1UEAxMk
NTdjYzQ0NTEtYzc4Ni00NTEyLTk0NjctYzE3YTgyYzM4ZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVvM2nNIpnTGApnAyvyyMzBBYhvMKomiMoIm
2JY7hRBBdHaPNIDS2sxmodT0koKnJuhOPPktFZvOcG3vxPiLHCYkjyO1kIIWiKlp
zi/xJH87iTm3BD3ikYg/JqSBLRsa/1M099hG+up3oELxvafovfVm1RxUgwQU/lKe
Rg44aHI1UxuxjDAQxd/n/U1k0kmxKY2WI7iZQusBqKLBVJpjZwEi5AD/YoR0SPd0
xGOsinOSg5GA1ir8yAUeeYpltu+uWw3S1s0QFrD24nAfQ1+B/IP9hSyxiSuhNYi+
Py08Zx7vrzh9F08wuLKtUVHChvTOO6N2jhu6aQUHYqbH6L0RZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhCEHGpNWMWsal8EWCE0ddZBCjWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmZiNjA2ZDctOTM5OS0z
OTQ4LWE4NmItYWRjNjllYWRhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuVL0hxt0MKrXkwa8AU0BtMYTzA2eUAJqW8eDKO1rFzfuWQo/Ecnbb0
88vyGj6K6ANeSMkOIt1NvZ5K79xaYoOVg5HQqTks79gJr6hmhWcp4PWPYPS8FuYB
lDTtMbZRpxxDC4jL0QPgFGHrQB6zufFUGB7kwnmQcn3WlSvBqG2ek01Zlp1lLNf8
sPDw8d5gw/i2khTKKRXnoFoME3L5TVlOipvsqXYfHWAdhx7Wor/m5GfT6/pzHqCc
fo38L38MDH3YsOXfoWFnSLukuh6Ul4IPPtrhCSKKQKL9i6Rca4LdsoMXzqQh0qcJ
YyDDrS+HgeENJybpr/Amr/9xWpGii00=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:46 2025 by rpki-client