Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa
File: 17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa (raw, json)
Hash identifier: 4bIm0pi6UY1J0mx7nD/aJXL2SPf+gkCSSD+yPRU9G80=
Subject key identifier: 9F:2E:5A:D4:75:5D:08:29:48:DC:59:15:77:F1:31:0D:C6:A9:77:23
Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial: 010D0C9F432858488815E6EDC8A423A6083B1900
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 398555
IP address blocks: 192.111.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e6:ed:c8:a4:23:a6:08:3b:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=5511abb1-0568-456a-a11f-ef2b6632e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:b6:2d:d4:ee:c2:81:4f:f5:7e:07:09:79:
a5:d2:9b:ce:4b:63:42:cc:49:c0:a2:3b:41:84:99:
bf:d8:c6:b9:50:11:58:33:c0:76:bc:ad:a0:20:f5:
58:ab:c5:ad:38:22:eb:28:7b:eb:b3:9f:70:82:f8:
6b:65:c4:27:5c:95:8e:4c:78:6c:97:84:5e:f5:42:
ce:12:63:fa:af:58:41:a9:8c:4b:65:82:ae:34:b3:
3d:49:7d:04:02:8b:f5:cb:a3:cf:b0:32:71:d1:a1:
d1:28:4f:d9:ea:41:7c:cc:cf:9b:dd:6f:5b:ea:e5:
8d:3c:96:ba:55:32:98:d0:dd:ff:85:d3:e0:85:84:
e8:7c:01:c8:08:bc:36:4a:b0:ee:c1:5d:5c:36:90:
b6:be:e7:bd:16:4c:bb:cb:9d:a5:77:3f:a1:c0:8d:
c4:d5:b5:48:74:4a:a4:d7:97:8f:7a:ee:f2:28:2f:
69:56:c6:df:45:a0:75:61:e6:81:a3:8b:e7:8c:36:
44:b2:76:c8:04:8a:83:c6:50:1f:88:1a:2c:4a:4b:
1c:47:50:3b:c9:07:ed:ba:e2:4d:a7:79:1b:f8:f4:
18:be:2d:c0:de:b4:23:0f:76:33:98:38:68:94:05:
4a:ce:8f:c3:2f:36:68:95:51:4c:22:56:24:b9:87:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:5A:D4:75:5D:08:29:48:DC:59:15:77:F1:31:0D:C6:A9:77:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/17e9c215-3aa1-3b2b-8b8d-ce2fc2b25dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
X509v3 Authority Key Identifier:
keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:b6:db:8a:9a:d7:87:89:e4:ce:1d:86:33:8c:d4:5f:f0:91:
cc:c7:9c:a2:84:5c:6f:5f:ee:8b:7d:db:f7:a8:e3:c7:00:d3:
2c:8f:de:fe:8f:61:20:da:b8:4a:6c:1f:07:a5:2b:e8:b7:07:
cc:c7:4b:57:e5:8e:c4:3d:8e:8a:1c:1a:ba:4f:bb:e6:97:a4:
02:c4:80:4f:b6:66:97:c8:1d:28:63:af:05:8a:d1:a0:d4:1f:
3b:77:8e:5e:e2:d7:47:5d:ac:0b:61:24:8b:c8:c3:23:d0:c0:
df:ee:4a:3c:6b:e8:ea:3d:04:53:6c:fe:f2:65:03:6f:30:32:
65:8b:ef:b6:e3:84:cf:42:b1:15:ad:76:1f:c9:8b:ed:54:bf:
3f:73:86:2e:54:90:9c:fe:fc:e6:d9:e0:41:bc:46:2c:99:41:
d1:71:97:35:25:c8:b2:49:dd:6b:52:8b:a7:f6:60:67:fe:16:
b5:4b:be:02:c1:ee:63:39:1c:50:2c:90:c2:20:72:f1:d9:b4:
9a:a5:8c:99:61:78:d7:00:ba:04:ff:7a:24:bb:8e:5e:c9:d8:
4b:5d:f0:41:a3:05:f8:87:6b:f4:66:ec:e1:18:36:16:da:37:
70:de:84:f4:2f:25:a3:f8:d7:31:f1:cc:f6:bb:16:ba:74:c3:
cf:57:c5:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiIFebtyKQjpgg7GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4
ZmNkMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NTUxMWFiYjEtMDU2OC00NTZhLWExMWYtZWYyYjY2MzJlNzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBK2LdTuwoFP9X4HCXml0pvOS2NCzEnAojtB
hJm/2Ma5UBFYM8B2vK2gIPVYq8WtOCLrKHvrs59wgvhrZcQnXJWOTHhsl4Re9ULO
EmP6r1hBqYxLZYKuNLM9SX0EAov1y6PPsDJx0aHRKE/Z6kF8zM+b3W9b6uWNPJa6
VTKY0N3/hdPghYTofAHICLw2SrDuwV1cNpC2vue9Fky7y52ldz+hwI3E1bVIdEqk
15ePeu7yKC9pVsbfRaB1YeaBo4vnjDZEsnbIBIqDxlAfiBosSkscR1A7yQftuuJN
p3kb+PQYvi3A3rQjD3YzmDholAVKzo/DLzZolVFMIlYkuYfNzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8uWtR1XQgpSNxZFXfxMQ3GqXcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3
YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMTdlOWMyMTUtM2FhMS0z
YjJiLThiOGQtY2UyZmMyYjI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1
OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5
OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy
MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGW224qa14eJ5M4dhjOM1F/wkczHnKKEXG9f7ot92/eo48cA0yyP3v6P
YSDauEpsHwelK+i3B8zHS1fljsQ9joocGrpPu+aXpALEgE+2ZpfIHShjrwWK0aDU
Hzt3jl7i10ddrAthJIvIwyPQwN/uSjxr6Oo9BFNs/vJlA28wMmWL77bjhM9CsRWt
dh/Ji+1Uvz9zhi5UkJz+/ObZ4EG8RiyZQdFxlzUlyLJJ3WtSi6f2YGf+FrVLvgLB
7mM5HFAskMIgcvHZtJqljJlheNcAugT/eiS7jl7J2Etd8EGjBfiHa/Rm7OEYNhba
N3DehPQvJaP41zHxzPa7Frp0w89Xxe0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:51 2025 by rpki-client