Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
File: 4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa (raw, json)
Hash identifier: UYpKI5SuC5hfBJEU0dB45+F3kX5ezvp3kVpKwUFsqf4=
Subject key identifier: F4:26:F3:73:BC:B6:29:2E:D1:2F:CF:11:C6:EF:86:EB:CC:5D:E3:41
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4297DD7CD61AA955F7000
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 172.111.117.16/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:29:7d:d7:cd:61:aa:95:5f:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=155cab01-bde1-4a37-992a-d38bae9f4a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:cc:57:34:d8:b3:6c:ba:0c:4f:b4:ba:ee:
05:38:12:68:a4:e4:a7:28:9c:a9:f3:e9:16:72:cc:
ee:94:57:67:ce:90:ff:c0:0c:8d:d3:cb:ac:7b:33:
22:0a:65:b7:8e:80:f2:37:26:a7:18:bf:d1:93:90:
17:b3:8b:9e:e7:12:86:39:cc:63:eb:23:6d:5b:7a:
b9:d3:64:a0:b7:47:df:25:fe:b5:5b:c4:b5:80:ee:
89:b3:01:52:9d:cb:77:d8:9c:34:6c:fe:c1:5d:00:
97:dc:37:1f:6b:c0:2c:ef:06:bb:b4:d3:9a:95:ba:
fc:47:f6:1d:9c:7f:a0:b7:0f:a9:7a:51:6e:3d:f3:
d5:5a:ed:18:42:df:e4:78:b6:f5:37:23:f4:02:1e:
18:56:12:7a:65:63:01:e1:03:7b:97:b2:46:41:eb:
8c:a0:50:94:55:77:0e:ab:e4:a7:06:99:18:4d:69:
63:ab:61:c2:49:59:ff:50:1a:58:27:92:5d:2d:b1:
01:bb:69:e1:22:34:0d:65:8b:8c:f7:27:f7:02:bd:
c1:fa:ea:c9:7b:f6:e4:72:ca:c3:a1:0c:89:b6:dc:
c4:d8:a6:ae:92:ce:d8:24:e5:37:f7:ea:b0:d9:f2:
2d:04:96:15:12:9f:d7:05:0a:7d:52:f1:84:bf:24:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:F3:73:BC:B6:29:2E:D1:2F:CF:11:C6:EF:86:EB:CC:5D:E3:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f1e2646-97eb-36f6-bccf-cacd5667cf8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.117.16/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a4:c4:f2:43:2c:87:f4:a5:f5:bf:a3:b5:61:c0:78:09:62:
19:db:24:a3:d0:3a:0d:27:56:62:8f:cc:b6:c8:73:f9:6c:36:
e0:b1:33:2c:0a:25:a1:dd:b2:64:68:08:87:e7:51:dd:35:aa:
a9:b7:40:9f:54:57:69:62:ca:5f:d4:35:83:75:fd:82:7f:6c:
c8:6b:47:7d:f8:ce:3f:66:88:aa:fa:ed:62:07:12:42:45:dc:
d7:dd:fb:de:2c:f7:33:a9:df:6b:a9:ea:21:5b:1d:e2:1d:20:
90:6e:99:6c:43:a5:c0:34:c0:24:b7:d0:f7:c5:7c:76:1b:e2:
00:bf:1c:15:df:0b:e1:78:1a:bd:b0:da:4b:c4:33:f6:eb:e1:
76:13:ab:17:9f:f9:c3:a6:fa:3a:7d:3d:92:fd:33:6e:ef:8e:
59:3a:80:be:22:5b:39:d0:cb:3f:a9:5b:df:64:f9:db:73:86:
65:a1:40:7c:ac:2c:74:28:5f:c8:5f:fa:3f:d2:83:99:cc:4c:
41:e9:36:52:87:c4:fb:cd:8c:0f:5b:2b:d6:94:72:74:28:81:
58:94:b1:13:e3:19:3e:0e:8a:a4:61:27:ab:88:fd:98:b0:24:
7b:df:fb:94:9c:71:d7:54:74:ec:30:9e:eb:5e:1e:21:f3:32:
9c:d4:9d:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCl9181hqpVfcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTU1Y2FiMDEtYmRlMS00YTM3LTk5MmEtZDM4YmFlOWY0YTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3MVzTYs2y6DE+0uu4FOBJopOSnKJyp8+kW
cszulFdnzpD/wAyN08usezMiCmW3joDyNyanGL/Rk5AXs4ue5xKGOcxj6yNtW3q5
02Sgt0ffJf61W8S1gO6JswFSnct32Jw0bP7BXQCX3Dcfa8As7wa7tNOalbr8R/Yd
nH+gtw+pelFuPfPVWu0YQt/keLb1NyP0Ah4YVhJ6ZWMB4QN7l7JGQeuMoFCUVXcO
q+SnBpkYTWljq2HCSVn/UBpYJ5JdLbEBu2nhIjQNZYuM9yf3Ar3B+urJe/bkcsrD
oQyJttzE2Kauks7YJOU39+qw2fItBJYVEp/XBQp9UvGEvyStNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPQm83O8tiku0S/PEcbvhuvMXeNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGYxZTI2NDYtOTdlYi0z
NmY2LWJjY2YtY2FjZDU2NjdjZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG91EDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQARpMTyQyyH9KX1v6O1YcB4CWIZ2ySj0DoNJ1Zij8y2yHP5bDbgsTMs
CiWh3bJkaAiH51HdNaqpt0CfVFdpYspf1DWDdf2Cf2zIa0d9+M4/Zoiq+u1iBxJC
RdzX3fveLPczqd9rqeohWx3iHSCQbplsQ6XANMAkt9D3xXx2G+IAvxwV3wvheBq9
sNpLxDP26+F2E6sXn/nDpvo6fT2S/TNu745ZOoC+Ils50Ms/qVvfZPnbc4ZloUB8
rCx0KF/IX/o/0oOZzExB6TZSh8T7zYwPWyvWlHJ0KIFYlLET4xk+DoqkYSeriP2Y
sCR73/uUnHHXVHTsMJ7rXh4h8zKc1J1E
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:53:43 2025 by rpki-client