Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f7414b9-1c4b-3526-a94c-0b537985ed1f.roa
File: 4f7414b9-1c4b-3526-a94c-0b537985ed1f.roa (raw, json)
Hash identifier: v7HvrpzWB2qUSDGiu3pKb5RdDtfuHelmRb0goGQA9YU=
Subject key identifier: 43:C8:31:E1:84:D7:8F:37:5E:68:D1:90:F7:4C:56:E4:38:D2:25:60
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C43CC37A9A22FAF8107A40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f7414b9-1c4b-3526-a94c-0b537985ed1f.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 172.111.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:3c:c3:7a:9a:22:fa:f8:10:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5ebe9c38-6c3f-47f2-8310-f0dba2625d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:20:d9:0e:e8:41:d3:be:af:40:90:9f:da:
26:d1:40:cc:c5:5b:87:44:99:98:fd:31:0b:a4:4d:
69:3b:28:06:8d:d4:b0:82:75:d6:26:d5:43:1f:eb:
94:f6:c9:be:51:08:d1:df:51:4d:9d:6c:54:d6:4c:
47:7c:fb:51:6a:bd:16:1a:e4:82:76:a9:24:11:19:
ea:76:6b:d9:5e:01:cd:a3:13:1d:35:ff:96:70:da:
09:00:74:df:cb:df:ed:d2:36:61:bd:fe:40:67:28:
3e:18:39:d1:b8:7b:9e:31:f6:f1:cf:5a:3d:08:7a:
6b:15:62:cc:5a:39:e6:22:8b:bc:e8:a7:bc:8e:e0:
cf:bb:f5:60:a8:5c:d2:e3:90:f0:e3:91:06:d8:bd:
a2:2a:cb:37:ee:66:1b:35:e7:7a:15:a1:ef:77:ad:
ae:11:21:cb:4e:bd:b4:d6:61:e6:39:61:66:62:a5:
4c:61:99:91:bf:64:7d:21:61:72:29:6a:d9:70:ba:
91:ed:b1:b6:d2:23:b1:ea:62:68:5c:5e:49:3f:fb:
5e:ab:c9:65:d8:1f:f0:08:41:3b:cf:8d:ff:15:db:
08:04:fa:b4:be:c6:2f:83:12:72:90:3f:17:be:ec:
a2:40:9f:43:32:2b:cf:07:72:40:6f:af:fe:45:d5:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:31:E1:84:D7:8F:37:5E:68:D1:90:F7:4C:56:E4:38:D2:25:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4f7414b9-1c4b-3526-a94c-0b537985ed1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c0:19:34:ae:be:69:77:4c:0f:13:6c:d9:60:83:6b:2b:99:
da:45:0d:06:1d:0c:7b:08:c9:bb:c0:98:67:ec:2b:9b:fb:17:
ba:9f:85:31:9b:8a:1f:ba:c3:19:c1:ac:2e:da:b2:b0:23:ad:
e6:e7:f1:b6:26:67:29:7d:85:8a:35:f7:bd:31:90:24:58:54:
7c:bf:11:24:51:e1:67:29:48:b2:87:72:28:a2:1e:47:49:ed:
50:ab:26:c6:b5:4e:47:20:9f:14:58:2f:3d:a1:4f:1f:54:03:
eb:1c:56:51:cc:e3:7a:bc:70:49:4a:11:5e:82:f8:ab:e5:e4:
ee:d1:30:4c:57:58:2b:34:d2:81:df:25:4d:ce:58:28:11:ec:
68:49:05:c7:ee:4c:89:31:d8:5d:aa:1d:04:7d:98:10:28:1d:
e3:55:06:48:0c:f0:38:e0:3d:8a:1a:ee:fd:31:85:fe:42:48:
84:2b:5a:be:ce:ea:f3:50:d4:93:55:d6:1d:f6:44:61:92:b1:
a6:fc:d2:e1:70:95:9d:e2:4b:98:38:1f:14:7d:77:d0:b6:1b:
31:5a:71:c4:69:71:ef:b6:fb:8b:fc:f2:48:81:11:70:2e:91:
4e:f3:e3:aa:39:00:3f:83:6b:f3:67:c8:b3:a1:2d:3a:9c:87:
ef:a4:e7:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxDzDepoi+vgQekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWViZTljMzgtNmMzZi00N2YyLTgzMTAtZjBkYmEyNjI1ZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Qg2Q7oQdO+r0CQn9om0UDMxVuHRJmY/TEL
pE1pOygGjdSwgnXWJtVDH+uU9sm+UQjR31FNnWxU1kxHfPtRar0WGuSCdqkkERnq
dmvZXgHNoxMdNf+WcNoJAHTfy9/t0jZhvf5AZyg+GDnRuHueMfbxz1o9CHprFWLM
WjnmIou86Ke8juDPu/VgqFzS45Dw45EG2L2iKss37mYbNed6FaHvd62uESHLTr20
1mHmOWFmYqVMYZmRv2R9IWFyKWrZcLqR7bG20iOx6mJoXF5JP/teq8ll2B/wCEE7
z43/FdsIBPq0vsYvgxJykD8XvuyiQJ9DMivPB3JAb6/+RdVEOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPIMeGE1483XmjRkPdMVuQ40iVgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGY3NDE0YjktMWM0Yi0z
NTI2LWE5NGMtMGI1Mzc5ODVlZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG9yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzAGTSuvml3TA8TbNlgg2srmdpFDQYdDHsIybvAmGfsK5v7F7qfhTGb
ih+6wxnBrC7asrAjrebn8bYmZyl9hYo1970xkCRYVHy/ESRR4WcpSLKHciiiHkdJ
7VCrJsa1TkcgnxRYLz2hTx9UA+scVlHM43q8cElKEV6C+Kvl5O7RMExXWCs00oHf
JU3OWCgR7GhJBcfuTIkx2F2qHQR9mBAoHeNVBkgM8DjgPYoa7v0xhf5CSIQrWr7O
6vNQ1JNV1h32RGGSsab80uFwlZ3iS5g4HxR9d9C2GzFaccRpce+2+4v88kiBEXAu
kU7z46o5AD+Da/NnyLOhLTqch++k5/Q=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:22 2025 by rpki-client