Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa
File: 9aab875f-034d-3d17-b14a-b7836794e260.roa (raw, json)
Hash identifier: ndCj0/hKVJbUPgOXoOLCh5Hp4W4bqMCivo+7fHy2qfY=
Subject key identifier: F4:70:89:3E:DB:3C:12:36:49:27:96:56:5F:12:BD:2A:1A:67:ED:AE
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C42A829267CECD6F833580
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 172.111.112.0/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:2a:82:92:67:ce:cd:6f:83:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=e1b2e278-57de-43c3-b0c8-3f2d0f0ecbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:8b:ce:b4:65:15:59:33:ae:aa:2c:5d:0c:
96:df:8c:d5:9e:7b:84:76:0f:78:b8:93:d9:03:c6:
9f:f7:76:4b:b0:14:25:5f:98:a3:ac:c7:53:09:5f:
f4:85:87:53:e9:66:9c:24:5c:64:37:f7:e5:6a:b9:
d6:c6:9c:8e:ee:02:6b:d8:70:c5:44:12:e9:21:98:
13:64:47:7f:3a:50:ad:0c:99:e6:39:c6:3b:b9:f7:
01:e3:91:be:7b:1b:20:05:1d:51:74:a3:54:34:af:
11:c8:46:02:bc:77:f4:32:15:13:d4:de:f3:31:da:
b4:52:b7:85:8a:1a:2b:c9:d0:c4:e7:0e:5c:27:1d:
3a:4f:98:53:a3:5c:2f:78:6b:f7:29:2b:db:7c:2b:
11:79:38:32:83:2d:14:f6:cd:d9:c6:54:97:76:0e:
18:21:d6:b2:c9:0e:4c:12:4e:b9:33:2a:27:e0:cf:
13:9b:3a:b6:c8:00:dd:6b:7f:66:46:f4:76:c3:d9:
cf:cb:15:4f:c2:cd:a3:d8:e1:59:4f:85:cc:14:0c:
eb:a0:3b:66:b9:70:b0:89:7c:bf:d9:6d:14:d8:94:
82:fa:dc:58:48:a0:d6:81:02:ce:3f:2a:33:a7:75:
31:89:d9:e1:9d:13:2a:c3:5e:49:f6:56:75:b9:c5:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:89:3E:DB:3C:12:36:49:27:96:56:5F:12:BD:2A:1A:67:ED:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9aab875f-034d-3d17-b14a-b7836794e260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.112.0/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:a5:fd:f0:dd:d9:a5:47:c0:f9:45:43:ca:7a:da:c9:85:b7:
8e:df:33:6d:c4:81:f8:36:5e:8d:f2:01:b3:0b:df:75:e8:9b:
ae:f7:8f:75:43:b1:26:c1:97:c3:0d:19:c2:6e:90:f1:d7:47:
20:fb:c0:d8:84:11:ba:d8:32:bc:51:cf:fc:6d:6e:3e:87:50:
74:91:f9:1f:5c:34:90:1c:32:af:9d:b8:6a:ee:4a:75:42:be:
fd:b6:c5:3c:69:9d:75:cc:e0:a7:2c:b4:55:fa:d7:91:cc:00:
c7:1a:6d:6d:99:2c:1d:29:b4:d9:07:88:9e:78:66:26:a0:20:
40:df:e3:98:a2:11:e3:1f:a6:28:5f:2e:0e:26:ad:d6:81:95:
fc:9d:0a:03:d8:bf:f2:aa:a6:42:69:34:00:b9:f2:cb:a4:5a:
8f:38:49:2e:9c:7b:95:3a:d4:27:db:eb:09:ed:2e:62:51:87:
30:c4:f6:7c:19:ce:15:91:93:76:61:c1:e4:33:bc:0a:90:59:
54:31:b1:b7:ca:79:c9:0a:f8:63:c8:ed:f3:9c:44:d6:6f:a4:
e6:a9:02:5e:e7:5c:47:06:c8:ce:02:e2:e6:a3:eb:c2:1e:0e:
e8:0e:39:14:c9:36:3e:e1:68:47:23:e3:1f:c5:47:53:c1:9f:
c7:7e:b2:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCqCkmfOzW+DNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTFiMmUyNzgtNTdkZS00M2MzLWIwYzgtM2YyZDBmMGVjYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndaLzrRlFVkzrqosXQyW34zVnnuEdg94uJPZ
A8af93ZLsBQlX5ijrMdTCV/0hYdT6WacJFxkN/flarnWxpyO7gJr2HDFRBLpIZgT
ZEd/OlCtDJnmOcY7ufcB45G+exsgBR1RdKNUNK8RyEYCvHf0MhUT1N7zMdq0UreF
ihorydDE5w5cJx06T5hTo1wveGv3KSvbfCsReTgygy0U9s3ZxlSXdg4YIdayyQ5M
Ek65Myon4M8Tmzq2yADda39mRvR2w9nPyxVPws2j2OFZT4XMFAzroDtmuXCwiXy/
2W0U2JSC+txYSKDWgQLOPyozp3UxidnhnRMqw15J9lZ1ucUxawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPRwiT7bPBI2SSeWVl8SvSoaZ+2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOWFhYjg3NWYtMDM0ZC0z
ZDE3LWIxNGEtYjc4MzY3OTRlMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG9wADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5pf3w3dmlR8D5RUPKetrJhbeO3zNtxIH4Nl6N8gGzC9916Juu9491
Q7EmwZfDDRnCbpDx10cg+8DYhBG62DK8Uc/8bW4+h1B0kfkfXDSQHDKvnbhq7kp1
Qr79tsU8aZ11zOCnLLRV+teRzADHGm1tmSwdKbTZB4ieeGYmoCBA3+OYohHjH6Yo
Xy4OJq3WgZX8nQoD2L/yqqZCaTQAufLLpFqPOEkunHuVOtQn2+sJ7S5iUYcwxPZ8
Gc4VkZN2YcHkM7wKkFlUMbG3ynnJCvhjyO3znETWb6TmqQJe51xHBsjOAuLmo+vC
Hg7oDjkUyTY+4WhHI+MfxUdTwZ/HfrJ/
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:16:21 2025 by rpki-client