Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
File: 094ccd51-115c-3648-97eb-45a013b21434.roa (raw, json)
Hash identifier: GkciCdF4rItsKx98l/nfp+71DjRan26FfBo9IvKinlA=
Subject key identifier: DD:60:EF:71:64:5E:A4:C4:B1:60:39:7C:79:24:A6:D9:C8:8E:C9:E6
Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial: 010D0C9F4328584858A0569479643CECF1FB5EA0
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 39951
IP address blocks: 208.65.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:56:94:79:64:3c:ec:f1:fb:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d10eadbb-7bb2-4e23-8d3d-16e7e22c879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:21:e4:95:68:b5:86:e9:7c:4b:e1:24:2e:d6:
db:8a:39:0e:4e:00:da:76:0c:25:70:63:e0:23:4b:
76:f1:f7:4e:cb:d9:d1:c2:3e:ff:b4:57:81:b5:23:
05:8b:5c:6a:2f:66:59:b7:48:49:ee:f2:d4:25:dd:
92:70:34:d1:e4:4c:43:b6:d9:e0:6f:36:b1:fe:69:
57:c8:b6:17:cc:94:aa:86:82:ee:84:30:ff:8e:b5:
d5:f4:3d:84:e8:89:ad:f6:d1:cf:a4:41:ae:9d:c2:
98:a1:cc:54:e6:08:93:21:55:48:2d:93:2b:0d:0d:
a5:16:e0:1d:09:e0:71:7f:41:44:ec:d8:a0:1c:0e:
07:40:f3:19:f9:c9:d8:43:1f:ee:7d:0a:67:8b:82:
77:0e:9c:18:16:fa:bb:b9:15:ed:32:19:1a:5b:ac:
c1:02:83:66:2a:a7:5a:57:c7:97:cc:eb:ed:d8:a4:
b0:f8:24:ae:c5:cf:07:55:e4:ef:3b:7c:81:54:61:
47:65:ff:f0:33:69:3e:8f:0d:4a:bf:85:4c:e7:e1:
32:70:b9:55:c7:9c:c2:4b:52:69:32:78:90:00:c6:
c8:fe:b1:d2:02:62:ad:e4:be:b0:4c:c0:a4:bc:1f:
43:84:03:31:fe:63:2a:bd:6c:42:36:55:09:1d:78:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:EF:71:64:5E:A4:C4:B1:60:39:7C:79:24:A6:D9:C8:8E:C9:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
X509v3 Authority Key Identifier:
keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9a:97:79:f9:03:03:87:25:57:db:12:e2:d9:90:50:4e:2b:
97:d6:15:38:ea:09:37:2b:e2:96:9f:39:60:83:cb:4f:9c:df:
6f:ce:1c:69:81:1f:32:6d:38:b4:4f:c4:9a:12:c4:11:d3:77:
df:5c:e1:f5:c0:2a:45:10:2a:a3:26:81:97:f8:4a:40:9d:aa:
9a:8c:fc:39:ad:69:31:cc:61:d7:2a:6a:d7:70:b2:b2:bb:1c:
22:f7:ab:12:b5:85:0e:3d:fd:ff:a7:13:40:f3:bd:da:c8:fc:
be:c2:16:99:46:33:a6:f0:08:7a:11:55:31:ae:9d:04:d3:d5:
a5:01:32:6f:5c:d3:f8:97:ad:58:fc:34:be:ce:20:f3:e6:fd:
e5:c7:8d:64:0f:3d:5c:92:0e:ff:31:8b:f6:2d:dc:9c:73:fb:
35:2e:7d:5d:38:1a:d7:b4:a3:91:23:bb:8b:58:43:17:cc:2c:
87:3a:8d:6b:e5:3e:d6:f4:e0:3c:f2:00:e7:75:10:17:db:34:
13:ea:d7:9a:d8:f4:d3:4a:ca:91:cd:48:f2:d8:31:e3:4e:09:
e5:50:0c:25:9c:3a:4f:e0:2a:d8:52:30:08:51:28:c2:da:88:
47:d6:91:07:7a:2d:7a:f3:25:12:b3:5a:ef:18:b4:84:49:6d:
67:96:85:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFaUeWQ87PH7XqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZjNTIyZWEtMzcwMy00YWFhLTlmYTAtZDhmOTlhNzIw
NTM2MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDEwZWFkYmItN2JiMi00ZTIzLThkM2QtMTZlN2UyMmM4NzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyHklWi1hul8S+EkLtbbijkOTgDadgwlcGPg
I0t28fdOy9nRwj7/tFeBtSMFi1xqL2ZZt0hJ7vLUJd2ScDTR5ExDttngbzax/mlX
yLYXzJSqhoLuhDD/jrXV9D2E6Imt9tHPpEGuncKYocxU5giTIVVILZMrDQ2lFuAd
CeBxf0FE7NigHA4HQPMZ+cnYQx/ufQpni4J3DpwYFvq7uRXtMhkaW6zBAoNmKqda
V8eXzOvt2KSw+CSuxc8HVeTvO3yBVGFHZf/wM2k+jw1Kv4VM5+EycLlVx5zCS1Jp
MniQAMbI/rHSAmKt5L6wTMCkvB9DhAMx/mMqvWxCNlUJHXixEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1g73FkXqTEsWA5fHkkptnIjsnmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1
MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5OWE3MjA1MzYvMDk0Y2NkNTEtMTE1Yy0z
NjQ4LTk3ZWItNDVhMDEzYjIxNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWZjNTIyZWEtMzcwMy00YWFhLTlm
YTAtZDhmOTlhNzIwNTM2LzVmYzUyMmVhLTM3MDMtNGFhYS05ZmEwLWQ4Zjk5YTcy
MDUzNi5jcmwwHwYDVR0jBBgwFoAUrBif0ZYBC/QZzdVzfG79ydGolaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5
OWE3MjA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EEkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOal3n5AwOHJVfbEuLZkFBOK5fWFTjqCTcr4pafOWCDy0+c32/OHGmB
HzJtOLRPxJoSxBHTd99c4fXAKkUQKqMmgZf4SkCdqpqM/DmtaTHMYdcqatdwsrK7
HCL3qxK1hQ49/f+nE0DzvdrI/L7CFplGM6bwCHoRVTGunQTT1aUBMm9c0/iXrVj8
NL7OIPPm/eXHjWQPPVySDv8xi/Yt3Jxz+zUufV04Gte0o5Eju4tYQxfMLIc6jWvl
Ptb04DzyAOd1EBfbNBPq15rY9NNKypHNSPLYMeNOCeVQDCWcOk/gKthSMAhRKMLa
iEfWkQd6LXrzJRKzWu8YtIRJbWeWhT8=
-----END CERTIFICATE-----
Generated at Thu May 1 01:18:05 2025 by rpki-client