Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa
File: 91539a9a-9578-35fe-bac3-9397f6a439d5.roa (raw, json)
Hash identifier: C5lqsyUjRriWTwo06OdSitq9tVh7I+IY+wHbLTmFskw=
Subject key identifier: 5C:69:E5:D9:B4:57:C1:DB:DD:CA:51:16:69:6D:56:83:BE:95:21:20
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848A1361A2E281DEA4EAF2CEA80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 7040
IP address blocks: 172.94.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1a:2e:28:1d:ea:4e:af:2c:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=5b632b3e-ab78-45e5-b20f-8cf8d1060618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:06:94:ed:cf:bc:59:66:21:81:a0:49:97:
a4:0e:db:2a:f7:6e:a6:7b:21:6a:5e:f1:81:da:92:
43:38:fe:cf:10:1b:c6:b7:23:1d:52:a4:73:f0:99:
b7:43:57:76:2d:33:b1:0e:e7:07:e7:87:a5:49:49:
b5:20:34:fe:22:f6:67:f3:7e:19:70:ea:ec:5d:65:
b1:56:30:c1:13:a8:55:81:dc:66:a9:4a:01:44:fa:
c9:e4:a8:b0:0a:60:c1:83:1f:fc:02:d7:cd:bb:fa:
b4:8b:29:2d:c8:32:f3:ae:7b:1a:2e:83:f5:5d:c4:
16:36:6c:56:f0:8b:12:dc:bb:82:73:db:74:f2:23:
0d:3f:47:0c:91:65:d6:bc:d8:5c:e0:89:b1:62:88:
27:ea:ec:68:a7:90:81:b9:63:bb:2c:8f:fd:d4:56:
cb:ac:45:7d:1a:72:85:1b:a0:e6:85:ad:18:60:0e:
a3:ca:10:a8:2d:5b:c8:21:b5:1d:f2:69:dc:fc:69:
0e:57:27:06:6d:9e:55:2a:29:a3:83:5e:95:58:42:
da:54:57:4d:88:3b:93:ae:92:2c:39:55:61:0f:2d:
d6:03:3e:18:c0:f4:a3:d3:c5:1d:7d:f2:2e:ff:47:
e7:71:a4:b3:41:ef:55:7e:af:c1:93:97:98:f3:9e:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:E5:D9:B4:57:C1:DB:DD:CA:51:16:69:6D:56:83:BE:95:21:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:24:c1:bd:ef:4d:72:59:67:b9:3c:78:2c:b5:53:64:44:b5:
41:dc:7c:6d:12:9a:05:93:0c:c3:82:e0:8b:ed:e1:5c:bf:d4:
9a:e3:00:78:e1:27:54:2a:c7:00:e4:5c:ec:72:b2:f4:eb:5f:
fa:05:c8:c7:01:e4:5b:df:fc:7e:ad:d4:04:10:73:ac:a1:81:
a0:89:51:1f:f9:75:2a:62:52:a1:97:21:9e:d6:d6:d7:62:10:
b6:be:7b:1a:85:e1:eb:35:c2:79:89:be:7d:70:96:44:80:43:
04:b3:12:27:b1:51:18:78:2b:e3:a5:c7:2e:2f:27:76:aa:cd:
22:a4:61:67:0b:7b:21:34:b3:5d:9b:e5:79:a0:f1:e2:fb:7d:
e1:df:2c:fb:46:85:9e:80:da:ac:3d:fe:b1:56:5a:ee:8e:36:
75:20:56:00:88:57:48:3f:f7:77:c1:41:34:94:25:b3:e8:5e:
60:e9:da:35:93:ec:78:f2:cc:ee:b1:fe:9b:dd:f0:8e:42:9b:
a0:d5:fb:b6:0d:4c:7a:b2:16:5f:98:54:8f:f0:63:8f:5d:ed:
49:83:fa:3a:38:39:5d:c6:6d:79:e4:78:d7:88:41:22:eb:6e:
9c:5d:cf:e6:85:0a:0c:a7:5a:16:7b:0b:33:68:19:a0:4d:03:
40:ab:43:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhouKB3qTq8s6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
NWI2MzJiM2UtYWI3OC00NWU1LWIyMGYtOGNmOGQxMDYwNjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNAGlO3PvFlmIYGgSZekDtsq926meyFqXvGB
2pJDOP7PEBvGtyMdUqRz8Jm3Q1d2LTOxDucH54elSUm1IDT+IvZn834ZcOrsXWWx
VjDBE6hVgdxmqUoBRPrJ5KiwCmDBgx/8AtfNu/q0iyktyDLzrnsaLoP1XcQWNmxW
8IsS3LuCc9t08iMNP0cMkWXWvNhc4ImxYogn6uxop5CBuWO7LI/91FbLrEV9GnKF
G6Dmha0YYA6jyhCoLVvIIbUd8mnc/GkOVycGbZ5VKimjg16VWELaVFdNiDuTrpIs
OVVhDy3WAz4YwPSj08UdffIu/0fncaSzQe9Vfq/Bk5eY857JMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxp5dm0V8Hb3cpRFmltVoO+lSEgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTE1MzlhOWEtOTU3OC0z
NWZlLWJhYzMtOTM5N2Y2YTQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUkwb3vTXJZZ7k8eCy1U2REtUHcfG0SmgWTDMOC4Ivt4Vy/1JrjAHjh
J1QqxwDkXOxysvTrX/oFyMcB5Fvf/H6t1AQQc6yhgaCJUR/5dSpiUqGXIZ7W1tdi
ELa+exqF4es1wnmJvn1wlkSAQwSzEiexURh4K+Olxy4vJ3aqzSKkYWcLeyE0s12b
5Xmg8eL7feHfLPtGhZ6A2qw9/rFWWu6ONnUgVgCIV0g/93fBQTSUJbPoXmDp2jWT
7HjyzO6x/pvd8I5Cm6DV+7YNTHqyFl+YVI/wY49d7UmD+jo4OV3GbXnkeNeIQSLr
bpxdz+aFCgynWhZ7CzNoGaBNA0CrQ7A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:35 2025 by rpki-client