Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c06acf7b-6083-3206-b78d-41e07c8a2067.roa
File: c06acf7b-6083-3206-b78d-41e07c8a2067.roa (raw, json)
Hash identifier: zLTtQciU1L8IseqQdejiTPWg7RG7mivGYzYOKfhyo7Y=
Subject key identifier: B9:4D:2C:5F:D7:EC:71:64:6E:AF:74:CD:46:A3:BE:5E:9E:5B:09:99
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584817F20DC71F3DD4D455FC0400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c06acf7b-6083-3206-b78d-41e07c8a2067.roa
Signing time: Wed 04 Dec 2024 09:58:11 +0000
ROA not before: Wed 04 Dec 2024 09:58:11 +0000
ROA not after: Tue 04 Mar 2025 09:58:11 +0000
asID: 60117
IP address blocks: 172.94.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:f2:0d:c7:1f:3d:d4:d4:55:fc:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 4 09:58:11 2024 GMT
Not After : Mar 4 09:58:11 2025 GMT
Subject: CN=3d1b0222-2696-496a-8ccb-d4333a43035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:bf:b2:04:36:86:80:52:47:60:a3:43:cf:
28:f1:0c:c4:d7:f7:b0:de:3a:97:0e:09:74:d2:4a:
5b:90:15:71:b3:c1:5c:b5:71:dd:3a:d0:fc:e9:51:
df:e3:a8:ec:d3:78:a1:f1:d7:a8:ac:8b:b5:9d:f2:
8e:fa:35:49:20:92:00:6a:29:3c:51:f1:c8:fd:98:
7d:2d:e5:5c:c9:c2:d8:43:c7:f6:c1:87:b7:04:74:
7a:1b:c0:cb:84:df:fb:21:24:e4:91:f1:13:82:21:
d5:e4:06:51:1d:0c:1b:f8:0e:11:60:42:80:03:ab:
b4:0e:7d:c6:e3:d9:62:c2:8e:bf:4c:3a:ac:d3:2d:
5c:9d:c5:14:8b:3b:34:1c:4e:bd:eb:d7:47:29:6c:
a0:c5:78:42:c0:1f:2b:ce:45:11:80:82:23:81:c6:
ca:3b:21:c7:40:b9:95:cc:c2:9c:66:b5:95:43:5c:
ef:be:47:42:35:32:c7:3f:34:65:e1:0d:6f:97:86:
93:e9:4e:d1:8d:66:6b:4b:32:5d:0d:d9:12:61:e6:
c5:47:fa:ef:6a:ca:2a:e4:ea:e3:67:b0:7b:a6:18:
9c:39:65:9b:de:43:d8:83:51:bf:85:70:68:f5:e4:
c8:f7:01:e0:f4:60:c0:37:3a:91:ac:e9:de:31:aa:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:2C:5F:D7:EC:71:64:6E:AF:74:CD:46:A3:BE:5E:9E:5B:09:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c06acf7b-6083-3206-b78d-41e07c8a2067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c1:49:16:a3:f3:1b:12:c0:04:84:56:3a:92:03:f2:f9:63:
b1:77:f2:60:02:8e:b0:8d:94:7a:dc:a6:76:d2:66:84:3f:bf:
c6:8d:1c:71:e4:8e:c8:3b:f7:c7:07:05:52:07:97:27:6c:38:
e2:f9:e4:08:e6:fd:2d:11:90:cf:53:73:ed:cb:d7:08:9a:24:
b3:90:2a:b6:a7:16:e3:b9:48:49:1d:a9:a9:31:ce:e9:11:c0:
13:36:8c:51:79:94:6e:a5:8d:66:a1:a9:2c:67:d1:c7:23:4f:
28:32:f8:41:3e:a7:08:64:2b:37:66:e8:0c:e7:fb:39:e9:05:
dd:7b:f6:1c:f4:88:63:da:7e:85:b9:5d:f1:18:78:0c:2d:fe:
f8:9a:38:be:e8:85:4b:10:48:1a:dd:22:e3:64:32:c1:8e:d2:
bb:5c:75:f9:9a:83:d5:ef:fa:0d:e2:26:cb:c5:88:67:06:22:
0e:bc:86:4f:4e:00:e6:bb:3c:fc:ff:c5:10:1d:aa:4c:e6:4c:
f9:4a:63:dc:25:dd:64:c6:1d:33:2d:60:fa:9a:ba:c0:4f:aa:
7e:05:67:c2:7c:e3:09:5d:10:56:f3:56:04:a1:f6:ce:10:7c:
0a:78:6a:08:11:04:5b:fa:59:74:d1:76:e1:5f:d9:a7:f5:37:
73:61:4d:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgX8g3HHz3U1FX8BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwNDA5NTgxMVoXDTI1MDMwNDA5NTgxMVowLzEtMCsGA1UEAxMk
M2QxYjAyMjItMjY5Ni00OTZhLThjY2ItZDQzMzNhNDMwMzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7G/sgQ2hoBSR2CjQ88o8QzE1/ew3jqXDgl0
0kpbkBVxs8FctXHdOtD86VHf46js03ih8deorIu1nfKO+jVJIJIAaik8UfHI/Zh9
LeVcycLYQ8f2wYe3BHR6G8DLhN/7ISTkkfETgiHV5AZRHQwb+A4RYEKAA6u0Dn3G
49liwo6/TDqs0y1cncUUizs0HE6969dHKWygxXhCwB8rzkURgIIjgcbKOyHHQLmV
zMKcZrWVQ1zvvkdCNTLHPzRl4Q1vl4aT6U7RjWZrSzJdDdkSYebFR/rvasoq5Orj
Z7B7phicOWWb3kPYg1G/hXBo9eTI9wHg9GDANzqRrOneMarNGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLlNLF/X7HFkbq90zUajvl6eWwmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzA2YWNmN2ItNjA4My0z
MjA2LWI3OGQtNDFlMDdjOGEyMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF44MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrBSRaj8xsSwASEVjqSA/L5Y7F38mACjrCNlHrcpnbSZoQ/v8aNHHHk
jsg798cHBVIHlydsOOL55Ajm/S0RkM9Tc+3L1wiaJLOQKranFuO5SEkdqakxzukR
wBM2jFF5lG6ljWahqSxn0ccjTygy+EE+pwhkKzdm6Azn+znpBd179hz0iGPafoW5
XfEYeAwt/viaOL7ohUsQSBrdIuNkMsGO0rtcdfmag9Xv+g3iJsvFiGcGIg68hk9O
AOa7PPz/xRAdqkzmTPlKY9wl3WTGHTMtYPqausBPqn4FZ8J84wldEFbzVgSh9s4Q
fAp4aggRBFv6WXTRduFf2af1N3NhTSU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:44:48 2025 by rpki-client