Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa
File: f393d880-9d6e-3953-a98b-12516ebc54b1.roa (raw, json)
Hash identifier: I7t8lIwZT5dVVeZQ1ewXKgPVM85aoUq1hAk7kGgF0Dw=
Subject key identifier: F0:25:C4:13:24:4C:B9:D1:5E:C1:3D:C9:84:AC:D7:EE:37:18:75:30
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584851A580888DE65DF38E399230
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 212238
IP address blocks: 172.94.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:80:88:8d:e6:5d:f3:8e:39:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=4f78032c-8365-491d-8829-55fd27b92a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:82:77:3d:3b:02:b9:cc:de:43:68:00:35:
2e:e5:ec:5d:82:9b:aa:0e:0f:a8:2e:09:f7:97:4d:
33:c9:17:fd:18:84:b4:b7:a0:bc:c1:0a:39:1c:10:
2d:f5:38:b9:7b:ff:fe:91:ac:c6:21:54:8b:38:03:
82:38:52:20:bf:89:6d:dd:a9:f2:15:73:58:8d:7f:
0c:19:3e:65:67:b8:22:66:1f:17:c5:e3:1d:a3:ef:
57:5f:34:cd:d2:26:70:74:70:17:6b:1b:25:b8:af:
5e:4c:64:f7:19:6b:dc:0b:45:e3:6d:e7:a5:1e:2c:
40:a7:2a:61:0c:46:63:be:3b:72:f2:5c:aa:16:73:
ab:72:5a:af:88:02:a4:6b:0b:15:c5:f3:33:9f:78:
73:ee:75:a8:20:38:98:e9:b0:5e:87:e5:58:23:19:
75:e4:8b:f0:22:9d:a2:5a:50:57:8b:5d:57:0b:76:
6a:da:67:ce:f6:5b:75:7f:64:d9:37:be:db:55:be:
4f:ed:83:0b:b1:ee:7d:a3:f9:61:c4:8a:21:e9:b3:
6c:51:27:d5:70:c9:c2:ac:ff:27:98:74:d5:c9:1d:
8a:9c:7c:c8:f1:32:02:c7:05:51:d2:6c:e7:fd:12:
57:5a:12:60:bf:fe:19:b3:e4:c5:3f:5e:5b:fa:1d:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:C4:13:24:4C:B9:D1:5E:C1:3D:C9:84:AC:D7:EE:37:18:75:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b0:77:d1:0c:f1:e6:22:70:5f:42:18:f7:13:4b:41:61:e9:
8a:8b:57:ee:53:66:78:73:05:f8:8f:ba:91:10:89:8e:24:d5:
57:24:18:fe:40:34:42:4f:72:4e:02:f9:e3:17:63:9f:e3:e9:
b8:a9:46:ff:9b:ad:e8:8e:3f:29:3e:f7:a0:3b:c6:45:ec:c4:
57:94:b3:5f:15:30:83:9d:50:23:92:2c:a3:05:b1:c2:0e:5c:
61:d3:4c:4c:ad:8c:da:da:56:73:66:70:8d:3c:42:11:65:05:
e6:f1:f8:c6:a4:d0:65:29:6f:95:74:09:f8:ec:9d:17:40:d5:
07:da:01:36:c1:a3:ae:50:df:19:4d:91:59:de:3d:51:48:e6:
ae:1c:33:1d:11:83:e2:ca:97:7d:07:d8:cd:33:6b:51:fd:72:
7e:ba:1d:23:5c:e6:3d:e7:49:4f:50:3e:3d:fd:b2:b6:85:55:
f7:a5:35:d9:2f:71:e3:bb:88:a2:aa:22:3e:70:7f:84:5a:c6:
cc:63:b5:3e:a7:b2:ce:8d:b0:6c:3a:22:04:ab:89:fe:79:fa:
ba:eb:89:a9:f5:8a:96:24:4c:42:bc:b6:ba:7d:b5:d3:a1:e7:
9f:97:3d:68:ed:14:e5:f2:e7:a6:f6:a5:b2:17:d0:4a:cf:9c:
d5:4e:be:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpYCIjeZd8445kjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
NGY3ODAzMmMtODM2NS00OTFkLTg4MjktNTVmZDI3YjkyYTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqWCdz07ArnM3kNoADUu5exdgpuqDg+oLgn3
l00zyRf9GIS0t6C8wQo5HBAt9Ti5e//+kazGIVSLOAOCOFIgv4lt3anyFXNYjX8M
GT5lZ7giZh8XxeMdo+9XXzTN0iZwdHAXaxsluK9eTGT3GWvcC0XjbeelHixApyph
DEZjvjty8lyqFnOrclqviAKkawsVxfMzn3hz7nWoIDiY6bBeh+VYIxl15IvwIp2i
WlBXi11XC3Zq2mfO9lt1f2TZN77bVb5P7YMLse59o/lhxIoh6bNsUSfVcMnCrP8n
mHTVyR2KnHzI8TICxwVR0mzn/RJXWhJgv/4Zs+TFP15b+h15qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPAlxBMkTLnRXsE9yYSs1+43GHUwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjM5M2Q4ODAtOWQ2ZS0z
OTUzLWE5OGItMTI1MTZlYmM1NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHewd9EM8eYicF9CGPcTS0Fh6YqLV+5TZnhzBfiPupEQiY4k1VckGP5A
NEJPck4C+eMXY5/j6bipRv+breiOPyk+96A7xkXsxFeUs18VMIOdUCOSLKMFscIO
XGHTTEytjNraVnNmcI08QhFlBebx+Mak0GUpb5V0CfjsnRdA1QfaATbBo65Q3xlN
kVnePVFI5q4cMx0Rg+LKl30H2M0za1H9cn66HSNc5j3nSU9QPj39sraFVfelNdkv
ceO7iKKqIj5wf4RaxsxjtT6nss6NsGw6IgSrif55+rrrian1ipYkTEK8trp9tdOh
55+XPWjtFOXy56b2pbIX0ErPnNVOvl4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:34 2025 by rpki-client