Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21342ed8-545e-37fc-9782-7aea85a4da8f.roa
File: 21342ed8-545e-37fc-9782-7aea85a4da8f.roa (raw, json)
Hash identifier: NINjrSEfxaeuGr42BT/XJ/yd/wRileFpFK0p4wp4qUo=
Subject key identifier: 52:73:83:72:ED:E0:54:1B:64:37:BB:D3:D0:2F:D0:28:D5:8B:F6:E8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A96DD129AD48C549EE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21342ed8-545e-37fc-9782-7aea85a4da8f.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.226.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:96:dd:12:9a:d4:8c:54:9e:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=df7fc3b4-b132-4ce1-a281-84980294d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:bf:6c:f7:c7:c1:7b:03:da:fc:29:89:97:
4e:44:7f:b0:91:5f:d8:a4:a2:ea:e8:e4:ef:34:ee:
bd:20:8a:1d:22:d9:db:5b:25:52:c8:b6:9d:2a:f3:
46:72:6b:e9:88:2f:c4:9b:5c:12:ce:ad:03:ad:c2:
3d:02:56:03:e1:6b:04:4c:36:4c:b0:08:b5:f5:47:
3f:37:a9:07:b7:57:71:c6:61:fb:ca:4d:a4:8e:68:
86:58:83:5e:73:83:e8:a6:12:93:a5:00:43:fb:b0:
5f:c2:eb:c3:f6:3a:fc:7e:a1:ec:3c:32:d1:64:ea:
d2:42:12:be:b0:c3:ed:38:54:fa:86:d2:4e:de:19:
d1:4a:88:2b:b0:9d:3d:aa:3c:47:9e:83:c6:69:da:
a9:61:56:63:33:dc:0e:81:af:fb:05:29:56:e5:7a:
35:5c:06:fe:ed:8b:6f:e4:51:97:39:12:ea:f6:6f:
13:ec:16:a6:26:8e:01:89:42:fb:87:86:dd:37:7f:
c8:3c:00:b4:df:c8:75:6a:fa:d6:43:53:e1:c9:14:
5e:15:22:be:a3:17:d8:24:53:d5:57:49:0f:22:7d:
c3:2f:62:82:50:dd:67:2b:dc:eb:41:9a:b9:25:12:
80:56:97:8b:2d:32:58:57:07:c7:ba:6c:2d:fd:5c:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:83:72:ED:E0:54:1B:64:37:BB:D3:D0:2F:D0:28:D5:8B:F6:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21342ed8-545e-37fc-9782-7aea85a4da8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:3d:4d:60:50:89:11:1a:67:d1:b1:01:8e:e0:72:34:5b:6e:
05:99:88:39:b2:e6:62:64:ac:16:72:66:89:7e:6d:e3:3d:b0:
0b:05:e0:0a:19:5d:44:4d:80:ce:00:09:51:3d:09:56:f2:1c:
6d:58:33:e1:19:1d:05:99:1d:86:8e:4a:a8:09:1a:e5:07:70:
c8:34:cb:c4:e6:14:d5:27:ed:50:e4:34:8c:a4:24:4c:de:1a:
f0:09:6a:d6:91:26:09:da:8d:a4:1f:0a:c3:f4:fc:79:f9:f5:
d5:cb:71:50:a9:51:9f:83:5c:f5:37:5a:99:8c:aa:93:18:84:
6e:3e:6d:f0:20:ef:5c:74:d5:16:9d:a7:26:d6:3a:dc:4d:3d:
39:b3:69:c4:c5:76:35:59:b2:45:6f:8f:d4:c6:f2:26:aa:35:
b7:8c:58:9a:53:69:28:8a:00:fa:6c:9a:e8:1f:af:4e:d9:7d:
cc:c5:49:33:51:7d:63:71:db:ee:21:52:e0:2d:fe:ea:81:40:
a0:0c:8c:20:b7:8e:d0:c2:f7:c7:dc:74:34:df:62:b8:b3:8d:
9e:0a:28:cf:a5:42:8d:25:67:bc:7b:80:e1:4f:0c:67:c9:43:
b5:76:85:e7:5e:5e:f4:ad:39:4f:38:ff:8b:6a:85:61:22:ef:
aa:b2:e2:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCpbdEprUjFSe5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
ZGY3ZmMzYjQtYjEzMi00Y2UxLWEyODEtODQ5ODAyOTRkNWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiu/bPfHwXsD2vwpiZdORH+wkV/YpKLq6OTv
NO69IIodItnbWyVSyLadKvNGcmvpiC/Em1wSzq0DrcI9AlYD4WsETDZMsAi19Uc/
N6kHt1dxxmH7yk2kjmiGWINec4PophKTpQBD+7BfwuvD9jr8fqHsPDLRZOrSQhK+
sMPtOFT6htJO3hnRSogrsJ09qjxHnoPGadqpYVZjM9wOga/7BSlW5Xo1XAb+7Ytv
5FGXORLq9m8T7BamJo4BiUL7h4bdN3/IPAC038h1avrWQ1PhyRReFSK+oxfYJFPV
V0kPIn3DL2KCUN1nK9zrQZq5JRKAVpeLLTJYVwfHumwt/VwP/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJzg3Lt4FQbZDe709Av0CjVi/boMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjEzNDJlZDgtNTQ1ZS0z
N2ZjLTk3ODItN2FlYTg1YTRkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHs9TWBQiREaZ9GxAY7gcjRbbgWZiDmy5mJkrBZyZol+beM9sAsF4AoZ
XURNgM4ACVE9CVbyHG1YM+EZHQWZHYaOSqgJGuUHcMg0y8TmFNUn7VDkNIykJEze
GvAJataRJgnajaQfCsP0/Hn59dXLcVCpUZ+DXPU3WpmMqpMYhG4+bfAg71x01Rad
pybWOtxNPTmzacTFdjVZskVvj9TG8iaqNbeMWJpTaSiKAPpsmugfr07ZfczFSTNR
fWNx2+4hUuAt/uqBQKAMjCC3jtDC98fcdDTfYrizjZ4KKM+lQo0lZ7x7gOFPDGfJ
Q7V2hedeXvStOU84/4tqhWEi76qy4kE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:01 2025 by rpki-client