Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa
File: 23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa (raw, json)
Hash identifier: /crGZ3HeOiSsOKYO07bHFIgSwapHVHRunygSMkoVmuY=
Subject key identifier: C9:A7:22:06:8C:34:B8:AD:5E:07:3B:4D:30:EF:C7:06:CF:08:F4:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A68B0C8AADF24E1FCE100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:68:b0:c8:aa:df:24:e1:fc:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=276d4d20-7d0e-45ec-80c7-d529355d2cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:ba:0d:f5:ee:71:51:3b:a3:04:2f:92:97:
7b:3e:6d:f5:bf:dc:99:55:25:ed:a2:38:9b:b3:fb:
d4:e3:1b:4b:57:ef:da:39:79:a7:f2:1e:4d:b7:d7:
14:ed:d6:a7:2c:d1:c3:53:59:21:29:e5:28:00:1d:
df:d3:42:24:17:0b:a9:55:4a:a0:38:3a:b6:c8:d1:
56:d4:dd:64:f3:1b:08:2a:0a:bc:3c:df:1a:23:89:
54:8a:5c:aa:86:29:31:37:57:4f:34:aa:54:a1:3b:
7e:26:28:45:49:c7:b0:35:b0:b2:1f:4c:6b:78:64:
34:1c:bd:d4:01:af:8f:01:8a:08:3d:16:a3:8b:70:
13:39:bd:55:4a:8f:a9:51:2d:55:6b:ec:03:a9:22:
1a:22:b5:09:7e:1f:c6:a5:42:66:b9:c5:bb:b1:4e:
36:4a:67:17:37:3e:b6:85:50:22:5f:67:e5:a9:4a:
6e:d9:11:af:a6:b5:70:e2:db:74:47:73:43:90:40:
3c:dc:f1:33:2f:87:a6:be:8a:c0:53:be:4e:65:f7:
98:a4:d0:c6:94:02:ee:1f:49:a6:ac:c8:77:3e:4e:
59:6b:7d:58:3b:61:ff:c2:11:97:2b:06:0a:54:ac:
1a:a8:34:01:1f:2e:7d:56:77:05:e4:2a:52:7e:9a:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:22:06:8C:34:B8:AD:5E:07:3B:4D:30:EF:C7:06:CF:08:F4:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e11f8d-7ba1-3711-b0ea-55fb8ef8aba7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7e:63:59:cd:83:94:41:53:9c:3c:23:e8:f8:a2:a2:06:78:
3b:14:47:45:53:8e:32:ca:f9:f8:e3:aa:3d:ef:bb:98:90:9f:
0a:19:13:de:ab:48:c0:5a:64:6a:17:29:d9:1a:6d:7c:2e:ee:
a6:8c:e2:bf:4a:bf:07:ee:dd:7a:ce:8b:42:aa:85:51:23:fb:
85:06:61:52:75:8c:b9:7a:08:c3:f5:f9:9b:99:38:1d:63:b2:
94:5f:95:d3:bc:33:38:e5:67:3e:63:57:6d:2e:4d:d5:7f:6d:
df:2e:b3:b9:78:b0:c6:bc:04:99:05:f1:0d:55:29:34:d3:bd:
2d:38:f5:d2:ea:a0:a0:ef:3f:ae:63:a6:a1:6c:4f:51:68:af:
b8:c0:f6:c5:8b:55:17:af:86:a3:e1:3c:c3:e9:5a:14:7f:4f:
3c:61:98:ed:fd:ee:ba:aa:7e:46:5a:94:28:83:e1:f5:cb:8d:
fd:ec:53:33:5f:bf:85:95:43:ab:d8:e5:1f:61:94:96:a7:31:
ba:b7:b2:78:59:67:0e:f0:25:fe:ca:72:a5:2b:ea:9a:a4:9f:
8a:a9:37:de:10:a4:c4:57:a3:db:3f:9b:9c:72:e7:cb:71:4e:
b6:5a:f1:96:63:eb:7d:1a:6e:16:63:2a:64:6a:9d:04:9d:e6:
1b:80:23:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmiwyKrfJOH84QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
Mjc2ZDRkMjAtN2QwZS00NWVjLTgwYzctZDUyOTM1NWQyY2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl26DfXucVE7owQvkpd7Pm31v9yZVSXtojib
s/vU4xtLV+/aOXmn8h5Nt9cU7danLNHDU1khKeUoAB3f00IkFwupVUqgODq2yNFW
1N1k8xsIKgq8PN8aI4lUilyqhikxN1dPNKpUoTt+JihFScewNbCyH0xreGQ0HL3U
Aa+PAYoIPRaji3ATOb1VSo+pUS1Va+wDqSIaIrUJfh/GpUJmucW7sU42SmcXNz62
hVAiX2flqUpu2RGvprVw4tt0R3NDkEA83PEzL4emvorAU75OZfeYpNDGlALuH0mm
rMh3Pk5Za31YO2H/whGXKwYKVKwaqDQBHy59VncF5CpSfprYgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmnIgaMNLitXgc7TTDvxwbPCPTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlMTFmOGQtN2JhMS0z
NzExLWIwZWEtNTVmYjhlZjhhYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh+Y1nNg5RBU5w8I+j4oqIGeDsUR0VTjjLK+fjjqj3vu5iQnwoZE96r
SMBaZGoXKdkabXwu7qaM4r9Kvwfu3XrOi0KqhVEj+4UGYVJ1jLl6CMP1+ZuZOB1j
spRfldO8MzjlZz5jV20uTdV/bd8us7l4sMa8BJkF8Q1VKTTTvS049dLqoKDvP65j
pqFsT1For7jA9sWLVRevhqPhPMPpWhR/TzxhmO397rqqfkZalCiD4fXLjf3sUzNf
v4WVQ6vY5R9hlJanMbq3snhZZw7wJf7KcqUr6pqkn4qpN94QpMRXo9s/m5xy58tx
TrZa8ZZj630abhZjKmRqnQSd5huAI1Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:55 2025 by rpki-client