Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa
File: 2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa (raw, json)
Hash identifier: aNpnv4TYIM263UYC8c02x6xNcBkp0vGWKMrulubHBCw=
Subject key identifier: AF:B2:BF:1C:F9:C0:D0:7C:8B:71:68:6B:CF:C4:DC:21:27:EA:CE:D7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9DD26A3DDBF4684CB800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.226.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9d:d2:6a:3d:db:f4:68:4c:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=ac64dcbc-c532-4923-ab2c-63061e883873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4f:8d:ae:cd:75:3e:18:7e:0d:cc:d5:fa:cc:
fa:37:03:87:28:53:1b:98:79:e7:49:76:93:47:ca:
c3:b2:29:bd:2d:8e:ab:d9:0e:f9:3d:ca:a2:10:d7:
7d:09:d3:56:71:fd:08:18:63:23:8c:21:f2:d4:4d:
b3:58:00:0a:1a:5a:0e:1c:84:36:30:b8:ba:cb:8a:
f0:17:2a:d2:11:67:9d:f9:70:05:5c:21:61:49:29:
11:bb:d8:74:a1:20:1d:8c:ee:70:e9:68:5e:04:51:
3e:b2:74:d9:ac:6a:43:82:33:f6:ed:ac:df:26:b1:
ca:a4:32:f0:0d:4c:5a:c3:9b:0e:16:b0:e4:b0:ce:
07:51:2c:dc:e6:30:f3:da:b8:8a:dd:5e:f3:2b:bd:
bc:73:9b:90:52:d3:2e:3a:2e:86:63:b6:55:0e:38:
0f:02:ad:e4:a1:f4:be:c9:87:f4:c3:e3:23:a7:9d:
91:90:d8:a5:3f:29:d4:ad:ac:31:df:fb:70:ef:50:
29:c9:37:f1:62:15:1b:6a:16:25:f3:90:a0:ca:41:
74:3f:6c:72:c2:18:4a:b3:7f:38:3c:75:6f:4e:52:
dd:da:ab:4e:32:97:d1:98:e1:73:2e:9d:f1:57:da:
b2:e3:80:ae:84:5a:15:99:a0:1f:a2:66:4b:c8:71:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:BF:1C:F9:C0:D0:7C:8B:71:68:6B:CF:C4:DC:21:27:EA:CE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2f5bc5-49f2-37aa-9b6a-b184841e0b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:84:2f:25:b6:43:93:a8:a8:63:77:32:70:ff:be:6e:9c:06:
13:1f:f0:7d:ea:67:64:b9:51:c1:0b:da:c5:54:0f:6d:8d:7c:
66:25:d1:01:17:27:1d:19:3b:8b:68:10:1c:21:75:0f:49:db:
5a:6a:85:e6:c0:af:6e:16:56:91:f7:cd:d7:20:c7:1e:d6:11:
9c:6c:73:4a:38:ea:65:c1:b6:23:19:26:33:d0:44:74:3b:23:
01:41:2c:26:e8:c0:15:3d:21:0a:da:00:df:14:cf:32:10:0a:
c6:ad:6e:98:42:65:07:3a:48:ee:b6:5c:b2:97:bf:dd:d3:99:
22:ac:b5:5a:8e:d0:ef:cb:13:8c:f5:43:d8:e1:49:30:a9:ea:
a8:9e:69:ce:e7:f9:d9:78:bb:2e:70:1b:00:fc:86:5b:52:be:
fb:6f:5f:b7:0f:58:6a:a8:dd:76:c9:f9:4f:77:e4:0b:32:52:
19:d9:30:24:82:e7:c2:c0:68:87:96:f2:b3:68:55:7a:15:99:
84:7d:1c:3f:bf:e3:1f:14:ff:fe:1a:ab:3d:88:ae:a3:39:53:
55:00:db:8d:fd:cd:b7:f1:dd:32:57:60:47:31:f1:cc:bf:97:
de:14:3c:a1:02:69:96:b1:33:a4:1f:68:25:fe:68:d1:8c:5f:
66:ab:a1:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCp3Saj3b9GhMuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
YWM2NGRjYmMtYzUzMi00OTIzLWFiMmMtNjMwNjFlODgzODczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0+Nrs11Phh+DczV+sz6NwOHKFMbmHnnSXaT
R8rDsim9LY6r2Q75PcqiENd9CdNWcf0IGGMjjCHy1E2zWAAKGloOHIQ2MLi6y4rw
FyrSEWed+XAFXCFhSSkRu9h0oSAdjO5w6WheBFE+snTZrGpDgjP27azfJrHKpDLw
DUxaw5sOFrDksM4HUSzc5jDz2riK3V7zK728c5uQUtMuOi6GY7ZVDjgPAq3kofS+
yYf0w+Mjp52RkNilPynUrawx3/tw71ApyTfxYhUbahYl85CgykF0P2xywhhKs384
PHVvTlLd2qtOMpfRmOFzLp3xV9qy44CuhFoVmaAfomZLyHETMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+yvxz5wNB8i3Foa8/E3CEn6s7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyZjViYzUtNDlmMi0z
N2FhLTliNmEtYjE4NDg0MWUwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeELyW2Q5OoqGN3MnD/vm6cBhMf8H3qZ2S5UcEL2sVUD22NfGYl0QEX
Jx0ZO4toEBwhdQ9J21pqhebAr24WVpH3zdcgxx7WEZxsc0o46mXBtiMZJjPQRHQ7
IwFBLCbowBU9IQraAN8UzzIQCsatbphCZQc6SO62XLKXv93TmSKstVqO0O/LE4z1
Q9jhSTCp6qieac7n+dl4uy5wGwD8hltSvvtvX7cPWGqo3XbJ+U935AsyUhnZMCSC
58LAaIeW8rNoVXoVmYR9HD+/4x8U//4aqz2IrqM5U1UA2439zbfx3TJXYEcx8cy/
l94UPKECaZaxM6QfaCX+aNGMX2aroe4=
-----END CERTIFICATE-----
Generated at Fri May 9 22:40:44 2025 by rpki-client