Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d43593f-05a0-3871-88f4-c48a58b3fd7b.roa
File: 4d43593f-05a0-3871-88f4-c48a58b3fd7b.roa (raw, json)
Hash identifier: rkUk8pCzFhcbJeQ3pcJGI/XKLNfx/XYcXtd8jjo1sBk=
Subject key identifier: DE:5A:1C:8A:77:DE:46:C7:23:4C:07:7F:30:02:59:60:9F:60:E3:47
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51C6ED32ADC1887271E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d43593f-05a0-3871-88f4-c48a58b3fd7b.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1c:6e:d3:2a:dc:18:87:27:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=c8fd2b79-8cb2-4952-af18-0734227f9bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:14:32:f1:58:ac:aa:a9:c6:e5:84:00:08:
f5:2b:21:3b:54:98:e2:42:73:b4:9d:0e:9e:dc:de:
fe:d0:12:ea:22:72:71:a9:10:35:55:e6:39:13:bd:
1b:ae:e1:d4:44:9f:74:27:88:ba:f2:d9:70:4a:6b:
a7:bf:9a:ec:02:69:fa:04:e6:f1:60:37:1e:32:44:
12:23:69:bd:d4:6b:ec:4b:cd:d4:7d:00:8f:a2:d9:
e1:7c:5c:a4:86:d3:6f:a6:51:28:62:a7:e4:7f:fb:
06:04:4b:a5:eb:62:ce:10:a2:d6:80:0d:b2:1a:50:
bc:71:2a:d4:95:08:cf:6c:f4:15:05:f1:4a:3d:9f:
c4:ac:a8:14:90:89:6c:ac:79:f8:4e:92:1b:a3:77:
22:cb:40:06:82:22:af:7a:59:a9:d0:83:63:f8:ab:
50:ed:e7:63:de:1b:56:8e:f0:c4:75:9a:75:88:eb:
f8:6d:eb:2f:b4:2b:69:65:e9:e6:7e:92:5f:51:fa:
19:a1:eb:7c:dd:ed:48:fe:ce:cb:ee:55:c6:c0:f9:
2d:43:2f:32:d9:a8:17:94:f8:65:bc:62:97:2c:79:
5a:ab:30:6f:ce:05:ad:3f:96:4a:21:b7:97:2b:5b:
d2:95:64:3b:f2:e3:5c:07:bb:51:cf:e4:9f:cf:a5:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:1C:8A:77:DE:46:C7:23:4C:07:7F:30:02:59:60:9F:60:E3:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d43593f-05a0-3871-88f4-c48a58b3fd7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:88:19:c1:f9:1a:46:64:4f:c8:d4:8c:b5:6e:08:9b:cd:69:
47:5e:ba:43:04:b0:99:85:d1:6d:19:2d:a8:70:6f:37:d9:11:
db:45:ab:c8:0b:72:5f:22:b1:6e:a5:c7:97:a7:b0:36:ce:06:
78:5e:ac:89:f9:79:f0:1e:1f:7c:72:7e:3b:d5:bc:cf:07:2d:
b9:c2:a8:2e:36:d5:5b:9f:13:17:86:dd:d1:ce:3e:e9:2f:5c:
31:db:3c:48:a4:1b:9f:0e:7c:23:34:8e:36:61:8e:eb:21:27:
3d:c8:5c:11:2a:49:c2:6a:d1:2b:c3:e3:95:ec:ee:68:b4:d2:
26:d3:b0:ba:38:82:d8:25:ed:8d:a5:fb:5b:d0:8d:35:3a:3b:
71:53:1d:d2:58:31:29:a1:a5:40:78:99:1b:10:e1:bf:1b:81:
ca:e1:2e:7f:c1:b2:b9:91:7e:d6:85:69:41:db:78:11:b8:28:
fa:41:69:fb:b5:7d:f5:c3:78:68:01:06:97:1f:b2:6c:f0:25:
5b:f7:8a:67:e6:12:27:5d:b7:78:de:ba:98:f0:0b:68:98:82:
57:91:16:60:df:d4:63:18:24:84:28:b9:5b:9e:f9:bd:9a:b4:
67:7b:fc:75:e7:7c:07:7e:c3:96:6b:dd:9d:12:47:75:9d:93:
c5:1d:74:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRxu0yrcGIcnHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
YzhmZDJiNzktOGNiMi00OTUyLWFmMTgtMDczNDIyN2Y5YmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hoUMvFYrKqpxuWEAAj1KyE7VJjiQnO0nQ6e
3N7+0BLqInJxqRA1VeY5E70bruHURJ90J4i68tlwSmunv5rsAmn6BObxYDceMkQS
I2m91GvsS83UfQCPotnhfFykhtNvplEoYqfkf/sGBEul62LOEKLWgA2yGlC8cSrU
lQjPbPQVBfFKPZ/ErKgUkIlsrHn4TpIbo3ciy0AGgiKvelmp0INj+KtQ7edj3htW
jvDEdZp1iOv4besvtCtpZenmfpJfUfoZoet83e1I/s7L7lXGwPktQy8y2agXlPhl
vGKXLHlaqzBvzgWtP5ZKIbeXK1vSlWQ78uNcB7tRz+Sfz6W/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5aHIp33kbHI0wHfzACWWCfYONHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ0MzU5M2YtMDVhMC0z
ODcxLTg4ZjQtYzQ4YTU4YjNmZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWIGcH5GkZkT8jUjLVuCJvNaUdeukMEsJmF0W0ZLahwbzfZEdtFq8gL
cl8isW6lx5ensDbOBnherIn5efAeH3xyfjvVvM8HLbnCqC421VufExeG3dHOPukv
XDHbPEikG58OfCM0jjZhjushJz3IXBEqScJq0SvD45Xs7mi00ibTsLo4gtgl7Y2l
+1vQjTU6O3FTHdJYMSmhpUB4mRsQ4b8bgcrhLn/BsrmRftaFaUHbeBG4KPpBafu1
ffXDeGgBBpcfsmzwJVv3imfmEiddt3jeupjwC2iYgleRFmDf1GMYJIQouVue+b2a
tGd7/HXnfAd+w5Zr3Z0SR3Wdk8UddAg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:28 2025 by rpki-client