Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa
File: 578c0eaf-1b74-300d-911f-899673def303.roa (raw, json)
Hash identifier: 8J0ReGTS3FyMg8UW8/MkSt/yQjgSQ2TVJlRant1OWXE=
Subject key identifier: 32:B7:0A:5B:7B:39:9B:FD:96:4B:A6:93:6D:9E:2A:D8:32:54:AA:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B733D4C39818449ECD200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:73:3d:4c:39:81:84:49:ec:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ff1bf367-e246-4ed0-ad17-1f0cae140c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:53:f8:97:53:59:ea:55:52:4b:1a:34:b1:
a7:57:81:6d:ab:0d:1c:e6:95:75:ca:a0:86:c5:45:
20:44:35:93:8d:dd:aa:29:af:6f:37:43:81:d3:d9:
54:67:13:75:f5:6f:4c:08:78:e0:65:af:a1:67:c9:
44:6e:e0:4c:d3:13:f6:00:60:58:28:8e:7b:e8:4a:
8c:c3:13:36:a6:6b:be:d8:3b:0c:bb:c8:28:31:95:
80:81:d3:93:43:4a:0f:5f:71:7d:b4:06:2c:8c:8a:
c9:a7:c6:09:94:6f:6a:a4:34:ac:34:e9:7e:f1:c6:
f8:67:3e:eb:5d:06:93:a3:09:55:17:f2:a8:8a:d0:
44:44:8d:93:e9:31:a9:60:86:e9:77:d5:5e:00:5a:
83:d6:35:c2:93:e8:9a:0c:00:e6:6c:c3:38:4b:60:
e2:1b:7e:4b:e1:89:1c:23:e1:71:91:f9:73:f6:7b:
36:ad:8c:3f:3f:45:30:c2:16:f1:b3:50:4f:57:03:
fe:c6:7a:00:11:51:d5:53:8d:a2:a8:a2:f7:6d:fb:
d2:72:bf:59:d6:20:c9:e5:fc:d8:a5:8a:e2:d1:2a:
e1:76:13:eb:de:51:e5:ed:22:b7:ae:d3:ed:65:e5:
87:f4:e4:45:9d:55:05:b8:3f:b4:c9:e5:36:9d:03:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:0A:5B:7B:39:9B:FD:96:4B:A6:93:6D:9E:2A:D8:32:54:AA:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:00:ff:21:0c:3b:1d:e9:23:c7:d1:9e:85:18:fd:45:1b:8c:
b5:1f:c4:89:98:a9:91:2b:5c:5c:b8:91:d9:e0:ce:e9:c7:f0:
4c:fc:af:80:8e:2b:41:c9:05:c3:b0:44:c4:03:15:dd:8a:f1:
78:02:8a:8c:d0:00:ca:a4:7a:f5:e0:c8:cd:c4:86:f6:b7:61:
30:84:39:0e:cf:79:00:47:78:84:a6:cc:db:ec:ad:af:27:00:
d4:e3:d6:7b:59:e3:42:9f:20:f2:bc:d0:59:33:23:18:27:47:
5d:4e:91:5f:7b:24:e6:34:8b:b5:74:48:a6:9b:ad:76:0f:53:
58:00:27:6f:e2:7b:28:44:e6:85:6d:62:9a:17:b8:a8:5b:1c:
aa:7d:f0:57:1f:03:76:ef:93:2e:cf:61:e4:a8:bb:06:10:96:
24:b8:a7:ac:96:3c:7f:22:07:6a:81:82:45:f4:a1:fa:a1:d2:
aa:da:1c:d3:38:dc:cc:7a:93:46:4c:58:5a:3e:2e:e2:7a:87:
b0:2c:d1:c5:1b:98:12:e7:61:f3:76:ca:87:13:1c:0c:35:dd:
ec:e9:7b:aa:60:5f:20:e8:5e:a7:12:f2:40:ec:7e:ea:3e:58:
3e:39:d6:e9:bb:96:4f:41:29:19:21:29:4f:3c:af:a6:6d:05:
1b:bf:e0:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe3M9TDmBhEns0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
ZmYxYmYzNjctZTI0Ni00ZWQwLWFkMTctMWYwY2FlMTQwYzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JNT+JdTWepVUksaNLGnV4Ftqw0c5pV1yqCG
xUUgRDWTjd2qKa9vN0OB09lUZxN19W9MCHjgZa+hZ8lEbuBM0xP2AGBYKI576EqM
wxM2pmu+2DsMu8goMZWAgdOTQ0oPX3F9tAYsjIrJp8YJlG9qpDSsNOl+8cb4Zz7r
XQaTowlVF/KoitBERI2T6TGpYIbpd9VeAFqD1jXCk+iaDADmbMM4S2DiG35L4Ykc
I+Fxkflz9ns2rYw/P0Uwwhbxs1BPVwP+xnoAEVHVU42iqKL3bfvScr9Z1iDJ5fzY
pYri0SrhdhPr3lHl7SK3rtPtZeWH9ORFnVUFuD+0yeU2nQMxXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK3Clt7OZv9lkumk22eKtgyVKr6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc4YzBlYWYtMWI3NC0z
MDBkLTkxMWYtODk5NjczZGVmMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkA/yEMOx3pI8fRnoUY/UUbjLUfxImYqZErXFy4kdngzunH8Ez8r4CO
K0HJBcOwRMQDFd2K8XgCiozQAMqkevXgyM3Ehva3YTCEOQ7PeQBHeISmzNvsra8n
ANTj1ntZ40KfIPK80FkzIxgnR11OkV97JOY0i7V0SKabrXYPU1gAJ2/ieyhE5oVt
YpoXuKhbHKp98FcfA3bvky7PYeSouwYQliS4p6yWPH8iB2qBgkX0ofqh0qraHNM4
3Mx6k0ZMWFo+LuJ6h7As0cUbmBLnYfN2yocTHAw13ezpe6pgXyDoXqcS8kDsfuo+
WD451um7lk9BKRkhKU88r6ZtBRu/4I8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:27 2025 by rpki-client