Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e56c6e1-e577-3754-a561-aef67bc69f5b.roa
File: 5e56c6e1-e577-3754-a561-aef67bc69f5b.roa (raw, json)
Hash identifier: zQAtGvwE9JI0Q4TWipy9tuEfAkc43D1MNKx6o5cQWgU=
Subject key identifier: B5:E3:EB:F5:C7:32:18:0C:7D:67:6B:A8:5A:34:52:37:2B:61:0A:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5737C07F0D68A469E8D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e56c6e1-e577-3754-a561-aef67bc69f5b.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 72.246.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:73:7c:07:f0:d6:8a:46:9e:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=34646012-2700-41aa-a07b-f073b33dc562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4b:be:93:54:e4:b6:81:78:be:31:28:3e:e1:
44:8b:75:91:64:d6:61:f5:93:2d:a2:a6:d9:c1:eb:
28:7a:aa:06:e3:28:50:65:13:bb:90:8b:a2:e0:d2:
73:32:7b:36:04:29:b6:d5:63:8e:fe:e6:b7:98:3b:
72:b0:44:07:0b:8c:d2:67:fd:76:d9:95:59:d5:23:
3a:b0:d2:14:9d:2f:c9:5d:42:3e:08:17:ac:cb:9d:
82:8f:90:04:04:15:c0:4e:64:58:8a:ea:03:db:89:
ab:53:3e:54:b4:fc:ad:e2:86:4f:ed:e7:2b:04:95:
41:74:d6:43:d5:06:f1:93:b4:d6:6d:43:3a:87:0a:
95:6b:df:c7:7f:ae:c0:0e:11:5f:aa:78:d9:71:97:
46:90:63:5e:ed:38:f6:ca:d9:88:ed:58:78:21:4d:
73:00:d4:38:67:30:21:81:b7:cc:aa:56:43:d0:07:
e0:68:68:eb:20:38:f8:52:46:77:01:6e:15:14:78:
36:29:81:e3:fd:ff:c1:43:27:b2:9b:aa:15:09:e1:
5c:93:8a:86:b5:3b:33:60:10:29:45:08:fe:1e:1a:
bf:1e:5d:68:65:78:27:30:be:d3:53:6d:b7:71:31:
7a:78:50:05:b8:e2:e9:ce:96:3d:ac:3a:29:99:52:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:EB:F5:C7:32:18:0C:7D:67:6B:A8:5A:34:52:37:2B:61:0A:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e56c6e1-e577-3754-a561-aef67bc69f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:94:9e:f4:d3:41:4e:57:9e:8f:da:cc:53:5b:2b:13:c6:23:
9f:73:2c:84:cb:bb:17:0f:c8:47:86:e4:32:cb:70:96:24:05:
30:0a:fe:4a:01:82:a7:73:c6:11:01:ef:ac:03:85:d8:c4:41:
9e:0f:ed:c4:03:e8:f4:f6:30:18:4f:7d:99:76:1e:69:a6:8e:
a6:5a:e2:df:c7:56:44:53:a2:47:31:80:24:82:f1:d5:75:91:
4f:5d:64:e6:ff:91:07:f5:0d:b3:b9:d0:46:b7:b5:6d:49:ab:
7c:3b:bd:58:60:46:12:97:9c:8c:d2:9f:bf:bd:37:4a:e5:a5:
29:c4:92:aa:79:b1:7b:ae:a4:70:69:79:7e:22:a7:4a:a2:77:
de:8c:87:62:43:1f:60:08:72:9a:a5:32:23:14:b9:20:b3:ad:
fe:38:eb:20:05:24:99:b7:c4:a6:26:1c:71:fc:16:af:c5:ff:
b5:54:80:54:7f:a8:83:9f:48:46:6b:57:11:51:07:77:ba:d8:
b1:b5:54:81:34:3e:10:0d:65:60:c1:f5:4a:38:70:a2:40:95:
3c:21:1a:73:07:3d:38:ff:4f:f1:c6:20:51:25:52:74:00:a1:
8f:3d:83:31:ee:a6:96:f4:af:f1:b9:af:9b:79:34:fb:8d:f5:
36:84:3e:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9XN8B/DWikaejYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MzQ2NDYwMTItMjcwMC00MWFhLWEwN2ItZjA3M2IzM2RjNTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUu+k1TktoF4vjEoPuFEi3WRZNZh9ZMtoqbZ
wesoeqoG4yhQZRO7kIui4NJzMns2BCm21WOO/ua3mDtysEQHC4zSZ/122ZVZ1SM6
sNIUnS/JXUI+CBesy52Cj5AEBBXATmRYiuoD24mrUz5UtPyt4oZP7ecrBJVBdNZD
1Qbxk7TWbUM6hwqVa9/Hf67ADhFfqnjZcZdGkGNe7Tj2ytmI7Vh4IU1zANQ4ZzAh
gbfMqlZD0AfgaGjrIDj4UkZ3AW4VFHg2KYHj/f/BQyeym6oVCeFck4qGtTszYBAp
RQj+Hhq/Hl1oZXgnML7TU223cTF6eFAFuOLpzpY9rDopmVJebwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXj6/XHMhgMfWdrqFo0UjcrYQrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWU1NmM2ZTEtZTU3Ny0z
NzU0LWE1NjEtYWVmNjdiYzY5ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPZnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICUnvTTQU5Xno/azFNbKxPGI59zLITLuxcPyEeG5DLLcJYkBTAK/koB
gqdzxhEB76wDhdjEQZ4P7cQD6PT2MBhPfZl2HmmmjqZa4t/HVkRTokcxgCSC8dV1
kU9dZOb/kQf1DbO50Ea3tW1Jq3w7vVhgRhKXnIzSn7+9N0rlpSnEkqp5sXuupHBp
eX4ip0qid96Mh2JDH2AIcpqlMiMUuSCzrf446yAFJJm3xKYmHHH8Fq/F/7VUgFR/
qIOfSEZrVxFRB3e62LG1VIE0PhANZWDB9Uo4cKJAlTwhGnMHPTj/T/HGIFElUnQA
oY89gzHuppb0r/G5r5t5NPuN9TaEPkU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:40 2025 by rpki-client