Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/713685d1-0c1c-3700-8845-8d0f59946d38.roa
File: 713685d1-0c1c-3700-8845-8d0f59946d38.roa (raw, json)
Hash identifier: CQuJjd67F8ZYhN4UvsaoolOzvZGYSEGaI+RTl5Iq56k=
Subject key identifier: 28:C7:40:D8:E9:6F:A6:9A:B5:90:09:DC:BD:4E:2F:3B:1B:2F:B9:EF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848159FFE64094DDE3ADFDF3000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/713685d1-0c1c-3700-8845-8d0f59946d38.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 36183
IP address blocks: 172.224.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fe:64:09:4d:de:3a:df:df:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=7397426c-f31a-49b4-bfa4-a6080cab5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:84:2d:09:08:46:45:30:f7:9d:5f:46:93:
15:cc:1c:1c:0a:de:ae:76:9e:9b:a8:00:83:0c:9c:
b4:88:86:05:79:31:f4:74:1a:36:73:08:26:1e:6d:
d3:ee:89:23:d1:4f:18:44:c1:63:c3:d7:6f:ad:74:
6d:53:8f:f0:69:61:9c:d1:59:9e:7c:13:e8:95:0e:
33:e8:49:38:04:5b:d2:ee:94:74:b4:e5:a0:e8:fb:
34:43:b0:82:b6:d9:d1:02:4d:80:21:f8:d2:b5:10:
a9:fe:27:7f:7e:75:a7:57:44:e2:45:8d:95:9a:c4:
c6:c1:f1:1f:af:8b:b0:cb:ce:1f:5a:80:a3:97:59:
0a:36:e3:6c:04:d5:d3:2b:66:66:c8:c5:20:ce:66:
ab:b9:0b:88:0e:0a:2d:ea:53:04:90:19:17:5e:0a:
b5:02:3a:0e:05:36:dc:18:20:6f:97:bb:ce:82:58:
0c:89:89:d1:bb:c5:f7:59:d6:50:94:43:3b:98:c7:
98:60:18:44:6c:bb:05:ce:69:ad:87:21:6b:24:16:
fc:9c:4c:99:7b:08:fe:80:fd:27:4d:9e:9a:de:11:
21:73:d6:b9:85:0e:0b:ce:72:19:f8:d9:76:a2:3e:
b1:f4:51:e8:2a:39:ff:44:9a:3f:2c:94:11:ee:59:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:40:D8:E9:6F:A6:9A:B5:90:09:DC:BD:4E:2F:3B:1B:2F:B9:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/713685d1-0c1c-3700-8845-8d0f59946d38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:57:8d:8f:a3:91:c1:41:10:4c:47:95:30:20:c6:29:60:cd:
88:21:20:9d:0f:af:eb:1a:8a:7f:b6:df:60:69:82:6e:90:c8:
fa:8d:50:3e:71:a1:f5:57:c9:08:01:b8:f0:a4:c8:d8:f6:e5:
18:88:58:d8:51:eb:9c:dc:e2:b6:83:7f:2f:e5:df:a3:ad:78:
85:8a:d6:96:11:13:af:74:38:de:d4:d4:10:29:6e:25:b2:0f:
7b:6e:f1:d0:61:08:45:48:c1:ed:41:e7:0c:48:fd:02:38:84:
3a:6c:49:99:a8:c7:77:76:3c:56:8f:87:22:40:2a:3c:1c:ca:
69:de:ff:47:25:42:e3:44:f2:d4:2c:72:db:76:74:5b:22:57:
a7:93:a1:96:d4:c8:7e:a6:ba:3f:38:6d:ae:d8:36:66:08:90:
c4:2d:20:14:79:ce:d8:6e:c5:fc:58:5f:e7:7f:53:ea:32:d3:
0f:86:5c:d3:85:ec:86:b5:92:25:d5:9d:2e:b3:7c:cc:03:cd:
2c:f7:bf:e1:72:92:d7:bd:15:92:2a:e3:f0:5c:66:be:76:c4:
e0:89:62:77:4c:b2:ed:26:b0:30:43:50:b0:be:59:3a:0a:bb:
be:40:a4:8e:be:ff:3e:90:f6:ef:e1:25:7e:33:f5:e0:fb:a4:
e8:7d:0e:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/5kCU3eOt/fMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NzM5NzQyNmMtZjMxYS00OWI0LWJmYTQtYTYwODBjYWI1Y2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp6ELQkIRkUw951fRpMVzBwcCt6udp6bqACD
DJy0iIYFeTH0dBo2cwgmHm3T7okj0U8YRMFjw9dvrXRtU4/waWGc0VmefBPolQ4z
6Ek4BFvS7pR0tOWg6Ps0Q7CCttnRAk2AIfjStRCp/id/fnWnV0TiRY2VmsTGwfEf
r4uwy84fWoCjl1kKNuNsBNXTK2ZmyMUgzmaruQuIDgot6lMEkBkXXgq1AjoOBTbc
GCBvl7vOglgMiYnRu8X3WdZQlEM7mMeYYBhEbLsFzmmthyFrJBb8nEyZewj+gP0n
TZ6a3hEhc9a5hQ4LznIZ+Nl2oj6x9FHoKjn/RJo/LJQR7lmnQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjHQNjpb6aatZAJ3L1OLzsbL7nvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzEzNjg1ZDEtMGMxYy0z
NzAwLTg4NDUtOGQwZjU5OTQ2ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRXjY+jkcFBEExHlTAgxilgzYghIJ0Pr+sain+232Bpgm6QyPqNUD5x
ofVXyQgBuPCkyNj25RiIWNhR65zc4raDfy/l36OteIWK1pYRE690ON7U1BApbiWy
D3tu8dBhCEVIwe1B5wxI/QI4hDpsSZmox3d2PFaPhyJAKjwcymne/0clQuNE8tQs
ctt2dFsiV6eToZbUyH6muj84ba7YNmYIkMQtIBR5zthuxfxYX+d/U+oy0w+GXNOF
7Ia1kiXVnS6zfMwDzSz3v+Fykte9FZIq4/BcZr52xOCJYndMsu0msDBDULC+WToK
u75ApI6+/z6Q9u/hJX4z9eD7pOh9Dqs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:58 2025 by rpki-client