Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa
File: 8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa (raw, json)
Hash identifier: PHjFkyfM0xIfjgZvGv2dBz1HwJb5emn8o/+mxFjMorI=
Subject key identifier: 68:C5:E4:11:48:5A:08:CA:BC:86:34:24:FE:FE:F0:9A:32:C1:7F:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848037B72F0D7653D80425C68E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.225.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:72:f0:d7:65:3d:80:42:5c:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=6635a91d-4ce8-4676-bf1f-ee79e33e602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:bc:c1:0e:72:4d:04:62:19:23:76:7d:c1:
86:3e:bd:a8:c0:27:54:22:c2:38:42:76:3a:9a:50:
6d:de:86:f0:9e:85:21:87:91:b5:09:48:27:88:11:
cb:3c:9c:37:66:ef:25:0d:f0:7b:4c:08:1f:5d:2f:
c0:b1:3e:3b:b6:b1:33:c3:50:0e:57:82:47:61:49:
d6:d9:fd:10:4c:6b:bf:5c:76:16:45:6e:85:e5:be:
24:a6:a4:c5:ad:bc:60:b1:07:e8:32:0b:67:88:07:
dd:f2:8c:27:d0:0c:ce:b7:f1:c6:0f:75:a5:e0:27:
ef:5b:1d:5b:00:53:a9:be:7f:29:f3:e4:0a:59:14:
b0:c4:ba:db:cb:b7:59:c3:35:2c:64:8a:73:38:e8:
0d:38:d0:da:5f:ec:46:b2:8e:88:a2:58:e1:5d:5f:
fc:79:d9:59:04:72:88:bf:74:06:38:2b:f3:f1:33:
8b:90:02:a7:57:a7:cb:8c:27:5f:1a:d3:29:eb:a6:
7c:50:92:ad:1a:ab:ab:ef:6f:aa:30:2c:5e:fd:fd:
c3:b9:e3:1a:af:da:a4:37:5f:52:84:d7:cf:1b:98:
23:80:f1:0e:fd:f2:dc:f0:69:74:3f:52:c6:66:9d:
de:a2:3d:99:0d:8b:50:a2:f4:b8:9a:25:08:60:9f:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:E4:11:48:5A:08:CA:BC:86:34:24:FE:FE:F0:9A:32:C1:7F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:6a:f2:29:a4:2e:72:dd:2e:5e:15:02:61:4b:14:9e:17:c4:
26:e7:4d:4d:e3:8f:7d:a9:9a:40:9c:01:88:24:93:46:8c:03:
0f:bf:58:11:23:89:d8:eb:d4:29:43:42:ed:7f:61:8f:8e:38:
96:88:2f:b2:c9:48:4c:65:25:4f:6b:21:65:ce:f0:6e:94:9b:
c1:e1:6f:55:c9:8c:e3:27:63:b7:4d:26:13:a0:d6:52:a9:a3:
a2:c9:2b:bd:2b:d1:ce:e9:6f:05:d5:f9:f5:e8:11:1d:b9:1e:
11:97:d3:46:80:3f:7f:75:ea:13:b3:25:96:23:1e:05:4d:a8:
61:c3:3d:c4:ca:91:09:39:2e:c3:c5:8a:31:a8:21:b3:99:9c:
17:e3:28:0e:10:59:ba:63:9d:62:79:77:6e:6d:c7:2c:63:af:
ef:16:cd:22:2d:2b:df:0f:10:0f:80:70:ce:23:98:d6:30:bf:
35:f1:99:dc:6f:a4:42:63:e0:fe:82:0e:70:7c:0c:75:7d:c0:
7f:5c:56:dd:22:91:8b:58:06:ef:b7:a6:76:89:bb:86:bd:7f:
c0:f6:14:ba:da:8e:ac:19:03:00:f5:c7:88:d4:ce:6f:f1:27:
c8:2e:4a:60:a8:f5:d4:90:6d:bf:e7:e6:8d:82:3e:1d:30:eb:
ea:70:08:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe3Lw12U9gEJcaOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NjYzNWE5MWQtNGNlOC00Njc2LWJmMWYtZWU3OWUzM2U2MDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr+8wQ5yTQRiGSN2fcGGPr2owCdUIsI4QnY6
mlBt3obwnoUhh5G1CUgniBHLPJw3Zu8lDfB7TAgfXS/AsT47trEzw1AOV4JHYUnW
2f0QTGu/XHYWRW6F5b4kpqTFrbxgsQfoMgtniAfd8own0AzOt/HGD3Wl4CfvWx1b
AFOpvn8p8+QKWRSwxLrby7dZwzUsZIpzOOgNONDaX+xGso6IoljhXV/8edlZBHKI
v3QGOCvz8TOLkAKnV6fLjCdfGtMp66Z8UJKtGqur72+qMCxe/f3DueMar9qkN19S
hNfPG5gjgPEO/fLc8Gl0P1LGZp3eoj2ZDYtQovS4miUIYJ8A0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGjF5BFIWgjKvIY0JP7+8JoywX/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY0MDljZjQtMmNkYy0z
ZTJmLTgzZTItMWU5ZDE1MDI3ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENq8imkLnLdLl4VAmFLFJ4XxCbnTU3jj32pmkCcAYgkk0aMAw+/WBEj
idjr1ClDQu1/YY+OOJaIL7LJSExlJU9rIWXO8G6Um8Hhb1XJjOMnY7dNJhOg1lKp
o6LJK70r0c7pbwXV+fXoER25HhGX00aAP3916hOzJZYjHgVNqGHDPcTKkQk5LsPF
ijGoIbOZnBfjKA4QWbpjnWJ5d25txyxjr+8WzSItK98PEA+AcM4jmNYwvzXxmdxv
pEJj4P6CDnB8DHV9wH9cVt0ikYtYBu+3pnaJu4a9f8D2FLrajqwZAwD1x4jUzm/x
J8guSmCo9dSQbb/n5o2CPh0w6+pwCA0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:36:07 2025 by rpki-client