Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa
File: 9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa (raw, json)
Hash identifier: qSCNxv6RFw3VqhnypJXhXCHIMK9IUy/j/FE2VLB7GQg=
Subject key identifier: 6B:6D:02:69:3E:6A:D9:DD:EB:16:CC:A1:42:89:CD:79:BD:38:1F:18
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF5733C12E9E3EA8E030F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 72.246.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:73:3c:12:e9:e3:ea:8e:03:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=0f218849-0bbd-45fa-91ad-3ed49a8da321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:bc:63:c7:aa:cc:f6:f6:42:9a:df:09:68:
55:c8:2e:f5:a6:96:b3:3b:96:27:b5:ed:ee:c3:7a:
e0:68:cf:dc:02:e2:7f:cf:0a:f5:d4:0d:c0:37:d0:
3f:e3:7a:65:86:b4:14:64:3e:07:f8:bd:63:f4:ef:
ac:a0:30:d3:35:21:71:c8:b3:0c:8e:87:f2:59:62:
3d:97:5f:68:39:1f:89:29:c7:57:85:e8:bf:62:cd:
bf:33:77:a9:91:5b:77:bb:e4:54:c2:a7:33:b8:76:
3b:fa:f8:f4:7e:c7:c5:9c:34:97:1a:45:65:d4:4a:
0d:3b:4b:84:c8:f7:80:40:1b:ff:1c:24:ed:52:68:
89:bf:f8:e6:9a:ad:58:66:ab:9a:d1:eb:35:4f:31:
5a:b7:f6:11:ce:f2:72:b9:e6:4e:73:bc:ab:c9:9e:
69:ae:3a:97:50:27:c0:79:df:a9:53:8a:8a:2d:28:
59:62:84:3e:f9:29:4d:6a:43:50:28:fd:54:78:8b:
73:bc:52:8f:8a:52:f0:1d:c3:ac:eb:61:15:19:14:
21:8a:5d:a4:49:2f:33:b2:4a:c7:93:a2:68:c3:2a:
a5:85:2a:4f:92:bc:55:80:34:2f:75:f5:d5:ff:7d:
f6:ab:ad:ec:15:4e:c1:85:3e:4b:5f:8a:1b:b8:38:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6D:02:69:3E:6A:D9:DD:EB:16:CC:A1:42:89:CD:79:BD:38:1F:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d3:9d:be:58:fb:7b:3b:a0:1b:2f:e0:a1:88:cd:83:6b:01:
41:e2:5b:31:76:45:bc:13:2c:dc:29:3c:1b:91:49:f6:30:70:
02:4f:e8:42:91:8f:0c:f1:ea:b4:7c:f8:bc:31:19:af:c6:c6:
bb:ea:57:b2:95:30:c3:99:19:1c:58:58:ef:c0:1b:12:9a:fc:
dc:f7:82:bf:54:5c:ad:58:e7:bd:81:d1:b7:83:b7:01:a4:86:
60:5a:15:32:ba:48:8b:6a:3a:3d:a5:0b:49:0f:5f:26:be:da:
40:9e:6d:b8:69:b2:aa:6d:d6:01:38:7a:fa:39:a6:b2:af:65:
7e:05:e7:af:da:9a:79:78:75:b2:33:ef:1b:58:81:35:ea:8e:
be:07:d2:fb:d8:24:0e:54:0f:12:3e:80:91:d7:3c:b7:6e:76:
67:b4:9b:e9:c4:38:9f:a4:22:f5:e9:15:fd:d7:d2:52:22:04:
ec:35:db:c7:8c:66:70:ab:7f:1c:e3:84:da:4d:aa:74:9d:95:
64:82:9a:09:e4:d3:57:dc:3b:f1:10:d2:79:58:e1:7c:9b:a5:
a8:27:6c:2c:ba:1d:d5:b2:4b:4c:90:f0:26:33:27:3f:15:16:
f9:10:71:0b:d4:6e:21:19:58:1e:d4:96:56:96:5e:7f:bd:28:
96:92:49:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9XM8Eunj6o4DDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGYyMTg4NDktMGJiZC00NWZhLTkxYWQtM2VkNDlhOGRhMzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOO8Y8eqzPb2QprfCWhVyC71ppazO5Ynte3u
w3rgaM/cAuJ/zwr11A3AN9A/43plhrQUZD4H+L1j9O+soDDTNSFxyLMMjofyWWI9
l19oOR+JKcdXhei/Ys2/M3epkVt3u+RUwqczuHY7+vj0fsfFnDSXGkVl1EoNO0uE
yPeAQBv/HCTtUmiJv/jmmq1YZqua0es1TzFat/YRzvJyueZOc7yryZ5prjqXUCfA
ed+pU4qKLShZYoQ++SlNakNQKP1UeItzvFKPilLwHcOs62EVGRQhil2kSS8zskrH
k6JowyqlhSpPkrxVgDQvdfXV/332q63sFU7BhT5LX4obuDhDrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGttAmk+atnd6xbMoUKJzXm9OB8YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY3Y2Y5ZWMtNmViYy0z
MGI5LWE0M2QtMGI3ZTE3ZTdiMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPY0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3Tnb5Y+3s7oBsv4KGIzYNrAUHiWzF2RbwTLNwpPBuRSfYwcAJP6EKR
jwzx6rR8+LwxGa/GxrvqV7KVMMOZGRxYWO/AGxKa/Nz3gr9UXK1Y572B0beDtwGk
hmBaFTK6SItqOj2lC0kPXya+2kCebbhpsqpt1gE4evo5prKvZX4F56/amnl4dbIz
7xtYgTXqjr4H0vvYJA5UDxI+gJHXPLdudme0m+nEOJ+kIvXpFf3X0lIiBOw128eM
ZnCrfxzjhNpNqnSdlWSCmgnk01fcO/EQ0nlY4XybpagnbCy6HdWyS0yQ8CYzJz8V
FvkQcQvUbiEZWB7UllaWXn+9KJaSSSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:49:51 2025 by rpki-client