Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa
File: acfad1da-a3d0-31f4-9e9f-319a57c52807.roa (raw, json)
Hash identifier: 4PHabDABnt62he9OH8TJxbxShpA4BX2n6QjXdl9S7zI=
Subject key identifier: 9F:5E:85:C0:46:90:FA:8B:62:AA:D3:BD:E1:36:C1:CA:5A:40:CC:54
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FF4A686AE1479909B0524B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:68:6a:e1:47:99:09:b0:52:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=32d945c4-859e-440b-bb8d-0b348a269a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:b1:88:0a:bc:a5:34:4f:37:6e:b2:59:85:
ec:a4:96:9e:7a:d0:5b:93:27:fb:01:04:79:41:8a:
8b:2c:fb:23:7d:a9:49:80:07:38:d4:7f:cb:78:a0:
ec:61:3c:0f:ff:6a:73:d8:f9:7d:50:75:5d:1c:79:
c8:fe:33:f3:c5:23:63:83:84:7c:d9:ed:ef:7a:91:
63:d0:25:d0:01:a3:69:ff:85:47:21:3d:cc:4a:8e:
bc:04:0d:10:41:50:96:78:ac:5c:cc:e7:44:0c:0c:
3b:b3:7d:71:20:d2:8a:29:76:ba:b7:bc:4d:e5:02:
ac:c0:8f:58:4c:99:de:28:96:6a:d8:3b:67:97:0f:
29:a9:59:8e:b1:1e:87:24:4d:38:55:e7:4a:d2:6b:
ae:3e:e4:ea:fc:2b:22:b4:63:bf:93:d8:9d:d7:38:
ed:44:81:61:e7:ba:e7:69:f5:95:ab:a1:24:2e:63:
ec:67:be:6a:a8:d6:33:4a:16:11:11:58:99:76:af:
84:02:12:6c:a1:23:c1:e9:34:25:f9:0f:f5:b9:a0:
d1:a9:0e:7a:74:aa:60:01:2d:e5:66:d3:28:67:5f:
15:18:e4:1d:ce:53:62:70:d0:3f:44:4d:f9:25:f1:
f7:05:29:3e:5f:84:20:f5:7e:49:b0:3f:f1:07:28:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:85:C0:46:90:FA:8B:62:AA:D3:BD:E1:36:C1:CA:5A:40:CC:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acfad1da-a3d0-31f4-9e9f-319a57c52807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d7:7e:19:6a:69:91:f7:80:ed:66:ce:5c:20:b0:44:3b:25:
f9:e5:b3:5d:ba:d6:8e:e0:39:04:f6:c5:0c:ec:a4:66:ac:cd:
50:45:69:6a:84:7d:49:03:a4:91:4a:51:a5:4f:e4:fd:b7:18:
a1:7d:95:eb:20:47:02:ca:3f:fb:04:3e:72:14:6d:c5:85:a1:
b4:86:66:20:fc:e0:96:36:50:09:c4:f6:b6:c1:33:cf:13:83:
cb:9e:14:e8:b8:d9:5e:ba:69:1a:4d:c0:18:5d:02:b6:83:95:
e9:bb:fe:80:22:ca:22:01:d9:3e:a8:8c:51:eb:2d:76:31:a0:
05:8e:ce:fe:38:07:36:c0:bf:ad:cd:20:e2:f5:84:3b:6e:61:
50:62:4f:d9:f9:14:cb:8b:d5:08:b9:0e:65:fc:bf:a6:88:bb:
39:e9:c6:93:32:98:37:b0:7d:01:00:b1:b4:c4:8c:57:82:19:
8c:a8:69:9e:f6:4c:97:d9:15:ba:83:29:a0:d8:bd:86:aa:df:
d0:af:8e:b5:ff:c4:a6:bd:2b:64:68:f2:83:06:89:6b:3c:aa:
a7:94:b8:1c:5f:ce:95:06:a7:ba:17:e8:92:d8:cc:14:47:6c:
ab:b6:47:b4:8f:7f:dd:0f:c8:6f:a3:23:ad:f8:d3:02:ea:a6:
58:19:fe:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Smhq4UeZCbBSSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
MzJkOTQ1YzQtODU5ZS00NDBiLWJiOGQtMGIzNDhhMjY5YTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9axiAq8pTRPN26yWYXspJaeetBbkyf7AQR5
QYqLLPsjfalJgAc41H/LeKDsYTwP/2pz2Pl9UHVdHHnI/jPzxSNjg4R82e3vepFj
0CXQAaNp/4VHIT3MSo68BA0QQVCWeKxczOdEDAw7s31xINKKKXa6t7xN5QKswI9Y
TJneKJZq2Dtnlw8pqVmOsR6HJE04VedK0muuPuTq/CsitGO/k9id1zjtRIFh57rn
afWVq6EkLmPsZ75qqNYzShYREViZdq+EAhJsoSPB6TQl+Q/1uaDRqQ56dKpgAS3l
ZtMoZ18VGOQdzlNicNA/RE35JfH3BSk+X4Qg9X5JsD/xBygD6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9ehcBGkPqLYqrTveE2wcpaQMxUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWNmYWQxZGEtYTNkMC0z
MWY0LTllOWYtMzE5YTU3YzUyODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzXfhlqaZH3gO1mzlwgsEQ7Jfnls1261o7gOQT2xQzspGaszVBFaWqE
fUkDpJFKUaVP5P23GKF9lesgRwLKP/sEPnIUbcWFobSGZiD84JY2UAnE9rbBM88T
g8ueFOi42V66aRpNwBhdAraDlem7/oAiyiIB2T6ojFHrLXYxoAWOzv44BzbAv63N
IOL1hDtuYVBiT9n5FMuL1Qi5DmX8v6aIuznpxpMymDewfQEAsbTEjFeCGYyoaZ72
TJfZFbqDKaDYvYaq39CvjrX/xKa9K2Ro8oMGiWs8qqeUuBxfzpUGp7oX6JLYzBRH
bKu2R7SPf90PyG+jI6340wLqplgZ/ms=
-----END CERTIFICATE-----
Generated at Sun May 4 19:26:43 2025 by rpki-client