Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa
File: c2b302a7-7472-36be-b827-81ff12827b21.roa (raw, json)
Hash identifier: N9V4rDartEKaKJ0JOfiy74wWHdZ5xPQXF8cYb2c5fdM=
Subject key identifier: 98:32:E2:B8:20:6F:52:E7:A8:43:23:E8:49:99:E7:A3:9B:5A:C0:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584802150F7158CB1A7CB8519F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 36183
IP address blocks: 172.225.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0f:71:58:cb:1a:7c:b8:51:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=ab528c3d-5265-4452-a0de-52bc83a9ea36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:a6:b7:09:9d:61:37:35:9b:56:88:f0:32:
b3:d3:b4:66:19:0e:bb:2f:b0:3e:8b:8e:bf:75:24:
f7:63:74:6d:be:1b:45:c7:7e:e2:79:d5:4b:31:a5:
d7:57:5c:7b:d5:69:b2:29:9f:c3:0d:79:ba:b4:a4:
df:8b:8e:9c:ac:f3:48:6e:58:e6:8c:03:03:0b:82:
7d:6b:cb:45:b9:5b:4f:1a:0f:98:e8:ad:c2:67:bb:
6b:6b:66:c6:ec:50:cf:26:25:a6:5c:cd:a5:44:1f:
ce:33:96:fc:26:50:d0:9d:2c:a2:76:15:53:f5:e6:
a5:aa:2b:31:29:c2:a1:a4:24:a7:00:ae:f2:4e:6d:
ba:a8:aa:e0:82:41:cc:84:93:14:47:26:23:0a:91:
ff:9e:ce:19:f5:4f:75:a8:b8:3b:02:ef:8a:3b:24:
51:23:f7:b4:fa:b6:e3:cf:96:eb:be:bf:a5:5c:b6:
ca:6b:32:f5:76:4d:4b:b1:cb:f5:b8:6f:6e:a9:ed:
35:cc:77:2d:2b:53:81:9b:47:94:70:6a:e8:2a:94:
aa:21:96:1f:e0:c0:a2:bc:07:f2:5b:aa:99:9d:c9:
7f:35:84:94:fe:bf:93:e6:39:1a:87:02:5e:df:16:
c1:e0:b5:31:7a:f9:a1:2b:8e:37:e1:7e:a5:1b:98:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:32:E2:B8:20:6F:52:E7:A8:43:23:E8:49:99:E7:A3:9B:5A:C0:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:44:85:06:05:b4:49:12:73:a1:c8:5e:74:66:7a:90:86:d1:
d5:23:be:0c:9d:b9:2b:71:24:b5:18:90:cb:6e:3a:fd:a0:a8:
de:51:90:fb:b7:01:d2:8e:16:60:d9:d6:cd:53:67:ac:11:c3:
c0:51:96:23:6e:b7:68:f3:02:6d:57:87:f2:61:d3:f0:36:6f:
93:95:60:97:ed:d2:eb:b1:28:23:5f:00:ae:4d:54:be:72:3a:
ac:37:95:57:d3:3c:7f:ab:0a:4d:96:b0:4d:7a:93:8d:77:08:
c4:17:61:91:4a:55:a1:98:89:12:fd:47:e9:eb:0b:08:08:5f:
4f:47:85:ac:de:d7:43:50:32:91:ef:be:cd:86:23:b2:7b:92:
8d:5c:57:bc:d0:4d:75:31:49:9e:b9:a9:48:e9:e9:cc:db:26:
41:c0:be:41:54:07:3b:4b:32:2a:1c:4d:63:ce:50:75:d6:cd:
c3:5d:00:98:82:60:4a:22:e8:73:17:79:01:a1:39:3c:7f:3e:
96:f8:cc:0c:6c:86:94:d7:e8:4d:93:ed:74:64:eb:64:e1:d4:
01:5b:a9:c5:0a:31:36:07:4c:83:41:a0:d0:0c:4d:6a:a7:48:
98:d0:a6:28:d5:35:f2:df:63:90:ec:f0:bd:a5:40:e8:fb:4e:
85:c6:b2:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFQ9xWMsafLhRn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
YWI1MjhjM2QtNTI2NS00NDUyLWEwZGUtNTJiYzgzYTllYTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDamtwmdYTc1m1aI8DKz07RmGQ67L7A+i46/
dST3Y3RtvhtFx37iedVLMaXXV1x71WmyKZ/DDXm6tKTfi46crPNIbljmjAMDC4J9
a8tFuVtPGg+Y6K3CZ7tra2bG7FDPJiWmXM2lRB/OM5b8JlDQnSyidhVT9ealqisx
KcKhpCSnAK7yTm26qKrggkHMhJMURyYjCpH/ns4Z9U91qLg7Au+KOyRRI/e0+rbj
z5brvr+lXLbKazL1dk1Lscv1uG9uqe01zHctK1OBm0eUcGroKpSqIZYf4MCivAfy
W6qZncl/NYSU/r+T5jkahwJe3xbB4LUxevmhK4434X6lG5hQSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgy4rggb1LnqEMj6EmZ56ObWsBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJiMzAyYTctNzQ3Mi0z
NmJlLWI4MjctODFmZjEyODI3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBEhQYFtEkSc6HIXnRmepCG0dUjvgyduStxJLUYkMtuOv2gqN5RkPu3
AdKOFmDZ1s1TZ6wRw8BRliNut2jzAm1Xh/Jh0/A2b5OVYJft0uuxKCNfAK5NVL5y
Oqw3lVfTPH+rCk2WsE16k413CMQXYZFKVaGYiRL9R+nrCwgIX09Hhaze10NQMpHv
vs2GI7J7ko1cV7zQTXUxSZ65qUjp6czbJkHAvkFUBztLMiocTWPOUHXWzcNdAJiC
YEoi6HMXeQGhOTx/Ppb4zAxshpTX6E2T7XRk62Th1AFbqcUKMTYHTINBoNAMTWqn
SJjQpijVNfLfY5Ds8L2lQOj7ToXGsow=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:05 2025 by rpki-client