Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c865f7-0edb-36aa-a455-af07000f4975.roa
File: c7c865f7-0edb-36aa-a455-af07000f4975.roa (raw, json)
Hash identifier: AG9mETL8/z3rylSgkE5mCJqyuiESfhSqh0JJhucNEus=
Subject key identifier: FE:9B:6D:3F:FB:66:30:02:E5:D8:CA:7D:B0:92:EB:21:0C:36:DD:A1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480EA51C4515390F684934B780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c865f7-0edb-36aa-a455-af07000f4975.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36183
IP address blocks: 172.226.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1c:45:15:39:0f:68:49:34:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=4bd115df-ca54-4177-86a9-d6d17b2713bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:ab:00:7a:8a:b1:b2:fc:23:78:61:3e:0b:
7f:3e:54:4e:b2:68:a1:d1:93:5b:f5:f9:3a:7a:0f:
5a:05:e5:e5:8d:3d:41:da:8d:34:00:47:2a:a6:64:
28:7e:b8:fd:b9:28:4b:f1:a1:a9:ef:b1:d7:c8:32:
a7:f6:81:2c:f1:f6:31:60:d5:7d:b6:e4:e2:b5:aa:
36:07:27:08:c5:ae:0f:bf:1a:33:11:e5:d8:67:17:
00:95:f4:cd:f2:70:67:32:a5:2d:72:3f:af:e9:76:
87:05:b1:b2:21:d7:62:c8:dc:2a:73:8e:8c:3b:3e:
6b:e8:a2:50:02:5d:b2:e5:f8:7f:43:f6:10:d6:6b:
e5:3f:c4:f0:da:f8:41:0b:e9:d8:81:ea:9e:56:18:
ec:81:58:d8:e0:40:32:6e:2d:06:36:3e:76:9d:4e:
3e:68:1c:48:a8:7b:50:d5:ca:e8:e6:01:97:4e:33:
89:82:70:6a:74:ab:31:b0:3c:8a:49:08:37:46:94:
b7:4c:d2:09:c3:c6:c6:58:25:3f:c0:df:72:a2:3a:
12:bc:e4:fd:e4:46:25:41:9a:1e:cb:d7:69:c4:fe:
df:65:6a:77:dc:d9:85:01:de:39:68:d8:ee:af:1a:
d9:0c:09:3e:95:96:0d:a5:82:aa:cb:4c:77:d9:ef:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:6D:3F:FB:66:30:02:E5:D8:CA:7D:B0:92:EB:21:0C:36:DD:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7c865f7-0edb-36aa-a455-af07000f4975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:61:13:39:62:95:d6:f3:7d:f2:fa:8f:a6:7c:6c:4a:62:e7:
1a:ab:cc:5b:da:21:6f:4f:91:2d:cf:20:09:f2:e9:53:7f:9b:
34:6c:5c:79:15:c8:d9:35:ca:37:b1:a0:2f:5a:90:7a:33:b6:
69:a0:76:1f:e1:cc:c2:43:dc:b3:9f:87:38:18:4a:7b:1d:ae:
6d:27:e3:6e:fc:ff:c8:12:b7:cd:fb:60:f3:38:24:fc:02:7e:
c4:07:4e:d6:98:63:02:c9:22:66:2c:9b:60:6e:e0:ce:fe:1e:
ee:84:77:6e:2a:a3:98:c3:70:3e:c7:55:c5:21:f5:3e:1d:f0:
6c:2d:4b:2b:2f:33:ee:7a:d5:b4:05:b4:39:90:07:2b:97:c8:
a1:18:e9:f4:8f:8f:b4:f6:d4:fb:d6:c6:67:e3:2e:28:2e:3f:
b3:36:a9:68:de:a0:47:fb:3c:8e:ae:71:f9:cd:86:9c:da:27:
ee:0c:9d:70:42:43:ad:d0:ae:b7:fa:32:91:cf:2b:43:6f:00:
e7:62:81:8a:4f:3c:12:31:e8:cf:04:48:6d:0a:88:3c:bc:fd:
4e:81:30:38:d0:6d:53:b4:29:cf:8c:7e:66:00:e9:87:89:e6:
2c:7b:bb:3b:12:cd:a6:99:97:84:2a:86:ba:2e:ba:99:f2:e9:
23:51:13:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpRxFFTkPaEk0t4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
NGJkMTE1ZGYtY2E1NC00MTc3LTg2YTktZDZkMTdiMjcxM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKrAHqKsbL8I3hhPgt/PlROsmih0ZNb9fk6
eg9aBeXljT1B2o00AEcqpmQofrj9uShL8aGp77HXyDKn9oEs8fYxYNV9tuTitao2
BycIxa4PvxozEeXYZxcAlfTN8nBnMqUtcj+v6XaHBbGyIddiyNwqc46MOz5r6KJQ
Al2y5fh/Q/YQ1mvlP8Tw2vhBC+nYgeqeVhjsgVjY4EAybi0GNj52nU4+aBxIqHtQ
1cro5gGXTjOJgnBqdKsxsDyKSQg3RpS3TNIJw8bGWCU/wN9yojoSvOT95EYlQZoe
y9dpxP7fZWp33NmFAd45aNjurxrZDAk+lZYNpYKqy0x32e/t0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6bbT/7ZjAC5djKfbCS6yEMNt2hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdjODY1ZjctMGVkYi0z
NmFhLWE0NTUtYWYwNzAwMGY0OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdhEzlildbzffL6j6Z8bEpi5xqrzFvaIW9PkS3PIAny6VN/mzRsXHkV
yNk1yjexoC9akHoztmmgdh/hzMJD3LOfhzgYSnsdrm0n4278/8gSt837YPM4JPwC
fsQHTtaYYwLJImYsm2Bu4M7+Hu6Ed24qo5jDcD7HVcUh9T4d8GwtSysvM+561bQF
tDmQByuXyKEY6fSPj7T21PvWxmfjLiguP7M2qWjeoEf7PI6ucfnNhpzaJ+4MnXBC
Q63Qrrf6MpHPK0NvAOdigYpPPBIx6M8ESG0KiDy8/U6BMDjQbVO0Kc+MfmYA6YeJ
5ix7uzsSzaaZl4Qqhrouupny6SNRE28=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:23 2025 by rpki-client