Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87651ab-e64e-3076-9725-5b70481eb6f4.roa
File: d87651ab-e64e-3076-9725-5b70481eb6f4.roa (raw, json)
Hash identifier: hZ3q+oaCO+tdT7jwQ/qfx48LVP5Ali/qlaxrV5ZQQQE=
Subject key identifier: F4:73:81:8A:60:B4:EF:2A:0B:64:39:F5:08:35:77:22:C2:54:39:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848424AF97035ADE75E6BFDE6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87651ab-e64e-3076-9725-5b70481eb6f4.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 184.28.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:f9:70:35:ad:e7:5e:6b:fd:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=023e9e56-55ea-4602-b2f3-7c07f8f2fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:28:ff:04:1f:d0:92:4b:d9:f1:b8:33:d1:
19:20:1a:64:38:46:bf:1b:f1:1f:14:0f:89:7b:36:
b1:88:67:dc:01:0d:66:58:be:b1:71:39:eb:53:0c:
46:6c:85:97:44:02:13:90:76:d6:ff:1e:51:3a:21:
41:9b:f8:74:1e:fa:af:5c:75:56:8f:e9:c1:7c:3d:
e9:ac:01:80:d3:4b:34:74:76:2e:98:33:8e:0c:ea:
8f:6d:c1:ca:81:55:c2:c4:49:d3:fa:7f:6e:19:74:
f1:79:0a:b9:f4:f8:22:9f:c0:51:47:a1:b9:44:21:
5a:f8:67:83:8a:b5:a1:33:2e:8b:4d:a6:17:aa:e3:
a4:0a:c6:70:b2:28:85:cb:b4:9d:6b:3e:31:08:f2:
05:d9:1b:0d:42:76:62:d5:01:d1:44:b1:56:17:b7:
44:29:9b:77:28:22:af:1e:2b:9f:b6:b1:ad:a5:14:
7f:21:14:7c:d9:f3:17:8f:d6:f5:ae:f2:18:7b:0e:
ce:f5:74:05:ce:9a:90:30:a7:bc:f3:e3:d9:71:95:
9b:2c:7a:46:a9:8a:58:4a:38:4d:60:33:22:eb:46:
0e:d1:73:9b:52:01:59:eb:71:62:9f:9c:78:64:83:
8e:04:3d:f5:17:58:c7:0a:74:e8:6e:3b:bf:09:30:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:73:81:8A:60:B4:EF:2A:0B:64:39:F5:08:35:77:22:C2:54:39:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87651ab-e64e-3076-9725-5b70481eb6f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.28.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:ad:27:07:3f:ac:9b:d7:93:27:91:0b:8b:6c:9c:a4:35:7f:
4f:aa:f6:f3:83:eb:be:8c:8f:01:02:e1:76:fb:c3:ff:c5:df:
86:7b:3d:5d:26:a5:0e:f4:ba:47:d0:03:55:1f:6a:49:b7:6b:
29:64:f3:ba:67:55:4d:fa:92:d5:0a:40:0e:45:38:fb:bf:d6:
86:0b:1a:df:95:50:7e:0b:99:f9:46:1a:b6:2b:e1:fd:71:9a:
66:5d:09:ca:29:f8:d5:3c:a0:3c:a7:e6:3b:43:66:2e:6b:2f:
07:83:72:ac:5f:7c:d7:c0:57:89:73:ef:33:f1:be:f5:13:98:
1c:ce:5c:b7:55:78:ef:b7:b0:08:3c:55:34:a4:5f:40:40:19:
48:55:37:66:ad:4b:34:14:11:9d:a3:fa:1e:1b:52:e0:ed:27:
70:24:5a:fa:96:58:5b:13:44:0a:6c:b3:a9:f3:8d:46:f1:a1:
6d:7e:02:75:56:fb:02:b6:d8:aa:20:de:5f:bf:43:be:05:8d:
5f:d0:37:0d:3b:2c:f2:e3:82:a1:ed:a2:94:97:e4:f3:f1:40:
50:e0:e4:fb:21:44:b1:09:a4:c8:ed:04:d6:f4:63:a0:6c:3b:
b8:2d:03:11:d6:6f:e8:e9:c0:97:2f:4e:9e:ea:e7:cd:bf:dc:
81:7e:b3:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSvlwNa3nXmv95sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MDIzZTllNTYtNTVlYS00NjAyLWIyZjMtN2MwN2Y4ZjJmYzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIwo/wQf0JJL2fG4M9EZIBpkOEa/G/EfFA+J
ezaxiGfcAQ1mWL6xcTnrUwxGbIWXRAITkHbW/x5ROiFBm/h0HvqvXHVWj+nBfD3p
rAGA00s0dHYumDOODOqPbcHKgVXCxEnT+n9uGXTxeQq59Pgin8BRR6G5RCFa+GeD
irWhMy6LTaYXquOkCsZwsiiFy7Sdaz4xCPIF2RsNQnZi1QHRRLFWF7dEKZt3KCKv
HiuftrGtpRR/IRR82fMXj9b1rvIYew7O9XQFzpqQMKe88+PZcZWbLHpGqYpYSjhN
YDMi60YO0XObUgFZ63Fin5x4ZIOOBD31F1jHCnTobju/CTCC+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRzgYpgtO8qC2Q59Qg1dyLCVDnUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg3NjUxYWItZTY0ZS0z
MDc2LTk3MjUtNWI3MDQ4MWViNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBxyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqtJwc/rJvXkyeRC4tsnKQ1f0+q9vOD676MjwEC4Xb7w//F34Z7PV0m
pQ70ukfQA1Ufakm3aylk87pnVU36ktUKQA5FOPu/1oYLGt+VUH4LmflGGrYr4f1x
mmZdCcop+NU8oDyn5jtDZi5rLweDcqxffNfAV4lz7zPxvvUTmBzOXLdVeO+3sAg8
VTSkX0BAGUhVN2atSzQUEZ2j+h4bUuDtJ3AkWvqWWFsTRApss6nzjUbxoW1+AnVW
+wK22Kog3l+/Q74FjV/QNw07LPLjgqHtopSX5PPxQFDg5PshRLEJpMjtBNb0Y6Bs
O7gtAxHWb+jpwJcvTp7q582/3IF+s5A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:00 2025 by rpki-client