Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
File: e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa (raw, json)
Hash identifier: ChAWQKDhvs3TAgJp9c4o9f90Lbswe7LNfvZkxsoRjBQ=
Subject key identifier: 32:7E:4A:0C:7D:AA:94:BD:1F:C7:6F:64:FA:D6:1C:44:C2:B9:DB:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848143A84B2FA630EF504447180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 36183
IP address blocks: 172.224.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:84:b2:fa:63:0e:f5:04:44:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=fe963469-21a7-4f40-b8a3-a4eb1fa2418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:6e:d2:72:c1:7f:91:1f:7a:a8:58:6a:b0:
e8:b9:91:a6:34:e7:d3:aa:8e:bc:60:69:91:13:ea:
06:68:dc:73:89:4e:05:60:29:02:68:de:1f:87:45:
92:ca:ac:75:96:8e:01:4a:33:62:ac:a5:20:55:fa:
87:a2:a1:30:b6:7b:c8:96:82:84:f6:70:be:bf:17:
b1:db:52:5a:e8:8f:10:e4:6a:7f:b8:f6:04:da:c2:
93:8c:64:4e:c1:15:1b:26:9d:4b:e3:8f:1e:86:df:
32:c3:7b:9f:75:25:c8:54:c0:5c:9d:09:95:dc:53:
38:47:3b:c1:ce:79:e6:33:49:33:3c:38:71:1b:75:
27:08:50:9a:7a:9b:97:41:1b:27:7d:ba:cd:14:d3:
5c:d3:8b:5d:c4:46:e9:a5:dd:80:6d:e7:f7:7c:8e:
a6:9d:f7:1b:fa:5b:fa:c4:fa:6a:c8:b6:92:e8:5b:
59:0c:ba:98:06:16:f0:4d:fa:3a:12:32:47:a1:8c:
f1:d5:27:41:20:9d:df:7a:4f:04:35:e8:3c:49:52:
03:18:25:08:27:99:d8:9f:25:6c:11:f6:a5:9e:de:
db:85:4e:29:86:60:d9:d7:0f:ed:a0:75:5e:5f:73:
d6:95:27:70:5c:e9:26:c7:80:2e:d3:bd:90:33:2c:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:4A:0C:7D:AA:94:BD:1F:C7:6F:64:FA:D6:1C:44:C2:B9:DB:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:47:cd:21:e8:75:3f:ae:6b:d1:e2:e2:63:3b:68:79:0d:93:
7f:1a:64:bb:d3:4d:a2:13:48:98:10:ca:33:47:62:a9:ef:7d:
ab:4c:e7:db:63:6c:b7:e9:07:f8:14:ba:6c:b7:f6:0c:de:94:
d3:c4:2f:c9:fa:0c:74:71:44:76:b3:bb:55:ac:14:a5:89:a0:
37:9b:25:fe:65:45:98:f0:14:56:44:d4:93:da:77:61:fd:2a:
76:68:e5:5a:35:c1:5e:e4:40:ed:ba:d0:50:27:9f:4a:09:5d:
d8:6c:df:ae:f3:a4:79:58:31:e1:97:a0:a5:af:4f:76:5f:34:
cd:c1:cd:b9:e5:45:3d:df:5e:53:7e:6c:98:eb:5b:b9:a2:68:
58:39:2c:fb:2f:ab:f1:c1:b5:a4:ca:2c:fd:ad:3b:5e:87:91:
34:fd:2d:bf:e3:10:6e:ec:0f:bc:ae:f3:6d:9a:0f:18:c0:18:
e6:98:e5:fd:65:40:09:b4:e0:fe:ea:52:9c:86:8b:2d:c4:8c:
13:41:7d:b9:34:ff:eb:89:60:2c:f6:80:2a:ff:9e:f1:ef:ff:
67:c3:b7:8b:c4:fd:d4:d1:92:bd:43:e8:84:8d:46:77:6f:50:
27:0c:85:db:37:62:7b:99:e5:e9:9a:ba:d2:3f:2b:29:e2:99:
2b:97:dd:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoSy+mMO9QREcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZmU5NjM0NjktMjFhNy00ZjQwLWI4YTMtYTRlYjFmYTI0MThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGhu0nLBf5EfeqhYarDouZGmNOfTqo68YGmR
E+oGaNxziU4FYCkCaN4fh0WSyqx1lo4BSjNirKUgVfqHoqEwtnvIloKE9nC+vxex
21Ja6I8Q5Gp/uPYE2sKTjGROwRUbJp1L448eht8yw3ufdSXIVMBcnQmV3FM4RzvB
znnmM0kzPDhxG3UnCFCaepuXQRsnfbrNFNNc04tdxEbppd2Abef3fI6mnfcb+lv6
xPpqyLaS6FtZDLqYBhbwTfo6EjJHoYzx1SdBIJ3fek8ENeg8SVIDGCUIJ5nYnyVs
Efalnt7bhU4phmDZ1w/toHVeX3PWlSdwXOkmx4Au072QMyxlsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJ+Sgx9qpS9H8dvZPrWHETCudtzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ3OTE1ZjItNmE1My0z
ZWRmLThiYzQtYTZmNGRiNWQ5M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFHzSHodT+ua9Hi4mM7aHkNk38aZLvTTaITSJgQyjNHYqnvfatM59tj
bLfpB/gUumy39gzelNPEL8n6DHRxRHazu1WsFKWJoDebJf5lRZjwFFZE1JPad2H9
KnZo5Vo1wV7kQO260FAnn0oJXdhs367zpHlYMeGXoKWvT3ZfNM3BzbnlRT3fXlN+
bJjrW7miaFg5LPsvq/HBtaTKLP2tO16HkTT9Lb/jEG7sD7yu822aDxjAGOaY5f1l
QAm04P7qUpyGiy3EjBNBfbk0/+uJYCz2gCr/nvHv/2fDt4vE/dTRkr1D6ISNRndv
UCcMhds3YnuZ5emautI/KynimSuX3WA=
-----END CERTIFICATE-----
Generated at Thu May 8 07:25:54 2025 by rpki-client