Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc46a428-971a-3bdc-b2cf-145da9889b66.roa
File: fc46a428-971a-3bdc-b2cf-145da9889b66.roa (raw, json)
Hash identifier: rgbq6Q9ONxQbimNAj8MnNrdd+j++VXqkq0zFUsVNfog=
Subject key identifier: 53:98:67:B5:B6:7E:06:5F:4C:19:25:CA:EA:07:87:37:DA:ED:4F:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9D7868EE142F74F6DC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc46a428-971a-3bdc-b2cf-145da9889b66.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 36183
IP address blocks: 172.226.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9d:78:68:ee:14:2f:74:f6:dc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=741420c4-9f76-4f0a-a536-d50fc6a89b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:ab:17:e8:b3:c2:f1:02:09:0c:75:c9:a6:
41:38:80:13:6c:c4:8a:8e:af:3f:bb:10:be:b6:6e:
1f:39:f7:34:8a:c7:a4:b8:24:cd:d2:c6:47:33:dc:
f6:05:71:69:d3:5c:0a:b3:0d:5a:48:ce:66:e9:c0:
43:6f:fb:c9:7b:6a:ac:40:c3:eb:de:c8:96:da:1e:
ac:6b:26:23:d9:ef:1d:6c:67:db:b7:24:a9:fa:18:
5b:de:7b:9f:e8:be:20:6a:79:ce:02:9c:ae:fe:42:
25:07:47:92:1c:24:d4:91:c3:14:9a:af:59:91:c1:
ba:5a:72:7c:73:d9:9d:0e:c8:51:8f:b8:9f:2c:a9:
4a:f4:eb:a4:c7:5b:0d:a0:15:3e:39:11:5f:b7:35:
32:b1:47:4d:4a:73:8e:93:5a:e9:4a:c8:55:a3:81:
e8:82:dd:93:96:01:59:fb:26:2e:3b:7c:b8:3d:f0:
da:69:b2:29:0d:a5:e2:d3:53:46:e0:a4:b2:b3:1b:
89:46:35:01:a9:fc:59:1d:bb:8a:7e:a6:82:2f:34:
07:68:3c:fd:37:ef:50:48:40:fb:93:63:10:67:fe:
7a:0f:ec:bc:25:ff:21:9f:1b:e6:c9:d8:23:52:79:
e3:f6:fe:48:60:00:72:4d:24:42:4e:59:33:e7:58:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:67:B5:B6:7E:06:5F:4C:19:25:CA:EA:07:87:37:DA:ED:4F:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc46a428-971a-3bdc-b2cf-145da9889b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:56:e6:b4:aa:70:88:95:fa:0f:a5:e9:62:6c:03:7d:fe:61:
85:20:3b:21:37:7e:01:07:56:63:94:27:d9:27:f3:78:c5:22:
33:b1:b9:3c:b9:f9:ac:62:9a:1f:19:c2:a2:1e:9a:79:11:b1:
82:75:9a:0c:6e:db:2f:2e:4f:e6:14:9d:29:1e:9e:b8:c0:b0:
3f:ea:e7:ef:ab:e2:ee:79:c5:71:7e:27:df:a3:8f:88:46:8d:
3c:04:b6:50:69:c1:49:ef:0a:04:6f:25:48:4d:6e:05:a6:3e:
5e:b7:0c:8e:19:be:5a:06:9e:b1:0d:ea:e8:a9:c4:cf:ec:3a:
69:6f:23:c5:fa:0a:c9:95:f4:a0:7e:52:93:ab:b0:70:86:eb:
6f:ea:df:48:72:f5:ee:31:41:53:63:4c:9c:73:5e:2b:59:df:
07:8a:bb:4a:90:a1:f6:27:54:ca:4d:c2:23:f0:6c:3c:4c:50:
e9:0a:fe:a6:2d:9c:d4:8f:58:69:51:be:20:74:da:b7:82:0c:
30:98:07:03:9f:09:26:82:4e:5c:c4:c2:08:79:6c:f6:13:0c:
99:14:04:8b:df:03:27:f2:ae:cd:ce:95:31:1a:91:7e:39:c3:
25:c5:e6:48:1f:e5:1f:d5:48:e9:32:87:61:46:3d:22:d1:b6:
5c:09:a1:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCp14aO4UL3T23EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
NzQxNDIwYzQtOWY3Ni00ZjBhLWE1MzYtZDUwZmM2YTg5YjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5+rF+izwvECCQx1yaZBOIATbMSKjq8/uxC+
tm4fOfc0isekuCTN0sZHM9z2BXFp01wKsw1aSM5m6cBDb/vJe2qsQMPr3siW2h6s
ayYj2e8dbGfbtySp+hhb3nuf6L4gannOApyu/kIlB0eSHCTUkcMUmq9ZkcG6WnJ8
c9mdDshRj7ifLKlK9Oukx1sNoBU+ORFftzUysUdNSnOOk1rpSshVo4Hogt2TlgFZ
+yYuO3y4PfDaabIpDaXi01NG4KSysxuJRjUBqfxZHbuKfqaCLzQHaDz9N+9QSED7
k2MQZ/56D+y8Jf8hnxvmydgjUnnj9v5IYAByTSRCTlkz51jV0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOYZ7W2fgZfTBklyuoHhzfa7U9eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmM0NmE0MjgtOTcxYS0z
YmRjLWIyY2YtMTQ1ZGE5ODg5YjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9W5rSqcIiV+g+l6WJsA33+YYUgOyE3fgEHVmOUJ9kn83jFIjOxuTy5
+aximh8ZwqIemnkRsYJ1mgxu2y8uT+YUnSkenrjAsD/q5++r4u55xXF+J9+jj4hG
jTwEtlBpwUnvCgRvJUhNbgWmPl63DI4ZvloGnrEN6uipxM/sOmlvI8X6CsmV9KB+
UpOrsHCG62/q30hy9e4xQVNjTJxzXitZ3weKu0qQofYnVMpNwiPwbDxMUOkK/qYt
nNSPWGlRviB02reCDDCYBwOfCSaCTlzEwgh5bPYTDJkUBIvfAyfyrs3OlTEakX45
wyXF5kgf5R/VSOkyh2FGPSLRtlwJoc0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:29 2025 by rpki-client