Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe0fb0e-3f6e-3a87-b42c-7b0e6d1be728.roa
File: ffe0fb0e-3f6e-3a87-b42c-7b0e6d1be728.roa (raw, json)
Hash identifier: JzvosoX5Z+06qIfNJBOsGOl2jQ3aup2bO7EceAJrNhU=
Subject key identifier: B1:49:87:9C:98:3A:14:42:0D:22:54:BD:00:C5:93:6E:04:05:C3:CF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AAF6446A42932587C6780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe0fb0e-3f6e-3a87-b42c-7b0e6d1be728.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 20940
IP address blocks: 173.222.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:af:64:46:a4:29:32:58:7c:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=1401568b-cb07-4130-9b8c-c55b6b94c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:e7:f1:03:7f:11:57:a9:b7:bc:76:52:29:
91:93:eb:f1:9f:89:22:3a:6a:57:70:f9:a2:21:d2:
8a:00:bf:7e:8f:2a:63:00:51:ba:b7:c6:47:2d:4c:
7c:9e:90:ad:63:b1:ff:f2:94:85:a6:56:bb:0b:5e:
58:90:6a:c1:43:ac:05:ae:b8:ab:e8:24:fb:fe:df:
3b:98:8c:b1:64:d8:f4:74:a6:6a:5c:97:dd:21:02:
e3:c0:bd:ef:71:0b:37:60:c3:69:66:32:8a:ac:3f:
1d:71:71:e2:d0:da:c3:44:a3:41:84:d4:bb:7f:33:
42:cf:d5:56:a3:82:9d:8a:d0:b6:3b:d9:56:f1:d1:
f9:20:1b:0b:9a:c6:cb:7c:ba:a1:8d:44:36:6d:dc:
56:11:d8:06:06:67:25:1b:32:28:30:c4:97:ac:7e:
fc:50:7d:32:fe:f8:04:5e:70:3e:82:ea:b5:55:31:
cb:39:30:d2:e1:9c:ee:f0:57:63:fb:2b:e7:cb:ca:
bb:6c:9d:64:52:84:2d:5b:7a:e0:a4:e3:95:f4:4b:
0b:9a:c2:d8:83:cc:13:3f:39:87:a5:e2:ab:9b:44:
69:d8:dc:63:27:7f:11:92:de:b5:17:15:3d:9b:f1:
f7:b6:7e:b3:59:b1:4e:6c:22:69:13:f2:8b:26:26:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:87:9C:98:3A:14:42:0D:22:54:BD:00:C5:93:6E:04:05:C3:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffe0fb0e-3f6e-3a87-b42c-7b0e6d1be728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:80:4d:33:fe:08:19:b2:b4:68:0d:da:2c:78:58:8f:5f:2a:
a0:bd:7b:3b:38:c9:22:5c:7e:22:85:1e:e4:c7:71:e2:3e:49:
7e:6d:d5:73:49:12:7c:b1:c1:f9:df:38:9a:00:c5:d4:31:a4:
4d:d6:71:69:99:9a:77:39:91:8b:b7:17:d4:b8:5c:f8:f9:a9:
40:de:e6:5e:48:5c:92:3b:97:9f:0c:4d:3b:c1:93:c7:9e:be:
6f:2c:5d:f3:ba:98:91:90:a5:d9:8b:c9:0d:1c:50:86:0d:a6:
b1:49:2a:93:5f:f2:1c:a0:b4:e7:d9:49:fc:dc:a6:bc:cf:82:
8b:91:12:a8:95:81:91:d0:0f:86:f8:c3:14:32:3d:6b:07:42:
c4:1d:a9:1e:a5:d6:de:c2:6c:b5:c7:0e:6c:49:30:6d:c7:cc:
44:1e:0a:9a:e1:7e:d7:0b:fb:74:66:48:59:7a:6b:3b:80:26:
9c:19:0f:da:ba:6f:4d:16:d7:a9:d7:42:1f:64:9b:e1:0c:d5:
5b:a2:a9:8d:93:d0:a8:70:d5:1b:b0:79:35:dd:28:63:41:9e:
60:a6:6f:e5:46:a5:73:09:5b:39:93:45:13:71:55:9e:46:33:
86:a3:79:61:d8:b7:60:56:d1:4a:91:d0:bb:0e:0e:f9:40:99:
8c:88:81:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgxiq9kRqQpMlh8Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMzE0MDA1MFoXDTI1MDMxMzEzMDA1MFowLzEtMCsGA1UEAxMk
MTQwMTU2OGItY2IwNy00MTMwLTliOGMtYzU1YjZiOTRjNGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgnn8QN/EVept7x2UimRk+vxn4kiOmpXcPmi
IdKKAL9+jypjAFG6t8ZHLUx8npCtY7H/8pSFpla7C15YkGrBQ6wFrrir6CT7/t87
mIyxZNj0dKZqXJfdIQLjwL3vcQs3YMNpZjKKrD8dcXHi0NrDRKNBhNS7fzNCz9VW
o4KditC2O9lW8dH5IBsLmsbLfLqhjUQ2bdxWEdgGBmclGzIoMMSXrH78UH0y/vgE
XnA+guq1VTHLOTDS4Zzu8Fdj+yvny8q7bJ1kUoQtW3rgpOOV9EsLmsLYg8wTPzmH
peKrm0Rp2NxjJ38Rkt61FxU9m/H3tn6zWbFObCJpE/KLJiZOoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFJh5yYOhRCDSJUvQDFk24EBcPPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmZlMGZiMGUtM2Y2ZS0z
YTg3LWI0MmMtN2IwZTZkMWJlNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrd7QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2ATTP+CBmytGgN2ix4WI9fKqC9ezs4ySJcfiKFHuTHceI+SX5t1XNJ
EnyxwfnfOJoAxdQxpE3WcWmZmnc5kYu3F9S4XPj5qUDe5l5IXJI7l58MTTvBk8ee
vm8sXfO6mJGQpdmLyQ0cUIYNprFJKpNf8hygtOfZSfzcprzPgouREqiVgZHQD4b4
wxQyPWsHQsQdqR6l1t7CbLXHDmxJMG3HzEQeCprhftcL+3RmSFl6azuAJpwZD9q6
b00W16nXQh9km+EM1VuiqY2T0Khw1RuweTXdKGNBnmCmb+VGpXMJWzmTRRNxVZ5G
M4ajeWHYt2BW0UqR0LsODvlAmYyIgWY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:49 2025 by rpki-client