Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a2aff32-c4b8-39f6-bc01-b21822007671.roa
File: 5a2aff32-c4b8-39f6-bc01-b21822007671.roa (raw, json)
Hash identifier: ishEPZsOvQfBVHm5gTNUvFIkTcBgZVJlhpbm+sj21J8=
Subject key identifier: 8A:43:4A:72:95:4F:1A:9A:07:4A:E8:0C:2B:A7:DC:9D:F5:0B:7F:FE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6CA66E14B044F63957D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a2aff32-c4b8-39f6-bc01-b21822007671.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 21552
IP address blocks: 206.172.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:ca:66:e1:4b:04:4f:63:95:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=ade2b93a-b9b8-4a19-ad02-85db26737580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:f6:49:c4:39:80:ed:87:64:ee:ee:db:d6:
b7:cf:c3:35:fe:43:cc:ba:bb:45:83:df:cd:c8:27:
2c:05:d8:ff:ba:79:26:cf:93:f8:a8:fd:e9:5c:d3:
b4:f3:78:6f:2c:e2:8e:fd:15:7f:73:73:7b:78:45:
d5:01:05:86:d3:71:5b:0f:3d:b3:11:0e:cb:de:8b:
e5:e2:21:44:5e:06:d3:58:c5:3b:87:51:b8:ba:50:
a6:24:c0:cf:f2:f7:df:da:9e:88:c8:82:62:58:61:
1d:79:34:b0:60:b8:07:c9:c0:f0:5f:98:b8:5b:c6:
6c:73:5b:a2:2a:ce:f0:16:03:6c:2b:92:73:40:cd:
86:88:50:08:94:98:2a:77:6b:db:87:e9:48:1d:51:
ef:0f:68:be:d3:13:f4:3f:ed:dc:bf:9a:71:c2:e6:
f4:68:26:fe:54:96:bd:c2:fa:72:4e:b3:b4:99:b2:
6c:0f:01:a9:89:b7:6e:6e:46:31:35:7f:5d:36:f7:
38:38:6f:ac:99:7f:6b:b9:ad:eb:a8:93:d3:dc:23:
ea:80:ae:0d:50:d4:72:e4:35:91:f4:8d:16:22:87:
d4:45:a8:ac:29:55:1c:f1:09:92:43:be:a6:0c:ec:
d9:ee:9d:d7:f0:5f:bd:95:2d:f7:e7:05:70:a4:0b:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:4A:72:95:4F:1A:9A:07:4A:E8:0C:2B:A7:DC:9D:F5:0B:7F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a2aff32-c4b8-39f6-bc01-b21822007671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b3:10:94:70:73:ea:61:8d:af:e5:8d:b7:25:c5:75:75:a4:
90:2c:e5:53:8e:08:b9:53:82:54:6b:d0:51:b7:f7:fd:ff:d3:
c5:14:eb:27:55:69:19:7e:8d:b6:a5:31:9f:9a:19:22:0d:1d:
5b:d3:cf:03:2c:d8:3f:26:c3:5c:45:96:fc:89:fd:68:38:3f:
e8:84:8c:71:90:cf:c8:99:a0:12:84:55:b7:83:3b:2a:f4:bf:
4d:4d:43:d5:d9:8a:70:f6:7b:35:a2:3d:a8:0d:97:af:71:5e:
32:f8:9e:b9:c0:4f:01:6c:bf:32:f6:64:97:c0:f8:62:59:fa:
2d:20:77:55:1c:08:b9:98:f0:2b:09:d1:6e:90:0a:4a:82:19:
cc:50:47:5e:4d:de:94:55:9a:e2:22:2f:54:90:ec:d7:a4:40:
8e:37:9f:c2:20:d2:1e:5b:c3:ac:1c:b2:53:29:00:8e:e4:c7:
ce:95:93:e4:ea:cd:e7:81:69:24:ac:49:f7:12:4c:4f:cb:65:
8e:57:aa:b0:d5:38:2d:de:de:95:4a:8b:b9:25:70:5b:00:1e:
08:ee:e5:81:00:12:66:ee:26:bd:36:39:4d:eb:a7:e2:11:be:
0a:1c:15:af:4b:b8:d9:84:d4:d7:9b:bc:c5:09:27:bc:0d:ea:
d0:0d:ae:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtspm4UsET2OVfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWRlMmI5M2EtYjliOC00YTE5LWFkMDItODVkYjI2NzM3NTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt32ScQ5gO2HZO7u29a3z8M1/kPMurtFg9/N
yCcsBdj/unkmz5P4qP3pXNO083hvLOKO/RV/c3N7eEXVAQWG03FbDz2zEQ7L3ovl
4iFEXgbTWMU7h1G4ulCmJMDP8vff2p6IyIJiWGEdeTSwYLgHycDwX5i4W8Zsc1ui
Ks7wFgNsK5JzQM2GiFAIlJgqd2vbh+lIHVHvD2i+0xP0P+3cv5pxwub0aCb+VJa9
wvpyTrO0mbJsDwGpibdubkYxNX9dNvc4OG+smX9rua3rqJPT3CPqgK4NUNRy5DWR
9I0WIofURaisKVUc8QmSQ76mDOzZ7p3X8F+9lS335wVwpAsW7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpDSnKVTxqaB0roDCun3J31C3/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWEyYWZmMzItYzRiOC0z
OWY2LWJjMDEtYjIxODIyMDA3NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2zEJRwc+phja/ljbclxXV1pJAs5VOOCLlTglRr0FG39/3/08UU6ydV
aRl+jbalMZ+aGSINHVvTzwMs2D8mw1xFlvyJ/Wg4P+iEjHGQz8iZoBKEVbeDOyr0
v01NQ9XZinD2ezWiPagNl69xXjL4nrnATwFsvzL2ZJfA+GJZ+i0gd1UcCLmY8CsJ
0W6QCkqCGcxQR15N3pRVmuIiL1SQ7NekQI43n8Ig0h5bw6wcslMpAI7kx86Vk+Tq
zeeBaSSsSfcSTE/LZY5XqrDVOC3e3pVKi7klcFsAHgju5YEAEmbuJr02OU3rp+IR
vgocFa9LuNmE1NebvMUJJ7wN6tANriU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:29 2025 by rpki-client