Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
File: 2580fcf7-f952-3b13-8c40-9f20098d0edb.roa (raw, json)
Hash identifier: p5BoxzLDF+J+Ebe3UCZMBLx/MAqngePkRnfdqXnXEuk=
Subject key identifier: DA:EF:02:03:00:39:32:34:E8:18:05:B6:B9:D4:02:B6:8F:B4:23:02
Certificate issuer: /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial: 010D0C9F4328584953C40839EF614923CF402160
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 47050
IP address blocks: 173.224.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:08:39:ef:61:49:23:cf:40:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=39f9e361-12df-40ef-b1fc-0cd5743282ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:47:5f:98:e2:61:91:8c:dd:e0:51:bb:2b:
a0:ef:81:4d:3e:31:2b:d8:94:9e:cd:99:5a:e3:8e:
2a:30:6f:1e:48:77:a5:c9:4f:e4:c8:06:76:a1:04:
ad:8e:e8:03:71:bf:71:0b:03:b5:28:a4:4d:9d:27:
91:67:53:70:5a:24:3d:03:83:84:3b:ac:f4:b5:39:
ad:de:4d:13:17:32:d9:ea:8a:7d:5c:68:0d:11:1a:
bf:4f:32:28:7a:79:83:f7:ea:50:5b:6a:83:35:24:
48:12:c1:c8:b9:53:10:aa:cc:6a:ca:ca:64:01:f6:
70:56:5a:fd:12:0c:73:2b:ae:1c:d5:13:ad:7c:41:
27:af:38:0c:8f:a2:07:2c:fd:ff:86:24:5d:e0:60:
d6:ae:f6:6f:ce:f0:f2:0b:52:0f:95:5a:41:10:8d:
aa:bf:53:03:1c:f6:a1:19:28:17:17:42:d6:1d:54:
02:17:fa:6c:97:d4:29:a4:5d:00:fa:ad:a0:1d:60:
f2:d5:cd:67:1c:51:16:e7:0c:ff:73:1e:f9:73:dd:
8b:12:d2:12:64:2e:5f:e8:f8:e8:a0:0b:27:74:e2:
c0:83:a2:2b:df:ed:95:e7:b2:30:ed:b2:01:ee:d8:
4c:f0:91:b4:77:ef:b7:d3:c5:37:9a:54:6a:91:fe:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:02:03:00:39:32:34:E8:18:05:B6:B9:D4:02:B6:8F:B4:23:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
X509v3 Authority Key Identifier:
keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
sbgp-ipAddrBlock: critical
IPv4:
173.224.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:08:91:07:e2:5a:5f:a0:3d:95:70:a0:8d:ef:f0:01:3c:55:
03:31:fa:42:8b:bf:fe:d1:ea:0c:29:56:76:83:8f:10:c6:9d:
96:72:b2:f9:32:17:27:8b:ff:44:31:20:05:5a:a1:5f:22:31:
8e:4e:11:32:23:51:ec:75:da:52:d5:fc:a3:7a:31:b5:c5:80:
53:0b:53:85:27:8a:54:1b:26:74:7b:45:d4:41:bc:67:91:2f:
19:fe:50:bd:09:3d:c9:fa:e9:a3:25:10:2a:03:94:78:0d:aa:
f5:79:be:3c:e1:e9:e4:64:86:9d:83:5b:14:98:83:97:9d:d3:
cd:9f:5a:bb:99:ae:d2:a0:df:00:5b:05:01:72:f2:8a:92:3c:
d8:2b:00:1e:01:2b:30:c6:64:08:2b:47:70:70:a4:88:03:55:
63:65:6d:7b:e8:52:de:9c:36:75:c1:22:a5:a8:88:aa:46:36:
d8:5c:9b:d2:9d:f7:d1:a9:7e:cb:ad:16:95:88:45:b5:d3:0e:
64:c5:12:9a:3c:f5:f2:48:ec:ef:b0:6f:eb:fc:54:29:43:38:
6d:74:b2:02:ac:ab:53:5b:ca:55:7e:c1:6d:e0:28:60:9b:cf:
6f:fe:54:78:bb:6f:1a:fe:bf:40:76:69:1d:89:15:5d:49:8f:
d6:6a:9f:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAg572FJI89AIWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzlmOWUzNjEtMTJkZi00MGVmLWIxZmMtMGNkNTc0MzI4MmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjlHX5jiYZGM3eBRuyug74FNPjEr2JSezZla
444qMG8eSHelyU/kyAZ2oQStjugDcb9xCwO1KKRNnSeRZ1NwWiQ9A4OEO6z0tTmt
3k0TFzLZ6op9XGgNERq/TzIoenmD9+pQW2qDNSRIEsHIuVMQqsxqyspkAfZwVlr9
EgxzK64c1ROtfEEnrzgMj6IHLP3/hiRd4GDWrvZvzvDyC1IPlVpBEI2qv1MDHPah
GSgXF0LWHVQCF/psl9QppF0A+q2gHWDy1c1nHFEW5wz/cx75c92LEtISZC5f6Pjo
oAsndOLAg6Ir3+2V57Iw7bIB7thM8JG0d++308U3mlRqkf6nSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrvAgMAOTI06BgFtrnUAraPtCMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvMjU4MGZjZjctZjk1Mi0z
YjEzLThjNDAtOWYyMDA5OGQwZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreBWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsIkQfiWl+gPZVwoI3v8AE8VQMx+kKLv/7R6gwpVnaDjxDGnZZysvky
FyeL/0QxIAVaoV8iMY5OETIjUex12lLV/KN6MbXFgFMLU4UnilQbJnR7RdRBvGeR
Lxn+UL0JPcn66aMlECoDlHgNqvV5vjzh6eRkhp2DWxSYg5ed082fWruZrtKg3wBb
BQFy8oqSPNgrAB4BKzDGZAgrR3BwpIgDVWNlbXvoUt6cNnXBIqWoiKpGNthcm9Kd
99GpfsutFpWIRbXTDmTFEpo89fJI7O+wb+v8VClDOG10sgKsq1NbylV+wW3gKGCb
z2/+VHi7bxr+v0B2aR2JFV1Jj9Zqnz4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:18 2025 by rpki-client