Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00fc0ab9-d350-395c-8d10-61ea9182702a.roa
File: 00fc0ab9-d350-395c-8d10-61ea9182702a.roa (raw, json)
Hash identifier: KRCWoxhs7lO4bHv9ZBkzrGZJ/ij4bmXbJh6yDxJ2um4=
Subject key identifier: 5A:8C:82:14:DA:CD:AD:B1:95:D9:71:5A:E9:14:FC:A1:C2:B4:3E:A0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494A990CE764487C322B13A280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00fc0ab9-d350-395c-8d10-61ea9182702a.roa
Signing time: Mon 24 Mar 2025 06:12:01 +0000
ROA not before: Mon 24 Mar 2025 06:12:01 +0000
ROA not after: Sun 22 Jun 2025 06:12:01 +0000
asID: 329007
IP address blocks: 206.123.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4a:99:0c:e7:64:48:7c:32:2b:13:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 24 06:12:01 2025 GMT
Not After : Jun 22 06:12:01 2025 GMT
Subject: CN=9099a2d4-00b3-4ec1-908b-e03d873c5374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:50:bc:c5:74:bf:6b:eb:8c:b3:80:7a:f1:
e6:9a:6e:c2:f2:24:ba:ec:1a:bd:21:1d:3b:3e:a4:
49:52:63:16:e2:22:17:24:b5:1c:8e:c8:0e:a5:96:
06:cc:ab:b9:95:fb:8a:f6:48:fb:d8:c2:df:7e:7a:
81:21:ef:b7:7d:ff:d7:d6:25:4d:ac:d0:f6:5d:63:
8b:fb:c4:03:d1:36:29:f2:f2:03:68:02:ac:3f:4e:
9a:f0:29:0f:bb:9f:47:50:2b:bf:13:a8:b4:c7:bc:
55:cf:33:33:5f:02:8d:50:eb:5a:19:d7:1b:27:61:
35:d5:70:a9:d1:7a:62:1f:96:2e:65:41:fa:3f:27:
c0:d6:b9:bd:aa:dc:8f:ba:33:0d:5d:fe:d1:9a:7d:
bd:88:21:58:32:4a:ab:0d:a8:f1:c1:4f:fd:cf:d8:
e2:8a:46:25:0b:27:ce:3f:02:ba:d6:60:6e:10:d5:
c9:bc:fe:4a:78:21:e3:69:c1:bb:9e:d6:d0:13:87:
84:80:63:0e:fd:5f:5e:7a:85:23:9d:29:5e:0e:f4:
4e:b1:92:e6:9d:91:b1:5c:d4:b8:0a:4d:2d:60:e3:
81:15:e4:c3:44:51:b2:c5:ed:0c:c7:d2:8e:6d:25:
a8:b9:e4:af:6f:c5:9c:08:66:8a:56:c6:0c:6a:98:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:82:14:DA:CD:AD:B1:95:D9:71:5A:E9:14:FC:A1:C2:B4:3E:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00fc0ab9-d350-395c-8d10-61ea9182702a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:17:e9:ce:c6:12:1b:59:64:79:83:5c:42:ba:67:0a:e3:ec:
2f:87:f1:d0:ed:7a:38:5d:a9:4c:b3:6a:b0:d7:da:f5:b2:04:
1b:74:b7:31:b5:27:b6:de:f2:a8:d2:39:79:5b:5d:f4:74:8d:
c5:90:98:eb:ec:ed:5c:d1:45:10:4d:45:27:6c:f3:0f:87:58:
a2:d5:1f:e5:d6:40:d9:20:9b:83:71:6c:5e:2c:64:8f:98:85:
90:d1:2a:cd:0f:e0:09:83:4c:ae:2f:79:95:52:0e:72:43:f5:
cb:69:df:2a:ad:c0:3d:17:69:54:1d:09:8d:34:5a:de:0e:87:
87:f4:1f:92:3c:39:16:e6:58:7c:44:62:d4:10:bf:26:53:5f:
c2:12:b7:83:d6:8b:45:a0:a0:c5:67:82:5c:67:cd:51:1f:d2:
10:92:54:c6:e9:2d:f3:7f:b6:8d:f6:04:4f:78:54:ff:18:11:
f5:fb:ed:b9:95:21:1b:a8:b1:55:92:a0:6c:82:2f:0b:36:0a:
0c:60:cf:5f:95:b4:e4:d9:39:d2:81:ec:31:5b:b0:e1:68:23:
cd:d7:18:90:f0:8f:fa:e8:30:3a:8d:e4:b7:c1:5a:71:d5:88:
72:27:f5:1f:7e:57:d3:7e:28:3c:d1:74:cc:d6:3b:99:3a:45:
6f:f1:5c:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElKmQznZEh8MisTooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMyNDA2MTIwMVoXDTI1MDYyMjA2MTIwMVowLzEtMCsGA1UEAxMk
OTA5OWEyZDQtMDBiMy00ZWMxLTkwOGItZTAzZDg3M2M1Mzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw01QvMV0v2vrjLOAevHmmm7C8iS67Bq9IR07
PqRJUmMW4iIXJLUcjsgOpZYGzKu5lfuK9kj72MLffnqBIe+3ff/X1iVNrND2XWOL
+8QD0TYp8vIDaAKsP06a8CkPu59HUCu/E6i0x7xVzzMzXwKNUOtaGdcbJ2E11XCp
0XpiH5YuZUH6PyfA1rm9qtyPujMNXf7Rmn29iCFYMkqrDajxwU/9z9jiikYlCyfO
PwK61mBuENXJvP5KeCHjacG7ntbQE4eEgGMO/V9eeoUjnSleDvROsZLmnZGxXNS4
Ck0tYOOBFeTDRFGyxe0Mx9KObSWoueSvb8WcCGaKVsYMapjHMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqMghTaza2xldlxWukU/KHCtD6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDBmYzBhYjktZDM1MC0z
OTVjLThkMTAtNjFlYTkxODI3MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznucMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEX6c7GEhtZZHmDXEK6Zwrj7C+H8dDtejhdqUyzarDX2vWyBBt0tzG1
J7be8qjSOXlbXfR0jcWQmOvs7VzRRRBNRSds8w+HWKLVH+XWQNkgm4NxbF4sZI+Y
hZDRKs0P4AmDTK4veZVSDnJD9ctp3yqtwD0XaVQdCY00Wt4Oh4f0H5I8ORbmWHxE
YtQQvyZTX8ISt4PWi0WgoMVnglxnzVEf0hCSVMbpLfN/to32BE94VP8YEfX77bmV
IRuosVWSoGyCLws2Cgxgz1+VtOTZOdKB7DFbsOFoI83XGJDwj/roMDqN5LfBWnHV
iHIn9R9+V9N+KDzRdMzWO5k6RW/xXK0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:50 2025 by rpki-client