Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
File: 4e14254d-55fc-35e4-8793-8e34aa78e99e.roa (raw, json)
Hash identifier: h/EPnCZGHfsO2U/BHcvqJnH5MJm5ZreFyLtV3bGiNfY=
Subject key identifier: C1:3B:B1:D6:A2:6D:B2:D8:29:C2:08:9D:F1:B1:75:A7:E8:39:E4:3B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858494733ECA701DC638CADDC8128
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 212238
IP address blocks: 172.94.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:ec:a7:01:dc:63:8c:ad:dc:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=401c8d02-ed0b-4cdd-8825-5d95d7fd333b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:cc:d6:b4:9c:8f:a2:b8:16:f8:14:8e:db:
21:79:45:de:7a:e7:18:d6:4a:04:19:ab:54:cb:be:
9f:57:8b:cb:c3:8c:54:fd:c9:b5:99:7e:4f:cb:45:
cb:21:91:74:6c:a9:3e:d5:90:3c:b9:4b:e3:77:7b:
24:66:97:57:a3:14:b9:ad:12:18:94:d4:d5:5e:91:
cb:93:d4:2f:73:0e:39:7a:54:85:7d:4c:a9:48:a1:
42:26:6d:31:d9:7e:83:79:50:0f:38:4e:bc:a1:93:
cc:dc:59:71:49:dc:dd:fb:b6:2d:f1:38:22:c0:4a:
6d:ee:18:9d:49:1e:cb:86:2e:50:15:8d:71:50:d1:
26:94:08:c6:69:90:32:14:23:25:03:b3:bb:a7:b7:
57:a6:76:09:0a:3e:0b:ab:0f:9a:08:57:14:9a:84:
7c:5d:8c:37:ce:54:c0:01:14:89:e1:39:67:7c:85:
61:6d:ff:98:b7:dd:9c:79:a4:2c:31:cf:46:92:56:
6c:55:c3:d2:cd:0a:20:1f:c2:79:df:b5:eb:c9:98:
bd:19:93:5f:0c:06:16:d3:d6:0c:75:83:f3:88:b6:
30:3d:98:46:5c:25:4d:77:8a:e3:a7:c3:2d:a2:a7:
d5:76:aa:0a:47:57:01:bb:24:46:42:04:ca:85:84:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:B1:D6:A2:6D:B2:D8:29:C2:08:9D:F1:B1:75:A7:E8:39:E4:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:31:0d:18:e1:14:c9:aa:c2:e5:aa:66:8d:24:e5:17:42:1a:
13:67:3e:c2:2c:ab:12:c0:df:ad:8e:83:db:4e:86:1f:7a:1b:
93:0a:af:41:38:52:cd:1e:a9:18:5f:3e:55:d3:fc:f7:80:2a:
36:ec:42:72:ef:a7:66:07:42:78:72:21:37:ce:47:78:8a:60:
34:77:41:26:7f:cc:66:2c:5b:09:c9:d8:96:62:9a:0f:b5:f4:
0b:ee:35:78:f3:ed:4e:fe:58:e0:05:4b:46:24:25:bc:7d:9d:
0a:73:c8:25:0e:db:71:a8:b0:b1:bf:d4:f2:20:97:14:d2:bb:
db:8e:d0:14:90:b3:b6:77:9f:01:50:a7:b1:e5:3c:12:b0:ba:
b7:ce:a4:8b:24:12:3c:2d:7e:ec:c4:8f:58:5d:18:ca:3b:de:
3f:2e:f8:86:f3:88:6d:9e:32:8c:04:0b:9c:8d:7c:59:6d:1a:
d3:f1:08:7e:32:a6:e1:15:04:f4:bb:99:00:b6:5b:5d:87:40:
83:64:fe:62:30:fd:6f:be:19:6a:15:5f:77:93:96:53:10:63:
98:01:c2:b4:ac:17:13:1e:5f:9c:f8:64:f6:c0:2a:ad:01:f8:
bc:8e:59:6c:3a:86:3f:6f:b9:2b:c9:8a:dd:4e:e2:2b:fb:2e:
c2:a1:f5:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+ynAdxjjK3cgSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
NDAxYzhkMDItZWQwYi00Y2RkLTg4MjUtNWQ5NWQ3ZmQzMzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvM1rScj6K4FvgUjtsheUXeeucY1koEGatU
y76fV4vLw4xU/cm1mX5Py0XLIZF0bKk+1ZA8uUvjd3skZpdXoxS5rRIYlNTVXpHL
k9Qvcw45elSFfUypSKFCJm0x2X6DeVAPOE68oZPM3FlxSdzd+7Yt8TgiwEpt7hid
SR7Lhi5QFY1xUNEmlAjGaZAyFCMlA7O7p7dXpnYJCj4Lqw+aCFcUmoR8XYw3zlTA
ARSJ4TlnfIVhbf+Yt92ceaQsMc9GklZsVcPSzQogH8J537XryZi9GZNfDAYW09YM
dYPziLYwPZhGXCVNd4rjp8MtoqfVdqoKR1cBuyRGQgTKhYRGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFME7sdaibbLYKcIInfGxdafoOeQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGUxNDI1NGQtNTVmYy0z
NWU0LTg3OTMtOGUzNGFhNzhlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYxDRjhFMmqwuWqZo0k5RdCGhNnPsIsqxLA362Og9tOhh96G5MKr0E4
Us0eqRhfPlXT/PeAKjbsQnLvp2YHQnhyITfOR3iKYDR3QSZ/zGYsWwnJ2JZimg+1
9AvuNXjz7U7+WOAFS0YkJbx9nQpzyCUO23GosLG/1PIglxTSu9uO0BSQs7Z3nwFQ
p7HlPBKwurfOpIskEjwtfuzEj1hdGMo73j8u+IbziG2eMowEC5yNfFltGtPxCH4y
puEVBPS7mQC2W12HQINk/mIw/W++GWoVX3eTllMQY5gBwrSsFxMeX5z4ZPbAKq0B
+LyOWWw6hj9vuSvJit1O4iv7LsKh9SQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:25 2025 by rpki-client