Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa
File: bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa (raw, json)
Hash identifier: G5RM/jRHquWcQEkNghB8gmJHuxKE/2P2oWlBl8A+b4A=
Subject key identifier: DC:2D:84:DC:F3:01:80:14:EC:3F:CD:02:92:4F:51:E2:8B:1A:45:06
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584930DE77D1BDB68C8501E7F080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 9009
IP address blocks: 172.94.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:77:d1:bd:b6:8c:85:01:e7:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=53162c31-c1c6-49f5-ad02-46fea540e569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:75:08:1d:fc:a8:28:c1:b8:0d:09:95:6b:
bd:cc:12:6c:01:ce:17:4f:87:84:28:e4:4a:68:08:
d1:57:53:a6:05:a5:ae:77:91:02:29:d7:69:3c:ab:
c7:f1:b2:36:3b:51:2c:f4:5c:b0:67:74:31:73:9a:
03:e7:d3:04:90:c6:95:c3:b6:21:83:ed:be:f5:ba:
83:4d:66:56:26:8d:74:c6:87:05:27:9a:ee:f8:aa:
be:82:e7:8f:ad:ce:87:4f:c1:4f:c8:46:26:f2:c1:
0f:58:5f:8f:89:a4:b7:b2:8f:d8:e7:d9:36:bb:8d:
2d:68:9d:3b:ea:a9:8e:da:cf:cb:1e:f4:a3:b4:b1:
10:ec:b1:e7:94:57:b8:fd:a6:aa:53:78:4d:eb:f7:
b3:c9:5f:a9:ca:6c:3d:66:4d:3b:3a:96:2a:04:04:
19:03:9c:29:36:fd:24:70:d1:7c:2a:10:3e:71:50:
c7:37:7d:67:8f:79:56:e3:da:5b:ce:7b:a9:8c:c7:
1c:6f:65:ea:3d:5f:36:4a:43:08:de:48:f2:4d:99:
9a:99:d6:53:0a:e9:f0:ed:a0:c7:34:c3:85:a6:16:
47:ac:73:99:1d:28:e4:01:fd:df:d0:fb:36:7a:98:
08:93:e1:3a:ba:29:76:ce:e1:1f:8d:0e:18:29:c0:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:84:DC:F3:01:80:14:EC:3F:CD:02:92:4F:51:E2:8B:1A:45:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:32:e6:dd:0d:bc:cf:d5:ca:ac:52:15:9d:a8:65:3d:5a:24:
d9:4a:a4:03:8a:15:8a:ef:b2:cc:20:43:62:8d:11:4e:ed:f8:
e0:da:14:6a:0a:b8:20:08:c9:cf:9e:98:a8:4a:e5:d1:55:cb:
3a:39:3b:ca:79:36:21:0d:59:ae:4b:d9:99:3c:32:9e:99:37:
71:09:ff:4a:7c:de:17:ad:06:8d:50:48:5b:9f:b9:0e:28:1c:
b0:52:09:4d:65:82:52:4a:c3:8f:e6:3b:83:30:f1:10:4d:6b:
c7:38:b4:97:ef:12:39:71:32:9a:f5:5a:5c:f4:71:f5:6a:2f:
73:e6:34:48:15:c7:1a:10:4f:8b:d7:c3:d1:79:93:e9:44:82:
87:29:63:e4:7e:ad:08:44:a8:b1:54:68:81:42:31:1d:75:a2:
ec:e2:dc:8e:10:07:e6:9b:ac:6e:2f:3d:6f:36:3c:1c:5e:36:
48:3b:9c:00:cf:d3:0e:43:f2:5f:dd:4a:4d:54:b8:31:58:d2:
12:39:ce:ad:43:4b:05:96:05:60:b2:68:8f:ae:87:67:c1:43:
96:7f:08:39:aa:53:46:0d:b1:a9:72:8f:9d:e9:50:92:63:92:
1e:8e:50:41:88:f4:cf:5c:a0:06:cb:6f:9f:d7:b0:e0:51:ab:
83:75:4a:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nfRvbaMhQHn8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NTMxNjJjMzEtYzFjNi00OWY1LWFkMDItNDZmZWE1NDBlNTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A51CB38qCjBuA0JlWu9zBJsAc4XT4eEKORK
aAjRV1OmBaWud5ECKddpPKvH8bI2O1Es9FywZ3Qxc5oD59MEkMaVw7Yhg+2+9bqD
TWZWJo10xocFJ5ru+Kq+guePrc6HT8FPyEYm8sEPWF+PiaS3so/Y59k2u40taJ07
6qmO2s/LHvSjtLEQ7LHnlFe4/aaqU3hN6/ezyV+pymw9Zk07OpYqBAQZA5wpNv0k
cNF8KhA+cVDHN31nj3lW49pbznupjMccb2XqPV82SkMI3kjyTZmamdZTCunw7aDH
NMOFphZHrHOZHSjkAf3f0Ps2epgIk+E6uil2zuEfjQ4YKcBPNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwthNzzAYAU7D/NApJPUeKLGkUGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY1OWRhYjctY2Q5Zi0z
ZGMwLTg1ZDktMjZiNWNjOWI0ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACMy5t0NvM/VyqxSFZ2oZT1aJNlKpAOKFYrvsswgQ2KNEU7t+ODaFGoK
uCAIyc+emKhK5dFVyzo5O8p5NiENWa5L2Zk8Mp6ZN3EJ/0p83hetBo1QSFufuQ4o
HLBSCU1lglJKw4/mO4Mw8RBNa8c4tJfvEjlxMpr1Wlz0cfVqL3PmNEgVxxoQT4vX
w9F5k+lEgocpY+R+rQhEqLFUaIFCMR11ouzi3I4QB+abrG4vPW82PBxeNkg7nADP
0w5D8l/dSk1UuDFY0hI5zq1DSwWWBWCyaI+uh2fBQ5Z/CDmqU0YNsalyj53pUJJj
kh6OUEGI9M9coAbLb5/XsOBRq4N1Sjg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:55 2025 by rpki-client