Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5d54164-1b3d-3a95-8882-44a3fd442965.roa
File: f5d54164-1b3d-3a95-8882-44a3fd442965.roa (raw, json)
Hash identifier: VDtCuK5BkRUU/G5fVMt8P8C3drxquJZwRkhs4ccdJM8=
Subject key identifier: 90:7F:F2:47:C8:15:45:78:12:D9:10:DE:74:6A:5A:D5:74:06:3E:D5
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848AEC91D7384875E09D2B7D680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5d54164-1b3d-3a95-8882-44a3fd442965.roa
Signing time: Mon 27 Jan 2025 10:42:46 +0000
ROA not before: Mon 27 Jan 2025 10:42:46 +0000
ROA not after: Sun 27 Apr 2025 09:42:46 +0000
asID: 208485
IP address blocks: 172.94.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ae:c9:1d:73:84:87:5e:09:d2:b7:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 27 10:42:46 2025 GMT
Not After : Apr 27 09:42:46 2025 GMT
Subject: CN=51aa3b26-9a2e-49d1-8c43-c464fe1638aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:05:d9:a9:8d:62:27:b1:bd:03:8c:25:22:
cc:f7:ad:8f:83:57:d8:1c:b6:e2:c1:dd:3c:18:d1:
54:8c:d6:04:3e:05:22:5b:79:98:e8:ad:f3:9c:c9:
2a:06:33:62:24:83:ff:09:75:31:65:8e:c6:b2:e4:
34:bf:f0:c1:3e:dc:d8:7d:fd:d8:ad:97:70:49:71:
cf:aa:50:b2:82:ce:ad:d3:ed:04:48:da:2f:c8:06:
13:6f:a4:aa:39:f9:94:bb:02:0f:d8:52:54:c4:fc:
1f:b7:92:30:71:15:60:4a:49:76:aa:ab:18:b4:1c:
1f:cf:9c:f2:c2:4e:38:ce:c7:25:f0:64:21:c8:02:
17:bc:eb:b6:6a:0b:0a:a7:4f:0f:a7:1b:41:b8:38:
37:c8:d1:fa:60:a6:29:9b:4a:16:88:fc:2e:03:1a:
4f:d8:20:7b:ff:d9:87:3d:1d:94:68:a8:43:88:53:
47:aa:47:e7:cf:3f:0f:41:db:54:3e:bc:f6:b3:38:
10:6e:30:63:d5:db:4b:10:28:7f:1f:18:49:13:91:
d7:cf:94:db:05:30:1c:f2:54:64:14:50:20:c9:2c:
8a:7d:ef:8c:82:d9:96:c5:94:90:29:53:1c:c8:1a:
18:e6:75:fd:b6:fb:cf:dc:14:c7:6f:49:6d:94:f9:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7F:F2:47:C8:15:45:78:12:D9:10:DE:74:6A:5A:D5:74:06:3E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5d54164-1b3d-3a95-8882-44a3fd442965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e9:5e:ca:bf:24:29:43:0a:11:c8:47:9b:00:b1:28:8d:6f:
5e:1d:5b:8c:3d:36:2d:10:1f:c2:2d:23:fa:c2:67:3a:41:30:
21:1d:34:9f:f5:5e:ef:78:ac:63:84:15:0b:fb:4e:83:78:dd:
c3:84:56:f8:da:bc:19:2c:dd:7f:62:4f:98:52:b6:3b:af:ea:
a9:c5:bc:32:aa:5d:20:21:7a:76:ed:9a:41:c1:9b:f5:26:d3:
b5:30:9c:4a:81:1e:a7:8f:54:7e:c0:4e:c6:85:e1:71:ec:b2:
0a:a1:97:cc:1c:6a:b4:c1:ef:0c:df:f9:b3:63:08:5e:56:05:
0a:bc:54:2c:44:29:3e:6d:dc:00:67:c5:bf:c4:2e:e4:a5:a9:
85:c6:16:4a:df:6e:34:1f:74:5a:ff:27:0d:10:c2:55:45:e1:
b6:c0:1b:81:bf:7c:c1:6e:82:3a:f1:ad:a0:8f:63:db:97:38:
6f:e8:64:25:5f:0a:64:6f:35:7f:d0:b0:be:7c:2d:f4:d5:39:
03:b2:76:8e:7c:7a:e8:3c:95:c9:64:15:a5:d9:d0:be:87:49:
29:03:f1:55:5e:fd:b5:9f:4a:1d:80:6a:71:04:23:89:10:c7:
d3:f8:f5:7f:76:0e:4b:b2:19:2d:85:57:70:ce:d9:e7:ca:67:
84:d0:65:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiuyR1zhIdeCdK31oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyNzEwNDI0NloXDTI1MDQyNzA5NDI0NlowLzEtMCsGA1UEAxMk
NTFhYTNiMjYtOWEyZS00OWQxLThjNDMtYzQ2NGZlMTYzOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6EF2amNYiexvQOMJSLM962Pg1fYHLbiwd08
GNFUjNYEPgUiW3mY6K3znMkqBjNiJIP/CXUxZY7GsuQ0v/DBPtzYff3YrZdwSXHP
qlCygs6t0+0ESNovyAYTb6SqOfmUuwIP2FJUxPwft5IwcRVgSkl2qqsYtBwfz5zy
wk44zscl8GQhyAIXvOu2agsKp08PpxtBuDg3yNH6YKYpm0oWiPwuAxpP2CB7/9mH
PR2UaKhDiFNHqkfnzz8PQdtUPrz2szgQbjBj1dtLECh/HxhJE5HXz5TbBTAc8lRk
FFAgySyKfe+MgtmWxZSQKVMcyBoY5nX9tvvP3BTHb0ltlPnGbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJB/8kfIFUV4EtkQ3nRqWtV0Bj7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjVkNTQxNjQtMWIzZC0z
YTk1LTg4ODItNDRhM2ZkNDQyOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHpXsq/JClDChHIR5sAsSiNb14dW4w9Ni0QH8ItI/rCZzpBMCEdNJ/1
Xu94rGOEFQv7ToN43cOEVvjavBks3X9iT5hStjuv6qnFvDKqXSAhenbtmkHBm/Um
07UwnEqBHqePVH7ATsaF4XHssgqhl8wcarTB7wzf+bNjCF5WBQq8VCxEKT5t3ABn
xb/ELuSlqYXGFkrfbjQfdFr/Jw0QwlVF4bbAG4G/fMFugjrxraCPY9uXOG/oZCVf
CmRvNX/QsL58LfTVOQOydo58eug8lclkFaXZ0L6HSSkD8VVe/bWfSh2AanEEI4kQ
x9P49X92DkuyGS2FV3DO2efKZ4TQZX8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:31 2025 by rpki-client