Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8f7f7c9-4da0-3e84-82b3-904d3fd55f17.roa
File: f8f7f7c9-4da0-3e84-82b3-904d3fd55f17.roa (raw, json)
Hash identifier: RQjI7RGKJwiS3kbF4OBs6kvkfCbOyi8b+YQoFhlJCP8=
Subject key identifier: 0F:24:B8:F6:EA:78:F3:EA:02:BD:60:6A:2B:4C:CC:BC:ED:80:21:DB
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847F9B4E4FF4D239E96B35428C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8f7f7c9-4da0-3e84-82b3-904d3fd55f17.roa
Signing time: Sat 23 Nov 2024 14:00:39 +0000
ROA not before: Sat 23 Nov 2024 14:00:39 +0000
ROA not after: Fri 21 Feb 2025 14:00:39 +0000
asID: 36352
IP address blocks: 172.94.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f9:b4:e4:ff:4d:23:9e:96:b3:54:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 23 14:00:39 2024 GMT
Not After : Feb 21 14:00:39 2025 GMT
Subject: CN=c5301e4f-074f-4c39-b294-50977ab942eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:1f:26:ae:6c:63:e1:6b:1c:af:f9:5f:31:
04:5e:05:43:ad:6b:d1:7b:7f:47:f1:1f:3f:48:6c:
f7:68:db:75:87:42:65:71:dd:92:f5:5e:97:07:eb:
96:f1:28:fa:1c:95:6e:7e:1b:cc:9f:7b:94:fa:24:
af:b1:2c:27:86:cb:56:02:b3:51:4e:d6:15:d4:58:
9d:60:4b:86:e3:94:b1:2b:36:43:0f:bb:36:c8:90:
43:49:3f:6d:c1:2f:35:16:24:59:da:c2:b8:fc:33:
4f:ac:a5:cc:b3:2f:fa:9f:6f:4f:b2:07:dc:63:f4:
32:a6:a7:7e:87:7e:db:d8:e5:d6:01:98:be:0e:9b:
ae:b4:f0:15:57:d4:88:ac:cd:b6:ec:34:b5:9e:3b:
7c:3f:ed:a5:53:c5:23:be:93:7f:24:ce:29:52:c0:
5e:50:54:5f:08:46:c3:40:81:4b:ae:33:1d:f0:18:
a6:8a:24:d2:b9:05:f7:86:8b:d4:c0:39:44:7b:fa:
75:65:f5:80:93:6e:75:df:27:28:d5:70:10:00:2c:
31:fd:22:cf:13:1c:fa:2a:3a:c5:39:c9:36:b7:45:
25:6b:9c:4b:1e:d2:bb:4b:0c:76:e0:93:c8:57:d8:
6c:67:ed:9c:81:a1:c9:86:62:c5:a0:26:72:09:65:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:B8:F6:EA:78:F3:EA:02:BD:60:6A:2B:4C:CC:BC:ED:80:21:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8f7f7c9-4da0-3e84-82b3-904d3fd55f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c7:89:f7:d5:31:50:be:51:ea:f6:6e:28:75:16:36:bf:56:
ee:16:9e:96:da:9c:d1:a2:b8:e3:cb:83:f2:be:46:0d:16:96:
67:3d:64:8d:aa:a3:98:13:c3:6d:c1:25:0a:8d:95:99:6c:76:
3f:34:41:d9:cb:76:36:c1:88:65:d2:3f:d6:ea:ac:cf:f2:68:
e8:8c:33:79:31:9d:3a:f8:f1:44:39:97:a3:82:7b:82:91:db:
91:96:6b:53:ce:f4:e4:a7:37:e7:3f:cd:eb:24:3c:96:75:c1:
80:e1:46:55:52:46:3c:f8:2e:be:e3:3e:a9:42:dd:6b:2a:f1:
44:1a:23:c0:e2:f2:54:c8:a3:43:7a:0e:9e:be:00:34:69:8f:
ea:82:6b:75:8f:83:43:74:1a:09:14:88:f3:ac:08:d4:69:06:
69:e1:7d:22:8f:60:a5:71:bc:5d:b6:99:8a:89:4f:49:fb:6e:
48:86:16:ab:db:85:53:14:55:9f:de:85:32:07:46:e7:b6:46:
93:cb:4f:f5:3b:3e:1b:b7:9a:9b:37:fa:af:e9:d7:8a:49:cb:
9c:44:b0:13:95:ac:59:9a:0a:f3:a9:08:3e:05:1e:94:fa:12:
93:14:cc:af:00:32:12:b8:e5:3d:b3:18:0d:b8:94:62:87:4d:
2b:f6:61:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf5tOT/TSOelrNUKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTEyMzE0MDAzOVoXDTI1MDIyMTE0MDAzOVowLzEtMCsGA1UEAxMk
YzUzMDFlNGYtMDc0Zi00YzM5LWIyOTQtNTA5NzdhYjk0MmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyIfJq5sY+FrHK/5XzEEXgVDrWvRe39H8R8/
SGz3aNt1h0Jlcd2S9V6XB+uW8Sj6HJVufhvMn3uU+iSvsSwnhstWArNRTtYV1Fid
YEuG45SxKzZDD7s2yJBDST9twS81FiRZ2sK4/DNPrKXMsy/6n29PsgfcY/Qypqd+
h37b2OXWAZi+DpuutPAVV9SIrM227DS1njt8P+2lU8UjvpN/JM4pUsBeUFRfCEbD
QIFLrjMd8BimiiTSuQX3hovUwDlEe/p1ZfWAk2513yco1XAQACwx/SLPExz6KjrF
Ock2t0Ula5xLHtK7Swx24JPIV9hsZ+2cgaHJhmLFoCZyCWXd9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8kuPbqePPqAr1gaitMzLztgCHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjhmN2Y3YzktNGRhMC0z
ZTg0LTgyYjMtOTA0ZDNmZDU1ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/HiffVMVC+Uer2bih1Fja/Vu4WnpbanNGiuOPLg/K+Rg0Wlmc9ZI2q
o5gTw23BJQqNlZlsdj80QdnLdjbBiGXSP9bqrM/yaOiMM3kxnTr48UQ5l6OCe4KR
25GWa1PO9OSnN+c/zeskPJZ1wYDhRlVSRjz4Lr7jPqlC3Wsq8UQaI8Di8lTIo0N6
Dp6+ADRpj+qCa3WPg0N0GgkUiPOsCNRpBmnhfSKPYKVxvF22mYqJT0n7bkiGFqvb
hVMUVZ/ehTIHRue2RpPLT/U7Phu3mps3+q/p14pJy5xEsBOVrFmaCvOpCD4FHpT6
EpMUzK8AMhK45T2zGA24lGKHTSv2Ydg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:43 2025 by rpki-client