Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa
File: 3f88eb45-1ebb-364d-9949-8283978277cd.roa (raw, json)
Hash identifier: 07Xc/Fbbd6GMI3lYfNDNPlPVApelfHq30xpkxgRDd6o=
Subject key identifier: 5C:F9:BB:4A:27:9C:6D:76:0A:DD:5F:CB:51:E3:67:EE:27:9E:CD:8C
Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial: 010D0C9F43285848EC969708AB942F100AFEE280
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 40948
IP address blocks: 204.156.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:97:08:ab:94:2f:10:0a:fe:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=b9bff660-f54c-4986-b4e3-bec4bd283779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:24:b3:9b:c9:22:dc:05:e9:1f:f2:f0:a0:
70:b9:a1:c6:71:97:25:4f:c5:4a:ea:c7:15:94:a8:
1c:1f:2c:3f:68:c2:81:8d:14:e2:68:47:af:9a:b0:
c3:8c:f8:be:32:a2:cc:85:f7:39:51:ef:30:7c:87:
03:5a:96:8d:d4:a8:f1:16:b8:f0:07:77:1a:88:e5:
b7:a6:87:fe:18:a1:71:cc:ab:22:7c:49:60:3f:17:
b4:03:64:1d:6a:13:1c:c2:d2:b5:71:79:26:70:56:
1d:83:c0:33:6f:35:5b:7c:c3:f7:13:a0:51:53:ab:
ed:dd:dc:f9:ff:73:39:b6:66:f1:85:bc:10:ab:3c:
f3:a0:d2:9a:6c:64:59:f5:2f:19:d5:69:0f:b1:e8:
1c:a5:db:7c:3f:ab:d1:25:84:20:72:da:61:25:b9:
17:4b:0b:93:3b:cd:c0:08:ab:dd:79:22:92:e1:7d:
14:a7:45:ba:4c:75:ee:1c:47:f9:2c:51:bf:73:9e:
7c:38:4f:a1:52:70:72:8f:14:4a:db:24:bf:b1:87:
b7:ed:f9:76:c3:9f:c3:89:a3:0a:3d:dd:a0:89:47:
3b:9e:0d:47:aa:2b:fb:68:be:26:74:b4:2e:4d:1a:
a0:39:2a:7f:aa:cd:29:ab:8d:fc:1e:cd:65:df:2b:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:BB:4A:27:9C:6D:76:0A:DD:5F:CB:51:E3:67:EE:27:9E:CD:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
X509v3 Authority Key Identifier:
keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
sbgp-ipAddrBlock: critical
IPv4:
204.156.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2d:82:2c:5e:1b:cd:90:6c:6d:2f:7e:85:02:bf:f7:ba:15:
62:c5:79:c8:0d:49:2e:53:7d:e7:a2:df:1e:41:3e:1b:f3:5c:
74:6c:95:6c:34:9a:ce:97:9f:f7:19:7a:0b:24:7c:00:54:ff:
ab:d2:d3:36:54:45:78:de:50:c8:e7:f8:8f:03:3f:fa:b5:90:
3b:d2:a6:c8:59:2f:e3:36:8a:58:81:cb:b8:1a:da:c7:2e:68:
ad:6f:51:92:15:ed:f1:fe:b6:ae:d9:98:95:9e:a3:e3:1d:c6:
77:63:38:91:42:cb:bc:aa:2b:79:69:7d:31:95:f2:3a:fa:c2:
14:c7:6d:e6:7e:da:10:5f:2e:e2:5c:e0:f6:2f:0d:9a:a7:15:
98:61:96:68:66:b0:aa:71:7f:f9:34:69:71:55:e1:85:45:9c:
28:fa:a2:42:21:94:72:71:3c:64:62:c8:f3:97:d0:ee:65:d5:
50:33:a2:40:91:2f:8a:67:08:35:84:f4:31:02:9f:52:14:97:
db:19:f2:70:71:33:0f:8c:71:d9:d1:48:c4:b8:e2:c0:e3:44:
92:30:07:a1:88:46:12:e2:f1:0a:48:49:34:6b:ac:3f:c6:f0:
51:c7:1d:45:9e:4c:47:52:24:33:01:a4:7f:07:02:5b:f5:0c:
46:da:c2:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpcIq5QvEAr+4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5
ZGM1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjliZmY2NjAtZjU0Yy00OTg2LWI0ZTMtYmVjNGJkMjgzNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqcks5vJItwF6R/y8KBwuaHGcZclT8VK6scV
lKgcHyw/aMKBjRTiaEevmrDDjPi+MqLMhfc5Ue8wfIcDWpaN1KjxFrjwB3caiOW3
pof+GKFxzKsifElgPxe0A2QdahMcwtK1cXkmcFYdg8AzbzVbfMP3E6BRU6vt3dz5
/3M5tmbxhbwQqzzzoNKabGRZ9S8Z1WkPsegcpdt8P6vRJYQgctphJbkXSwuTO83A
CKvdeSKS4X0Up0W6THXuHEf5LFG/c558OE+hUnByjxRK2yS/sYe37fl2w5/DiaMK
Pd2giUc7ng1Hqiv7aL4mdLQuTRqgOSp/qs0pq438Hs1l3ysBuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFz5u0onnG12Ct1fy1HjZ+4nns2MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3
MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2Y4OGViNDUtMWViYi0z
NjRkLTk5NDktODI4Mzk3ODI3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw
NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm
OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy
YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIItgixeG82QbG0vfoUCv/e6FWLFecgNSS5Tfeei3x5BPhvzXHRslWw0
ms6Xn/cZegskfABU/6vS0zZURXjeUMjn+I8DP/q1kDvSpshZL+M2iliBy7ga2scu
aK1vUZIV7fH+tq7ZmJWeo+MdxndjOJFCy7yqK3lpfTGV8jr6whTHbeZ+2hBfLuJc
4PYvDZqnFZhhlmhmsKpxf/k0aXFV4YVFnCj6okIhlHJxPGRiyPOX0O5l1VAzokCR
L4pnCDWE9DECn1IUl9sZ8nBxMw+McdnRSMS44sDjRJIwB6GIRhLi8QpISTRrrD/G
8FHHHUWeTEdSJDMBpH8HAlv1DEbawos=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:44 2025 by rpki-client