Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1093b6cf-e053-3faf-838f-d295310a9670.roa
File: 1093b6cf-e053-3faf-838f-d295310a9670.roa (raw, json)
Hash identifier: y8vDj18xDc2iau0/P5di6E9dgxIl3nmqBh1pJezjNl0=
Subject key identifier: A7:5B:71:10:B6:BB:F5:17:37:1D:56:61:28:55:29:64:DB:E8:79:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF6173A61B98AF58FAA31DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1093b6cf-e053-3faf-838f-d295310a9670.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:73:a6:1b:98:af:58:fa:a3:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=bde54a31-2afb-454d-ac5d-7588618b5fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:05:f7:6d:76:2b:96:17:75:a2:84:93:34:
70:13:3d:d4:37:b5:c4:c0:3d:8d:8d:c0:1e:58:67:
f6:e1:47:bf:60:60:e1:4d:9b:74:52:8f:ce:e4:c8:
16:a7:01:31:1c:a2:d9:85:01:97:6c:be:e6:37:66:
e0:af:5a:a9:1c:78:88:64:20:7e:0b:e5:d2:72:e4:
0a:88:44:52:30:9a:a8:74:96:d4:0f:73:72:32:c1:
b3:c4:74:93:20:c4:0d:f0:37:ba:67:d5:e9:f9:e9:
1a:5a:15:70:c0:df:1c:78:06:7b:07:91:d0:a9:02:
8e:25:7f:dd:66:6d:f4:8e:2d:eb:a5:25:79:84:59:
92:af:34:d3:50:1a:a6:bc:88:54:05:bf:44:23:d6:
f6:1b:de:0d:96:c5:92:1a:44:a1:bd:4a:0c:6b:2e:
d2:34:40:e5:70:9e:94:7a:9a:80:d1:d7:d5:1d:46:
80:04:13:fe:96:33:02:a8:ca:80:7f:07:67:78:13:
19:1f:da:55:9d:ed:18:3a:d9:b8:15:4c:e0:53:e6:
ad:47:4f:e3:49:09:9e:49:29:f1:72:7e:94:d3:0a:
99:f5:47:f4:82:b7:a5:d7:e8:84:20:da:01:4f:0a:
20:4d:d2:a6:b4:98:8f:84:65:a0:ba:5d:2e:10:35:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:71:10:B6:BB:F5:17:37:1D:56:61:28:55:29:64:DB:E8:79:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1093b6cf-e053-3faf-838f-d295310a9670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b7:c5:ae:a6:9e:64:ed:1f:83:2d:de:f8:1a:10:9c:88:20:
35:a8:13:75:c4:e3:48:a3:5a:ef:80:a7:84:bf:f8:32:0e:d7:
14:05:d3:be:9b:74:e0:2b:09:15:29:31:6a:ab:1d:7c:72:73:
60:1e:a6:d6:fe:46:b6:f7:d4:cc:8e:b9:ff:e0:fc:50:77:e7:
91:c3:db:d8:93:05:c3:1e:39:25:5e:99:4a:1f:0f:27:18:05:
71:f2:3e:48:38:4b:ec:95:19:02:77:ab:82:e5:f3:d0:b0:34:
a6:87:fd:2e:b1:6c:60:26:c1:1e:80:14:c8:aa:1a:ea:78:aa:
0e:59:7b:4c:1b:14:70:54:d5:48:29:f8:32:f9:bd:44:41:27:
30:03:b4:5a:f0:7f:0c:9e:32:09:62:d3:79:39:a5:e0:e0:fc:
42:07:d5:85:a8:97:fb:bb:19:88:c0:72:56:8c:56:dd:56:4d:
94:96:54:5d:43:e3:b7:9e:d9:40:50:82:40:8d:10:dc:b6:26:
35:a6:9d:6f:91:cf:ef:bd:60:ca:1d:c0:7d:c6:bc:4d:3e:b8:
4a:20:98:95:b1:1a:6e:7f:d8:29:a1:ca:04:0b:51:6e:6d:33:
77:3b:b5:11:ed:77:f8:ff:50:11:92:42:7f:f9:d2:15:e7:a9:
4a:91:06:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXOmG5ivWPqjHcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YmRlNTRhMzEtMmFmYi00NTRkLWFjNWQtNzU4ODYxOGI1ZmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvsF9212K5YXdaKEkzRwEz3UN7XEwD2NjcAe
WGf24Ue/YGDhTZt0Uo/O5MgWpwExHKLZhQGXbL7mN2bgr1qpHHiIZCB+C+XScuQK
iERSMJqodJbUD3NyMsGzxHSTIMQN8De6Z9Xp+ekaWhVwwN8ceAZ7B5HQqQKOJX/d
Zm30ji3rpSV5hFmSrzTTUBqmvIhUBb9EI9b2G94NlsWSGkShvUoMay7SNEDlcJ6U
epqA0dfVHUaABBP+ljMCqMqAfwdneBMZH9pVne0YOtm4FUzgU+atR0/jSQmeSSnx
cn6U0wqZ9Uf0grel1+iEINoBTwogTdKmtJiPhGWgul0uEDVTrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdbcRC2u/UXNx1WYShVKWTb6HlZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA5M2I2Y2YtZTA1My0z
ZmFmLTgzOGYtZDI5NTMxMGE5NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIu3xa6mnmTtH4Mt3vgaEJyIIDWoE3XE40ijWu+Ap4S/+DIO1xQF076b
dOArCRUpMWqrHXxyc2Aeptb+Rrb31MyOuf/g/FB355HD29iTBcMeOSVemUofDycY
BXHyPkg4S+yVGQJ3q4Ll89CwNKaH/S6xbGAmwR6AFMiqGup4qg5Ze0wbFHBU1Ugp
+DL5vURBJzADtFrwfwyeMgli03k5peDg/EIH1YWol/u7GYjAclaMVt1WTZSWVF1D
47ee2UBQgkCNENy2JjWmnW+Rz++9YModwH3GvE0+uEogmJWxGm5/2CmhygQLUW5t
M3c7tRHtd/j/UBGSQn/50hXnqUqRBno=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:42 2025 by rpki-client