Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa
File: 1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa (raw, json)
Hash identifier: qtir8ubsHJH18zKLHzgypFhxvq1OfbStHfyXuLWm8i8=
Subject key identifier: 5D:2C:9C:BE:31:FC:26:CF:D8:F6:3C:79:39:3B:F8:D2:78:F5:AB:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF614DC4FE9E3E7982A8DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.225.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:4d:c4:fe:9e:3e:79:82:a8:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=95a2b47e-e8e3-4040-a57a-c47849b5f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:c3:2d:e7:97:73:76:e7:f9:5e:17:c8:7a:
e2:bf:7e:fd:53:0e:b2:bf:da:71:6f:c2:68:71:98:
ad:52:08:c6:29:67:e8:35:ad:35:de:8a:54:2e:64:
9b:26:9b:d7:8f:7b:ca:2d:58:a2:ff:8d:db:db:d5:
ad:b1:76:6e:f9:61:ae:c2:10:24:59:b3:ff:ed:1c:
48:58:e5:2e:f5:67:c5:ea:cb:a7:ea:4c:50:3a:96:
34:11:fe:2f:49:38:ec:c7:e1:f8:2d:01:bc:2e:5b:
af:66:50:e8:10:b9:53:56:d1:89:2b:91:64:42:b8:
52:3c:a7:6c:ae:f2:2f:90:fe:7a:6e:2f:e3:79:d7:
08:0a:48:65:2f:98:6c:32:3e:2d:32:b6:7c:38:dc:
a1:34:ec:56:d3:85:1c:2e:50:00:2a:b5:8a:cb:72:
b8:56:e2:e9:48:a6:23:ea:7d:b1:c8:f4:f9:df:52:
06:1e:c1:e8:80:b6:02:51:6d:66:9a:0f:81:fb:0f:
34:52:b8:a8:5a:97:2b:25:42:8f:72:b0:7f:97:f2:
e3:fc:93:cf:39:a7:44:e5:de:97:a1:72:b2:c7:96:
cf:66:f3:80:4e:66:9d:86:97:57:c7:20:12:c2:64:
ba:3e:b0:85:0a:60:2b:c4:40:10:72:cf:25:0f:50:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2C:9C:BE:31:FC:26:CF:D8:F6:3C:79:39:3B:F8:D2:78:F5:AB:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d6a926d-d0f9-370b-bd20-175046b4ccd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:81:4b:43:f3:74:a8:f4:0d:c1:69:01:52:b4:4b:e1:90:52:
0c:bf:ae:96:ba:f2:d0:eb:fa:6a:3e:e4:22:b2:7d:64:fc:99:
b9:11:ab:15:de:05:30:50:c5:ff:7d:d9:46:76:41:bd:51:b1:
d2:14:05:2e:77:49:f5:c9:03:fc:d4:d1:a2:6e:de:87:71:91:
3f:80:33:08:f2:d7:4a:55:07:df:ab:32:3e:b1:d8:9f:33:41:
67:08:4c:c0:71:7b:38:34:42:10:ce:3a:b5:fc:e7:11:01:84:
9a:1c:7d:de:bd:87:b0:0b:a5:92:48:5c:ee:6a:8c:26:09:97:
6a:f4:be:71:3f:28:ad:57:bd:a3:8b:90:1c:9b:bc:b3:de:25:
55:6d:fe:9f:bd:e1:e2:74:b4:67:e7:68:65:7a:ab:f2:eb:47:
33:a3:98:15:55:c5:09:82:cc:94:d1:0b:80:e5:28:20:b4:a4:
d7:44:fe:94:ef:b5:0d:52:40:ff:30:e6:88:9e:dc:42:19:22:
5a:f4:13:ff:76:90:ab:24:06:5a:be:21:62:58:fc:d3:57:1a:
fd:87:e7:16:b3:d7:bf:27:a8:ac:30:2f:99:9b:63:d3:c4:06:
d8:eb:8d:07:a1:48:6e:3f:69:24:91:70:5a:b2:6a:1f:ff:dc:
bd:2c:9f:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU3E/p4+eYKo2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
OTVhMmI0N2UtZThlMy00MDQwLWE1N2EtYzQ3ODQ5YjVmOTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimzDLeeXc3bn+V4XyHriv379Uw6yv9pxb8Jo
cZitUgjGKWfoNa013opULmSbJpvXj3vKLVii/43b29WtsXZu+WGuwhAkWbP/7RxI
WOUu9WfF6sun6kxQOpY0Ef4vSTjsx+H4LQG8LluvZlDoELlTVtGJK5FkQrhSPKds
rvIvkP56bi/jedcICkhlL5hsMj4tMrZ8ONyhNOxW04UcLlAAKrWKy3K4VuLpSKYj
6n2xyPT531IGHsHogLYCUW1mmg+B+w80UrioWpcrJUKPcrB/l/Lj/JPPOadE5d6X
oXKyx5bPZvOATmadhpdXxyASwmS6PrCFCmArxEAQcs8lD1BoCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0snL4x/CbP2PY8eTk7+NJ49ausMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ2YTkyNmQtZDBmOS0z
NzBiLWJkMjAtMTc1MDQ2YjRjY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKBS0PzdKj0DcFpAVK0S+GQUgy/rpa68tDr+mo+5CKyfWT8mbkRqxXe
BTBQxf992UZ2Qb1RsdIUBS53SfXJA/zU0aJu3odxkT+AMwjy10pVB9+rMj6x2J8z
QWcITMBxezg0QhDOOrX85xEBhJocfd69h7ALpZJIXO5qjCYJl2r0vnE/KK1XvaOL
kBybvLPeJVVt/p+94eJ0tGfnaGV6q/LrRzOjmBVVxQmCzJTRC4DlKCC0pNdE/pTv
tQ1SQP8w5oie3EIZIlr0E/92kKskBlq+IWJY/NNXGv2H5xaz178nqKwwL5mbY9PE
BtjrjQehSG4/aSSRcFqyah//3L0sn6A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:42 2025 by rpki-client