Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa
File: 634349a0-f73f-399e-a496-ee6ba2f90d8c.roa (raw, json)
Hash identifier: g6TcB1y+1RYHHv2FYm6vnUrfHCvkZsGWTauB/JDOBys=
Subject key identifier: A6:35:17:A5:B4:D6:8D:F9:0F:7B:08:E3:F0:46:5A:8D:D8:69:49:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490B4C39B2D0C508136727B9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 24319
IP address blocks: 96.17.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:39:b2:d0:c5:08:13:67:27:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ab450795-c0f8-4d73-8c69-ff999057d0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:a1:a6:ae:89:83:99:4f:f6:d3:72:2b:db:
de:f5:57:8f:91:83:ca:4c:61:fb:6f:ee:c8:50:c0:
32:0c:67:38:d5:fe:a8:66:e2:8b:44:f4:e6:11:bd:
16:8c:10:6f:32:87:18:6a:64:65:4a:e9:a7:5f:81:
6c:a6:50:c8:34:76:5d:5c:33:f5:62:d5:72:7e:54:
47:94:73:d5:9b:71:0d:f9:60:b6:d1:38:97:49:06:
f9:7d:bf:c5:e0:2b:54:ce:b1:e7:30:7a:45:9b:de:
31:3b:57:bc:89:c8:e3:2b:78:c1:b0:43:a6:1d:76:
da:d7:9a:a7:fd:a7:ef:ca:15:7f:01:80:4f:b0:91:
89:e1:aa:e8:42:e2:59:ba:b8:af:91:72:0b:ec:f0:
47:fe:23:78:be:7b:cc:2b:42:99:86:90:a8:8e:e4:
b9:7c:81:81:b7:b3:6c:4a:96:0e:0b:ca:00:71:db:
ed:73:a4:68:26:1f:af:e7:d6:39:67:ee:ab:5f:00:
0f:51:29:ff:3a:da:48:26:83:31:93:09:f8:b6:6f:
a1:c5:72:7f:e4:1e:7d:a8:85:e9:0d:47:2c:1b:50:
05:48:a8:70:d7:a5:ce:60:92:12:90:57:bb:78:97:
a2:4b:7c:ac:e3:6b:2d:0b:62:7d:a9:92:a5:d6:2c:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:17:A5:B4:D6:8D:F9:0F:7B:08:E3:F0:46:5A:8D:D8:69:49:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
96.17.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:11:86:8b:cf:69:74:17:41:7b:7b:8b:9b:d8:3d:14:e1:37:
d3:23:96:0b:83:3b:ef:ef:ed:08:9c:39:80:b4:47:43:24:24:
51:67:2a:3d:4e:e8:0f:88:66:6d:87:0d:0e:a4:61:01:b2:da:
63:6a:24:14:36:23:c5:06:92:21:5d:09:c2:35:91:9f:c5:94:
ee:a3:96:d6:06:84:cb:85:f6:44:8d:91:1a:e6:a2:44:0a:48:
65:11:ae:65:0e:20:3b:a7:ab:0f:10:cb:d5:46:00:34:e3:3e:
c4:b7:38:e6:38:6c:f5:bc:a2:8f:d9:55:f3:b1:b2:9c:b0:a3:
10:c3:4b:03:3c:20:01:2f:33:4b:33:4b:09:58:51:2b:b5:64:
ae:08:17:92:09:c3:80:09:4e:69:03:d4:4d:15:19:cc:84:cd:
06:ef:f2:1d:af:7a:47:3b:7b:b3:9b:5c:f4:15:f2:8c:5b:84:
45:5a:b6:20:7b:bf:31:74:de:29:07:5f:d3:43:20:08:02:31:
e0:3b:e1:88:6d:bb:25:81:b0:67:fa:a9:5c:66:19:3e:ec:6d:
b7:cc:03:63:74:5c:5d:f7:2a:f8:a4:9e:b3:5e:8b:d1:fe:8c:
65:05:22:60:fe:21:e4:7d:11:24:0b:0f:f8:fa:a5:93:7e:90:
08:e6:53:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDmy0MUIE2cnucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
YWI0NTA3OTUtYzBmOC00ZDczLThjNjktZmY5OTkwNTdkMGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrChpq6Jg5lP9tNyK9ve9VePkYPKTGH7b+7I
UMAyDGc41f6oZuKLRPTmEb0WjBBvMocYamRlSumnX4FsplDINHZdXDP1YtVyflRH
lHPVm3EN+WC20TiXSQb5fb/F4CtUzrHnMHpFm94xO1e8icjjK3jBsEOmHXba15qn
/afvyhV/AYBPsJGJ4aroQuJZurivkXIL7PBH/iN4vnvMK0KZhpCojuS5fIGBt7Ns
SpYOC8oAcdvtc6RoJh+v59Y5Z+6rXwAPUSn/OtpIJoMxkwn4tm+hxXJ/5B59qIXp
DUcsG1AFSKhw16XOYJISkFe7eJeiS3ys42stC2J9qZKl1iwryQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKY1F6W01o35D3sI4/BGWo3YaUn6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjM0MzQ5YTAtZjczZi0z
OTllLWE0OTYtZWU2YmEyZjkwZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcRhovPaXQXQXt7i5vYPRThN9MjlguDO+/v7QicOYC0R0MkJFFnKj1O
6A+IZm2HDQ6kYQGy2mNqJBQ2I8UGkiFdCcI1kZ/FlO6jltYGhMuF9kSNkRrmokQK
SGURrmUOIDunqw8Qy9VGADTjPsS3OOY4bPW8oo/ZVfOxspywoxDDSwM8IAEvM0sz
SwlYUSu1ZK4IF5IJw4AJTmkD1E0VGcyEzQbv8h2vekc7e7ObXPQV8oxbhEVatiB7
vzF03ikHX9NDIAgCMeA74YhtuyWBsGf6qVxmGT7sbbfMA2N0XF33KviknrNei9H+
jGUFImD+IeR9ESQLD/j6pZN+kAjmUwA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:51 2025 by rpki-client