Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa
File: 6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa (raw, json)
Hash identifier: LLE9mb32lIqCG7/gBeC7LW8vj5uBaPmc4ebmHNo0lek=
Subject key identifier: 00:9D:5D:40:BF:32:23:EA:60:00:F7:24:60:4A:4B:07:23:65:52:04
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E16BF11708F8B0CA88FD78C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.225.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:f1:17:08:f8:b0:ca:88:fd:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=20693ca7-097d-4836-ab8f-7ce8a81a2d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:f4:0b:53:ef:13:a2:1c:48:bf:3b:3e:e3:
e2:7f:8f:1a:88:44:67:b2:f6:91:20:86:b0:fc:99:
77:1f:f1:d8:e9:04:c7:64:d1:d1:74:91:32:f4:6c:
bb:e9:67:a2:41:a1:2e:f4:8f:c2:f8:ff:3e:3e:fb:
f5:46:a6:6e:06:8c:00:e2:44:26:2c:34:0b:10:02:
23:10:81:9f:8b:86:4c:d5:74:9b:cc:14:47:e2:74:
88:f3:8c:a0:87:36:d2:b1:22:d7:da:1c:b3:d3:32:
5b:e5:8a:71:a0:0e:17:b3:25:55:db:ec:08:80:d9:
fd:96:e4:3e:7f:ca:60:3e:e0:e9:6c:a4:b5:94:83:
6c:39:5f:4f:61:c2:ed:9e:d9:35:7c:18:f2:3d:71:
97:d5:05:7e:29:03:1e:e2:5c:20:f5:51:59:88:53:
ef:33:c4:22:45:dd:e1:36:4b:cb:6e:91:e5:1d:7c:
b6:00:f2:ff:c8:0a:43:dc:fe:a4:5d:83:e0:bb:d9:
a4:8c:dc:26:4f:2e:63:62:3e:80:0f:b7:35:5c:3f:
03:5f:1e:12:0c:be:17:c9:d2:17:13:91:10:24:ee:
29:c6:9f:43:2e:00:5f:63:9f:7d:a3:06:7d:bc:3d:
95:de:32:20:50:0b:72:09:1b:8a:80:a4:39:c7:a1:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:5D:40:BF:32:23:EA:60:00:F7:24:60:4A:4B:07:23:65:52:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f8f3e80-1e67-3cc1-b4ad-70d6998effcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:19:29:60:21:69:5e:57:2d:df:94:59:60:31:a8:1d:76:d0:
98:a6:d5:fe:3e:4e:52:ce:16:94:b2:34:3d:ca:51:9f:26:6a:
ea:8e:39:05:53:37:53:a2:72:e8:a7:fb:56:eb:a4:e9:27:16:
0c:46:bc:1a:18:71:64:62:f1:96:7d:47:7b:23:a5:fe:49:23:
d0:13:0a:34:42:5b:fa:b1:dc:24:58:e4:d7:1e:35:26:cd:72:
5e:75:58:59:e8:11:6d:44:33:5f:73:c2:86:2b:a4:ad:96:5d:
6a:51:25:42:b2:c7:d5:c9:bb:f3:81:9e:eb:bf:b3:db:dd:13:
f1:ec:b8:f8:2e:c9:e2:cb:3f:21:e3:54:5d:11:30:b6:85:e1:
00:72:4f:99:c5:a8:01:70:6d:28:69:04:fc:db:61:9a:cd:4f:
12:4b:d3:b8:41:84:c9:1d:35:d5:bf:a7:e4:cf:7e:57:2d:fe:
e3:cc:bd:b1:2c:43:5a:9d:47:7c:e3:c1:ac:1f:c2:ae:bf:e2:
67:b6:c6:0a:2c:f3:d6:00:59:3a:c8:7c:c4:42:a0:df:40:6c:
97:70:dd:43:b6:d5:81:38:76:fd:07:10:d2:29:0a:0e:0f:53:
82:75:38:f9:44:d7:b5:3f:bd:4a:cd:99:c6:73:fb:4a:81:66:
3c:18:f3:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/EXCPiwyoj9eMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjA2OTNjYTctMDk3ZC00ODM2LWFiOGYtN2NlOGE4MWEyZDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe70C1PvE6IcSL87PuPif48aiERnsvaRIIaw
/Jl3H/HY6QTHZNHRdJEy9Gy76WeiQaEu9I/C+P8+Pvv1RqZuBowA4kQmLDQLEAIj
EIGfi4ZM1XSbzBRH4nSI84yghzbSsSLX2hyz0zJb5YpxoA4XsyVV2+wIgNn9luQ+
f8pgPuDpbKS1lINsOV9PYcLtntk1fBjyPXGX1QV+KQMe4lwg9VFZiFPvM8QiRd3h
NkvLbpHlHXy2APL/yApD3P6kXYPgu9mkjNwmTy5jYj6AD7c1XD8DXx4SDL4XydIX
E5EQJO4pxp9DLgBfY599owZ9vD2V3jIgUAtyCRuKgKQ5x6EGmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACdXUC/MiPqYAD3JGBKSwcjZVIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY4ZjNlODAtMWU2Ny0z
Y2MxLWI0YWQtNzBkNjk5OGVmZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4ZKWAhaV5XLd+UWWAxqB120Jim1f4+TlLOFpSyND3KUZ8mauqOOQVT
N1Oicuin+1brpOknFgxGvBoYcWRi8ZZ9R3sjpf5JI9ATCjRCW/qx3CRY5NceNSbN
cl51WFnoEW1EM19zwoYrpK2WXWpRJUKyx9XJu/OBnuu/s9vdE/HsuPguyeLLPyHj
VF0RMLaF4QByT5nFqAFwbShpBPzbYZrNTxJL07hBhMkdNdW/p+TPflct/uPMvbEs
Q1qdR3zjwawfwq6/4me2xgos89YAWTrIfMRCoN9AbJdw3UO21YE4dv0HENIpCg4P
U4J1OPlE17U/vUrNmcZz+0qBZjwY83M=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:33 2025 by rpki-client