Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04f3139-1cb1-3df4-afd4-e75cacc45182.roa
File: a04f3139-1cb1-3df4-afd4-e75cacc45182.roa (raw, json)
Hash identifier: mLn0W+AwOpDREj5eecgNO5CIw9eFjxkyBJe6u03X/y0=
Subject key identifier: 7F:60:CD:6E:34:5A:99:04:FB:42:3F:38:47:E5:5D:0E:DC:B5:4A:FC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF614E88AFA4CCB3AD3BE360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04f3139-1cb1-3df4-afd4-e75cacc45182.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:4e:88:af:a4:cc:b3:ad:3b:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=642f54c7-55e3-4023-94be-1ccf38035a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:5e:82:f3:58:c1:30:1a:59:9a:6f:dd:2c:
0e:23:b4:e7:ce:92:3a:20:43:15:2c:d5:96:a9:e5:
df:ee:65:25:e2:cf:76:9d:91:18:8f:6a:31:be:42:
8f:30:a9:fb:66:45:f3:73:ef:1a:01:8c:27:e4:93:
f0:e5:a1:71:4d:f3:74:7f:3a:60:d7:8b:33:b2:58:
68:da:10:39:0e:7b:ce:a8:75:1a:87:5e:e9:9d:15:
02:bf:b1:a2:31:b5:c8:7f:fb:45:80:9e:b5:b1:3e:
ff:79:f7:14:64:70:9c:23:7c:89:dd:93:07:55:1f:
5d:e3:c1:10:20:8f:57:11:8f:5a:c2:f4:c0:11:b7:
6c:16:9c:f9:5a:c4:60:21:ac:80:78:fb:fc:a4:82:
65:67:27:30:1b:88:ef:58:af:13:1d:c7:91:48:86:
15:b8:d4:c1:d7:9b:cb:dc:b2:18:7f:19:fc:cc:40:
7b:18:0c:1b:de:8b:0e:2f:0a:56:0a:35:53:8b:18:
37:71:80:a3:8b:fa:c6:79:b9:5e:43:77:6e:0e:67:
06:6b:2e:60:93:5f:ab:64:32:bf:15:08:a3:a0:39:
a5:39:f7:49:ba:4b:8c:9a:f9:fa:77:86:29:0b:e3:
2d:ff:d9:a3:f1:e1:a6:d3:8b:76:a7:59:59:a0:38:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:CD:6E:34:5A:99:04:FB:42:3F:38:47:E5:5D:0E:DC:B5:4A:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a04f3139-1cb1-3df4-afd4-e75cacc45182.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:34:eb:c9:95:af:a9:a7:ab:cd:65:65:b1:2b:5a:55:90:4c:
3d:25:0a:f8:27:77:53:6b:5d:a8:21:c2:7b:a0:e0:65:92:a0:
c4:3a:cf:ae:1a:b8:2d:e3:e5:6c:e9:57:a0:43:38:6d:21:85:
b8:de:c1:f2:c1:27:02:31:e1:0b:b3:1a:b7:90:b4:ef:6e:73:
0f:3f:13:d5:5f:1f:96:ed:9d:a0:34:5c:d3:2d:a7:4b:de:75:
9b:54:32:4c:f4:42:c6:a8:1b:fb:f9:10:ee:28:e7:8d:12:8a:
4d:71:4e:a0:bd:e2:72:61:75:f7:a7:45:47:3f:2d:59:77:a2:
02:58:cc:ba:71:bb:01:be:3e:f2:6d:04:d2:fa:41:e4:65:1c:
7a:c0:94:42:c4:9e:cb:8a:dc:3b:07:03:16:50:6b:f9:28:a2:
41:5c:aa:99:a1:ae:69:bc:87:5f:61:28:38:2e:0f:8f:ac:74:
f8:d1:07:f0:f8:49:43:f6:15:cf:46:0a:71:99:d2:66:0f:51:
31:f7:6a:42:94:0c:92:3b:94:fc:e2:a8:4c:4d:8f:33:cf:be:
1d:6e:88:43:08:b2:58:c0:07:20:1b:43:7a:a6:97:33:8f:0d:
a9:b5:8a:bb:b5:b4:05:7a:96:a1:aa:d3:df:5b:73:84:41:43:
d7:73:86:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU6Ir6TMs60742AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NjQyZjU0YzctNTVlMy00MDIzLTk0YmUtMWNjZjM4MDM1YTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiydegvNYwTAaWZpv3SwOI7TnzpI6IEMVLNWW
qeXf7mUl4s92nZEYj2oxvkKPMKn7ZkXzc+8aAYwn5JPw5aFxTfN0fzpg14szslho
2hA5DnvOqHUah17pnRUCv7GiMbXIf/tFgJ61sT7/efcUZHCcI3yJ3ZMHVR9d48EQ
II9XEY9awvTAEbdsFpz5WsRgIayAePv8pIJlZycwG4jvWK8THceRSIYVuNTB15vL
3LIYfxn8zEB7GAwb3osOLwpWCjVTixg3cYCji/rGebleQ3duDmcGay5gk1+rZDK/
FQijoDmlOfdJukuMmvn6d4YpC+Mt/9mj8eGm04t2p1lZoDgdqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9gzW40WpkE+0I/OEflXQ7ctUr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTA0ZjMxMzktMWNiMS0z
ZGY0LWFmZDQtZTc1Y2FjYzQ1MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4068mVr6mnq81lZbErWlWQTD0lCvgnd1NrXaghwnug4GWSoMQ6z64a
uC3j5WzpV6BDOG0hhbjewfLBJwIx4QuzGreQtO9ucw8/E9VfH5btnaA0XNMtp0ve
dZtUMkz0QsaoG/v5EO4o540Sik1xTqC94nJhdfenRUc/LVl3ogJYzLpxuwG+PvJt
BNL6QeRlHHrAlELEnsuK3DsHAxZQa/kookFcqpmhrmm8h19hKDguD4+sdPjRB/D4
SUP2Fc9GCnGZ0mYPUTH3akKUDJI7lPziqExNjzPPvh1uiEMIsljAByAbQ3qmlzOP
Dam1iru1tAV6lqGq099bc4RBQ9dzhnw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:34 2025 by rpki-client