Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa
File: aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa (raw, json)
Hash identifier: cYM6Fz7QG0EYEIDhz9zDBt+Sc4tTG6ZKtPB2EWs6k4k=
Subject key identifier: 6B:2D:E8:D6:56:4D:9F:E6:74:55:90:50:FF:C9:7A:C8:BB:7C:5E:1B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E2D1A4B203BB3E90ECCA4E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.225.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a4:b2:03:bb:3e:90:ec:ca:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=53ada7fd-4785-4735-9b29-4dad5faed3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:58:63:61:99:10:4b:c2:1b:46:c1:2c:22:
61:c2:6a:0f:53:99:ee:c1:a0:1b:59:f1:da:78:fc:
f2:9a:f1:8a:3c:de:16:3d:c4:fc:b3:be:14:85:e3:
85:f4:82:aa:82:f2:d3:3a:ee:d0:13:c4:b8:a6:4f:
39:e9:f3:ca:49:a7:97:08:5f:e6:e0:9a:de:d7:99:
bb:86:7c:15:65:19:c6:ad:75:2a:1a:39:55:20:45:
48:10:b4:a8:70:1a:16:cd:3e:07:ca:4d:4e:66:55:
fa:0e:72:5f:5c:69:d1:71:42:2f:05:e9:a3:46:89:
30:2e:ae:22:a1:9b:cf:0f:ac:86:77:62:03:5f:3a:
8b:13:b2:4b:e1:db:91:d5:e0:8f:09:1b:a4:2c:16:
81:89:4d:df:ed:e4:1f:a6:2c:d4:76:59:16:8e:58:
9f:08:fb:c2:0e:37:22:1c:ac:24:93:7e:0e:16:8d:
af:d0:cd:44:30:94:9e:72:f2:92:8d:05:03:86:94:
54:e3:72:95:46:55:a0:30:57:6c:99:93:87:6b:52:
ec:54:29:ed:1c:5b:1d:24:24:47:ee:69:06:3a:5e:
e3:96:7f:3d:26:25:01:c2:e6:6c:40:69:03:91:99:
d5:c3:ed:b9:69:ac:e2:d9:a4:2e:a4:87:5c:b9:1c:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:E8:D6:56:4D:9F:E6:74:55:90:50:FF:C9:7A:C8:BB:7C:5E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:b9:2a:2c:3b:86:6e:a3:f9:9f:69:fa:6c:7a:a5:a7:2b:09:
30:1b:e4:4b:74:70:d2:ab:ef:a8:9d:31:69:0e:86:77:40:55:
02:7d:0b:a0:11:a4:35:52:14:6f:4a:7d:71:4b:4a:b1:48:d2:
d6:49:bd:5f:3d:4b:5f:0a:f5:1b:06:fb:97:53:ca:af:71:bc:
0d:7f:0e:1e:bf:d2:24:f5:5b:bb:f9:59:b1:a3:93:d7:c5:b7:
ad:f1:92:55:24:ba:6e:fe:c6:01:aa:34:38:51:6d:03:5f:e4:
77:e0:f3:d8:00:72:24:1c:cd:78:2e:9a:1b:08:0d:23:5d:4b:
21:ca:ce:8f:86:c7:bc:d3:1a:2f:d1:91:c0:67:b6:1d:f1:11:
a2:8c:69:4c:51:4b:1b:44:e8:8a:46:60:f7:66:59:aa:d8:4b:
3b:08:0c:8d:31:e3:ca:7b:71:d2:80:c1:f4:56:c5:55:f9:24:
69:ad:45:85:28:09:3e:7a:4b:7d:1d:4c:34:ab:ff:f8:53:38:
30:3f:1d:b8:8b:f6:19:b9:58:72:5f:37:cd:09:57:ae:7d:de:
f0:74:5b:a8:24:35:36:0f:f2:3f:29:36:80:53:bf:61:c3:14:
5b:fa:80:24:66:2a:e0:00:7d:e0:ec:0f:0d:2d:1e:3b:64:48:
c2:41:a0:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aSyA7s+kOzKTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NTNhZGE3ZmQtNDc4NS00NzM1LTliMjktNGRhZDVmYWVkM2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS1YY2GZEEvCG0bBLCJhwmoPU5nuwaAbWfHa
ePzymvGKPN4WPcT8s74UheOF9IKqgvLTOu7QE8S4pk856fPKSaeXCF/m4Jre15m7
hnwVZRnGrXUqGjlVIEVIELSocBoWzT4Hyk1OZlX6DnJfXGnRcUIvBemjRokwLq4i
oZvPD6yGd2IDXzqLE7JL4duR1eCPCRukLBaBiU3f7eQfpizUdlkWjlifCPvCDjci
HKwkk34OFo2v0M1EMJSecvKSjQUDhpRU43KVRlWgMFdsmZOHa1LsVCntHFsdJCRH
7mkGOl7jln89JiUBwuZsQGkDkZnVw+25aazi2aQupIdcuRwZIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGst6NZWTZ/mdFWQUP/Jesi7fF4bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwYmIyNjItNmFiYy0z
YjJiLWI3ZDctZmYwMTYyYjk3MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGu5Kiw7hm6j+Z9p+mx6pacrCTAb5Et0cNKr76idMWkOhndAVQJ9C6AR
pDVSFG9KfXFLSrFI0tZJvV89S18K9RsG+5dTyq9xvA1/Dh6/0iT1W7v5WbGjk9fF
t63xklUkum7+xgGqNDhRbQNf5Hfg89gAciQczXgumhsIDSNdSyHKzo+Gx7zTGi/R
kcBnth3xEaKMaUxRSxtE6IpGYPdmWarYSzsIDI0x48p7cdKAwfRWxVX5JGmtRYUo
CT56S30dTDSr//hTODA/HbiL9hm5WHJfN80JV6593vB0W6gkNTYP8j8pNoBTv2HD
FFv6gCRmKuAAfeDsDw0tHjtkSMJBoNM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:29 2025 by rpki-client