Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa
File: c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa (raw, json)
Hash identifier: 6vDz6JST3rrKjvuVCn6I2037yz1wLgynIROiDHXyPKU=
Subject key identifier: D0:3C:AB:F6:32:67:92:BF:A3:6C:6C:D4:E3:3F:AC:94:48:53:39:A1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F926D2CCA259534E014C4680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.224.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d2:cc:a2:59:53:4e:01:4c:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=3d6f6cbf-dd4f-4f6a-b2b9-6a3de076ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:97:ed:40:5e:92:c8:cf:3a:df:c2:1d:3d:
c5:48:fb:df:d4:83:78:99:c6:c1:41:95:f6:3b:88:
40:a9:b5:aa:f5:8d:51:46:5f:a1:70:3b:9d:01:7f:
3d:4a:1c:55:a9:de:df:cd:68:4f:e9:b4:6f:8d:95:
9e:cb:cc:fa:78:04:e3:f6:13:a7:80:6e:39:f8:f7:
37:1f:16:9d:3b:2a:e3:00:c3:34:a0:b0:ed:1c:7a:
fa:eb:38:7d:16:6b:ad:55:91:4c:3f:45:9c:3e:3f:
b9:8f:95:dd:64:1f:57:1b:92:91:49:73:ce:5a:a8:
65:af:64:46:41:59:2b:55:95:1a:79:c4:06:4d:81:
1a:0c:da:56:b5:69:58:af:84:cd:08:cf:d4:d3:4a:
7d:15:ba:ca:90:79:a7:bd:c4:67:c2:e4:60:de:fa:
3e:56:7d:dc:23:8e:3c:de:e5:f1:9e:25:2e:47:fb:
6b:b5:48:58:d0:09:3d:d9:23:73:89:43:c6:13:23:
6e:2e:91:39:aa:7a:7e:17:d9:a2:bd:fe:f6:b7:05:
f0:06:5b:26:24:0d:de:e3:8c:90:bc:a1:ab:8a:d6:
44:8a:2f:99:b3:be:f0:27:c8:a3:8f:61:10:a9:32:
1d:f9:df:6f:2a:fd:b1:04:aa:d3:c2:93:b4:68:7d:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:AB:F6:32:67:92:BF:A3:6C:6C:D4:E3:3F:AC:94:48:53:39:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c08f7c4b-ac5b-3fc3-a309-b0eb506f9f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7e:e0:7c:ce:65:57:7b:a7:58:ed:72:a1:19:44:88:99:39:
8e:92:6c:b0:9e:ab:f9:4a:d6:eb:68:09:b0:ba:24:36:bd:e2:
0b:bd:91:fc:cc:ed:c5:c9:67:e1:8f:99:c6:c9:d5:da:aa:37:
8f:e9:dc:64:82:41:3c:70:3a:3e:40:00:c6:5a:50:75:16:43:
0f:21:01:cc:fe:5d:b1:1b:b8:83:63:46:e9:07:c1:4e:eb:ad:
60:6c:6e:a7:0c:73:5a:6e:33:14:13:0b:d9:0a:e0:13:5c:ec:
06:d5:ed:9d:9c:11:67:6c:a5:1d:7a:1a:42:8f:5e:8d:c8:b9:
17:ff:92:c4:48:5f:84:d8:80:d1:ee:f0:10:ca:0f:79:8f:9a:
5b:c6:8c:0b:76:8e:4e:c0:a4:a1:94:7e:5f:13:ad:43:8d:90:
44:c9:94:37:64:16:ca:0b:c1:5a:6e:63:18:44:72:4a:ad:02:
4c:da:29:3b:d3:f5:b6:71:13:67:e7:9c:c6:8f:ba:a9:a9:b3:
66:c3:42:37:dd:7c:d3:ff:2d:b9:4c:43:99:0d:f4:02:a6:81:
3a:be:4c:d0:f7:2a:18:4f:66:02:73:68:95:ab:04:97:31:81:
09:4e:dd:81:90:80:56:97:b5:a2:48:05:65:c2:02:fc:d2:13:
52:72:f5:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtLMollTTgFMRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
M2Q2ZjZjYmYtZGQ0Zi00ZjZhLWIyYjktNmEzZGUwNzZjYTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvKX7UBeksjPOt/CHT3FSPvf1IN4mcbBQZX2
O4hAqbWq9Y1RRl+hcDudAX89ShxVqd7fzWhP6bRvjZWey8z6eATj9hOngG45+Pc3
HxadOyrjAMM0oLDtHHr66zh9FmutVZFMP0WcPj+5j5XdZB9XG5KRSXPOWqhlr2RG
QVkrVZUaecQGTYEaDNpWtWlYr4TNCM/U00p9FbrKkHmnvcRnwuRg3vo+Vn3cI448
3uXxniUuR/trtUhY0Ak92SNziUPGEyNuLpE5qnp+F9mivf72twXwBlsmJA3e44yQ
vKGritZEii+Zs77wJ8ijj2EQqTId+d9vKv2xBKrTwpO0aH33owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNA8q/YyZ5K/o2xs1OM/rJRIUzmhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA4ZjdjNGItYWM1Yi0z
ZmMzLWEzMDktYjBlYjUwNmY5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACp+4HzOZVd7p1jtcqEZRIiZOY6SbLCeq/lK1utoCbC6JDa94gu9kfzM
7cXJZ+GPmcbJ1dqqN4/p3GSCQTxwOj5AAMZaUHUWQw8hAcz+XbEbuINjRukHwU7r
rWBsbqcMc1puMxQTC9kK4BNc7AbV7Z2cEWdspR16GkKPXo3IuRf/ksRIX4TYgNHu
8BDKD3mPmlvGjAt2jk7ApKGUfl8TrUONkETJlDdkFsoLwVpuYxhEckqtAkzaKTvT
9bZxE2fnnMaPuqmps2bDQjfdfNP/LblMQ5kN9AKmgTq+TND3KhhPZgJzaJWrBJcx
gQlO3YGQgFaXtaJIBWXCAvzSE1Jy9a0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:03 2025 by rpki-client