Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa
File: c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa (raw, json)
Hash identifier: FLE11uBXMs99y0yHtP1Scd9ziN88GfUvEVAYIs0gkmE=
Subject key identifier: FD:AC:D8:88:F8:B7:C2:47:9F:CD:F0:88:54:6B:96:DC:E7:54:14:12
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F926B4F5D88BA2232B6B9B60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.224.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b4:f5:d8:8b:a2:23:2b:6b:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=46e7399e-ac70-40e1-83d9-b72a05e0a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:55:6f:0e:d0:a6:26:60:61:0b:dc:24:28:
33:64:3f:b9:15:32:91:43:ec:fb:2a:ed:02:ff:ff:
83:58:80:7f:72:68:0c:c1:20:3a:c7:0e:c2:f0:87:
e5:83:25:0e:97:a8:ac:7d:6a:70:ac:16:81:4a:9d:
bc:98:f5:55:9a:8b:1e:e1:48:06:cb:46:5b:39:41:
bb:25:8e:63:2e:b5:f5:06:f1:51:98:8a:7f:97:3a:
90:9e:8e:bf:a9:d0:8e:d0:d0:cb:ab:24:e0:eb:eb:
ad:da:77:d3:0e:6a:94:77:db:b0:af:3a:33:ba:be:
76:80:10:bf:e5:ec:eb:04:1f:7a:ae:8c:38:37:25:
bc:bd:d9:86:96:21:7e:2c:71:ec:bf:b2:1f:6d:b3:
da:d9:f3:e0:c4:0c:d5:57:9a:fd:93:c2:bd:e6:63:
43:56:4d:87:8e:7d:72:38:86:fc:96:60:97:f5:ba:
56:c1:b4:cc:9b:c9:fa:a6:c0:55:93:ea:99:2e:6c:
fd:12:0e:9d:6a:c1:52:45:50:90:74:e0:7e:31:91:
d9:e2:1b:11:80:81:3e:f5:f5:4d:e2:28:b1:70:14:
0e:f9:4b:3d:4b:e3:25:ad:7b:68:3d:79:5e:13:33:
39:f4:ae:43:bd:0f:28:dd:5c:4c:4f:ae:f0:3b:5b:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AC:D8:88:F8:B7:C2:47:9F:CD:F0:88:54:6B:96:DC:E7:54:14:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c88b57f5-5ca3-3cd0-9ec4-bafef35b33f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:9d:2b:f2:5b:c0:e7:52:9f:55:97:27:be:f0:3d:60:fa:d1:
7d:b8:17:f2:24:41:83:a8:5b:6b:2f:3a:11:58:ea:8c:41:4c:
79:0a:d3:26:cf:98:f6:a9:58:e0:aa:a0:72:9e:b2:f4:03:69:
93:97:f3:0d:52:40:89:22:da:95:cc:c8:db:f5:96:54:45:51:
1c:7a:87:90:5b:a9:11:36:4f:cc:f6:a2:5c:54:2d:ab:4c:bc:
0b:42:54:ea:22:5a:b0:c4:9e:fd:35:3a:9e:2a:d0:7b:93:a0:
6f:a0:b3:fc:69:c1:42:a8:22:30:86:32:ae:c1:36:bf:34:2d:
9c:dd:50:35:2e:6e:f2:a2:0a:b5:a3:c9:2f:df:c0:2d:61:7d:
6c:16:1a:92:3a:63:77:ce:7d:71:16:52:7a:f8:7c:c8:5f:84:
5c:90:2d:7a:bb:57:2b:93:53:9c:2c:e8:48:5d:b6:61:31:e6:
07:f0:29:58:45:08:ee:3b:06:42:37:b8:a6:6e:ae:43:2a:16:
93:8d:bf:21:a9:fe:87:25:14:23:93:7f:f4:ae:fb:da:99:94:
c4:d8:f4:b0:b2:c8:5b:e3:7f:21:b5:c0:44:ce:8f:14:0b:28:
9a:b7:ee:f5:96:bd:91:be:9d:14:9c:63:f5:62:9b:7a:2a:9a:
65:01:19:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrT12IuiIytrm2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDZlNzM5OWUtYWM3MC00MGUxLTgzZDktYjcyYTA1ZTBhODA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1BVbw7QpiZgYQvcJCgzZD+5FTKRQ+z7Ku0C
//+DWIB/cmgMwSA6xw7C8IflgyUOl6isfWpwrBaBSp28mPVVmose4UgGy0ZbOUG7
JY5jLrX1BvFRmIp/lzqQno6/qdCO0NDLqyTg6+ut2nfTDmqUd9uwrzozur52gBC/
5ezrBB96row4NyW8vdmGliF+LHHsv7IfbbPa2fPgxAzVV5r9k8K95mNDVk2Hjn1y
OIb8lmCX9bpWwbTMm8n6psBVk+qZLmz9Eg6dasFSRVCQdOB+MZHZ4hsRgIE+9fVN
4iixcBQO+Us9S+MlrXtoPXleEzM59K5DvQ8o3VxMT67wO1sbjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2s2Ij4t8JHn83wiFRrltznVBQSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg4YjU3ZjUtNWNhMy0z
Y2QwLTllYzQtYmFmZWYzNWIzM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmdK/JbwOdSn1WXJ77wPWD60X24F/IkQYOoW2svOhFY6oxBTHkK0ybP
mPapWOCqoHKesvQDaZOX8w1SQIki2pXMyNv1llRFURx6h5BbqRE2T8z2olxULatM
vAtCVOoiWrDEnv01Op4q0HuToG+gs/xpwUKoIjCGMq7BNr80LZzdUDUubvKiCrWj
yS/fwC1hfWwWGpI6Y3fOfXEWUnr4fMhfhFyQLXq7VyuTU5ws6EhdtmEx5gfwKVhF
CO47BkI3uKZurkMqFpONvyGp/oclFCOTf/Su+9qZlMTY9LCyyFvjfyG1wETOjxQL
KJq37vWWvZG+nRScY/Vim3oqmmUBGao=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:36 2025 by rpki-client