Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa
File: cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa (raw, json)
Hash identifier: UlhYugCb1M/zgKXZvT9UjEbEzr/W5FhPa8RUv6cTgZE=
Subject key identifier: F6:9E:93:87:64:00:ED:6F:6C:7E:A7:EE:19:E1:91:EE:BE:CC:B5:0A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F926B4BF22E2FB5F17B0AC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.224.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b4:bf:22:e2:fb:5f:17:b0:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=07cc4072-1989-40fd-8831-481027f51d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:32:0b:24:42:61:da:d5:e1:c2:cb:de:f6:
e2:e4:17:f7:64:b9:90:30:5e:e6:b7:e4:d9:e4:14:
6a:da:21:d8:9f:94:d5:68:8f:0e:5b:d1:ae:51:6c:
c1:49:88:07:a3:3d:af:34:bc:6f:d7:3e:65:44:9f:
5d:77:08:7a:aa:2d:10:23:32:0d:e3:b1:78:68:b6:
03:86:22:99:a2:5d:67:31:bc:b8:7e:b2:ed:9f:9d:
b4:97:60:c7:cc:68:46:16:a8:54:3b:72:35:32:a4:
73:11:a8:03:b3:a1:7b:14:05:77:2d:4e:b8:3e:9e:
32:e6:64:52:5b:fd:b9:62:95:66:41:39:65:de:07:
29:b6:bf:4f:e7:f9:fb:a2:01:c4:76:f1:35:be:b2:
ab:50:9d:b7:f8:76:09:4d:3c:f5:72:a5:94:83:64:
e0:5c:9a:a4:c8:f4:be:bc:fa:1c:dd:6a:38:f9:63:
e2:57:e0:26:66:38:52:02:01:4e:7c:7f:16:04:db:
e4:48:d6:b6:18:af:80:fe:13:bb:a3:4f:f9:54:20:
b5:98:e1:6d:9f:ef:1f:9c:ee:d4:9f:54:15:cd:d9:
f4:33:57:44:4f:56:9e:4f:a0:7c:6d:a7:b7:2e:24:
f6:38:e7:2c:e3:a7:7c:1c:22:e9:fe:d8:c1:6a:ab:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9E:93:87:64:00:ED:6F:6C:7E:A7:EE:19:E1:91:EE:BE:CC:B5:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2e2e57-ddcf-3aeb-bfe0-ed48b1239e8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.224.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:07:c5:af:f5:6d:e8:de:3c:b8:b4:ab:b1:13:f4:6e:a0:45:
19:35:0d:f3:a2:b8:c4:96:56:fd:86:1f:b0:e7:dc:5f:55:ec:
a7:c7:05:a8:27:9b:3e:3d:cf:09:cf:29:ed:47:d7:30:01:b7:
0d:d0:45:cf:19:75:10:2d:78:16:2b:b8:72:1a:d9:5b:56:42:
20:38:25:3d:55:c8:02:b8:2b:4f:18:9c:94:e2:b3:cf:54:57:
f3:60:bf:f7:31:bd:fe:07:97:09:f4:e0:d1:50:99:4d:53:11:
e2:4e:b7:59:14:23:b9:57:28:65:90:ad:23:c3:71:52:7c:1b:
0c:82:50:d6:ba:e9:36:3e:c0:ff:9a:86:bc:19:c4:1c:cf:df:
fc:bf:8f:f0:ea:0c:3b:d1:5c:c0:41:47:85:c0:3d:9a:a6:19:
c2:52:5c:d2:ad:6a:b8:da:f8:4e:b9:0d:0f:ce:0b:32:40:a2:
f4:ae:6f:31:98:9a:16:d8:15:1f:95:fc:1d:8b:50:9d:9e:f8:
58:f0:b0:b8:d0:9b:13:66:87:c5:19:68:43:66:f3:2f:8b:0a:
97:55:86:30:73:fa:69:64:75:56:2a:02:da:22:d1:2e:45:25:
34:03:3a:26:97:13:d2:a1:d5:35:60:a6:10:4c:f7:7a:9f:7b:
16:24:ed:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrS/IuL7XxewrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDdjYzQwNzItMTk4OS00MGZkLTg4MzEtNDgxMDI3ZjUxZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0kyCyRCYdrV4cLL3vbi5Bf3ZLmQMF7mt+TZ
5BRq2iHYn5TVaI8OW9GuUWzBSYgHoz2vNLxv1z5lRJ9ddwh6qi0QIzIN47F4aLYD
hiKZol1nMby4frLtn520l2DHzGhGFqhUO3I1MqRzEagDs6F7FAV3LU64Pp4y5mRS
W/25YpVmQTll3gcptr9P5/n7ogHEdvE1vrKrUJ23+HYJTTz1cqWUg2TgXJqkyPS+
vPoc3Wo4+WPiV+AmZjhSAgFOfH8WBNvkSNa2GK+A/hO7o0/5VCC1mOFtn+8fnO7U
n1QVzdn0M1dET1aeT6B8bae3LiT2OOcs46d8HCLp/tjBaquvhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPaek4dkAO1vbH6n7hnhke6+zLUKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyZTJlNTctZGRjZi0z
YWViLWJmZTAtZWQ0OGIxMjM5ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIHxa/1bejePLi0q7ET9G6gRRk1DfOiuMSWVv2GH7Dn3F9V7KfHBagn
mz49zwnPKe1H1zABtw3QRc8ZdRAteBYruHIa2VtWQiA4JT1VyAK4K08YnJTis89U
V/Ngv/cxvf4Hlwn04NFQmU1TEeJOt1kUI7lXKGWQrSPDcVJ8GwyCUNa66TY+wP+a
hrwZxBzP3/y/j/DqDDvRXMBBR4XAPZqmGcJSXNKtarja+E65DQ/OCzJAovSubzGY
mhbYFR+V/B2LUJ2e+FjwsLjQmxNmh8UZaENm8y+LCpdVhjBz+mlkdVYqAtoi0S5F
JTQDOiaXE9Kh1TVgphBM93qfexYk7ZE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:45 2025 by rpki-client