Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa
File: d89a6660-5387-3435-b73b-203ac897b670.roa (raw, json)
Hash identifier: i0QPkmwRpiycrqNizBt/0BGUWKov6akel3R+62c3AGE=
Subject key identifier: D6:E7:F3:70:0A:F7:85:2B:AA:A8:30:2F:6B:9B:A6:99:F1:97:DD:30
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF61755145EB1B1D5F3FBBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.226.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:75:51:45:eb:1b:1d:5f:3f:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=76b72618-3def-45db-b145-8f9569dd4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:b1:ea:89:bb:61:8e:1a:f2:2a:75:13:75:
42:cf:5e:9e:26:d1:0c:1c:e1:00:26:2a:fb:cf:17:
4b:f0:84:ed:81:f0:a3:d2:8f:a1:e3:b8:43:7d:c5:
f6:91:94:dd:28:83:1d:9b:43:8f:ff:c1:0f:19:64:
f8:c0:91:b6:e9:da:cf:e1:8d:10:ce:4c:63:88:f7:
02:2f:c0:5e:e7:fc:93:bd:b8:5c:41:f4:77:36:6b:
f9:55:54:df:09:0c:55:bb:22:c2:5b:66:d0:ec:fa:
ff:04:37:9d:d0:f1:b3:bc:11:18:85:88:67:6e:fd:
da:c0:01:53:d6:c4:a6:7d:10:73:95:ce:06:fe:11:
04:e7:4b:a2:41:f0:6e:99:40:00:5f:7f:76:1a:45:
7e:7c:6e:fa:67:ad:e3:c2:da:8d:52:1e:d3:55:e9:
ea:1e:7b:cf:5f:37:ed:04:e8:19:59:71:a1:ff:32:
41:1c:72:9f:d8:78:2b:56:c4:1d:98:d3:be:f9:94:
e9:c4:75:c9:39:53:47:0b:c6:8a:a7:4d:52:66:e9:
cb:09:16:1b:e9:f4:e4:2f:ea:d9:0a:8b:65:04:b4:
86:79:42:5a:2c:6e:44:67:12:e8:75:21:f5:55:43:
3c:87:56:95:f7:49:34:02:b9:76:61:82:b6:57:09:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:F3:70:0A:F7:85:2B:AA:A8:30:2F:6B:9B:A6:99:F1:97:DD:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89a6660-5387-3435-b73b-203ac897b670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.226.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:0f:64:c8:0b:65:13:5b:87:38:a7:69:61:9a:ee:a2:3a:90:
97:fa:85:24:01:fb:9e:d7:e7:00:83:9b:44:b1:5e:b0:e7:e8:
c5:66:b2:6a:e1:c3:d3:a1:38:51:e2:bf:5a:f9:6d:f7:53:aa:
51:07:71:e7:ab:26:3c:a6:79:f4:07:2f:a1:42:ec:9a:b1:db:
a8:b9:80:27:12:c9:20:f2:6f:48:a0:ac:ce:38:ab:d8:c5:02:
cf:35:aa:e5:11:7c:b9:29:51:0e:c4:cf:bf:f3:f7:85:a4:2f:
15:7f:93:a2:1f:b5:97:93:57:8d:5c:b3:b6:17:16:01:6a:11:
ff:95:e4:ba:9f:2f:ff:c5:8a:b8:d5:27:c4:a5:d3:ae:2e:55:
4c:6c:9d:68:5d:7e:0e:de:5a:1f:3c:c9:d2:2b:2d:40:3e:9f:
b9:86:8b:2f:52:46:66:3b:b6:4a:71:87:02:88:8b:25:ec:1e:
f4:bc:03:72:ec:5a:c3:9e:6f:c4:17:18:50:f9:2b:32:22:ab:
b0:d0:ab:5a:1e:a0:da:12:87:e8:e3:4a:00:5c:86:0a:44:ce:
8f:ec:7a:35:ed:ae:32:e9:a2:3a:e5:2e:b5:33:5b:76:12:cc:
4b:85:79:a5:4f:79:ff:25:e8:75:86:4b:a6:7c:02:8b:8d:1d:
1a:3f:10:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYXVRResbHV8/u8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NzZiNzI2MTgtM2RlZi00NWRiLWIxNDUtOGY5NTY5ZGQ0OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEqx6om7YY4a8ip1E3VCz16eJtEMHOEAJir7
zxdL8ITtgfCj0o+h47hDfcX2kZTdKIMdm0OP/8EPGWT4wJG26drP4Y0QzkxjiPcC
L8Be5/yTvbhcQfR3Nmv5VVTfCQxVuyLCW2bQ7Pr/BDed0PGzvBEYhYhnbv3awAFT
1sSmfRBzlc4G/hEE50uiQfBumUAAX392GkV+fG76Z63jwtqNUh7TVenqHnvPXzft
BOgZWXGh/zJBHHKf2HgrVsQdmNO++ZTpxHXJOVNHC8aKp01SZunLCRYb6fTkL+rZ
CotlBLSGeUJaLG5EZxLodSH1VUM8h1aV90k0Arl2YYK2Vwll+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbn83AK94UrqqgwL2ubppnxl90wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDg5YTY2NjAtNTM4Ny0z
NDM1LWI3M2ItMjAzYWM4OTdiNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMPZMgLZRNbhzinaWGa7qI6kJf6hSQB+57X5wCDm0SxXrDn6MVmsmrh
w9OhOFHiv1r5bfdTqlEHceerJjymefQHL6FC7Jqx26i5gCcSySDyb0igrM44q9jF
As81quURfLkpUQ7Ez7/z94WkLxV/k6IftZeTV41cs7YXFgFqEf+V5LqfL//FirjV
J8Sl064uVUxsnWhdfg7eWh88ydIrLUA+n7mGiy9SRmY7tkpxhwKIiyXsHvS8A3Ls
WsOeb8QXGFD5KzIiq7DQq1oeoNoSh+jjSgBchgpEzo/sejXtrjLpojrlLrUzW3YS
zEuFeaVPef8l6HWGS6Z8AouNHRo/EEI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:31 2025 by rpki-client