Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
File: da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa (raw, json)
Hash identifier: 5ld9ZJR8kdhm7+QXUWDUWeAzUbO6yiOVquSAYHsb6qs=
Subject key identifier: B8:A1:33:AD:C1:2E:14:66:DB:BC:AD:08:D5:B2:90:1C:ED:18:1C:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DEA121AEB5C5A18196D72D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 36183
IP address blocks: 172.225.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:21:ae:b5:c5:a1:81:96:d7:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=a5159dec-d201-4269-9874-69806dfe09be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:a0:0a:66:23:e6:f6:ac:6c:21:a2:96:2e:
1e:51:6f:95:31:0c:ef:e7:59:7f:08:12:ff:d2:7c:
f0:51:11:48:93:61:cb:1a:2a:ff:1f:01:11:2a:98:
c1:10:3e:70:ff:fe:c6:e9:5c:09:fb:c8:d4:93:17:
c3:b8:2c:0f:e1:d4:44:7c:3f:74:76:80:e7:67:0c:
84:3a:41:cb:d8:55:3b:cd:d4:e0:05:1b:ea:44:b5:
64:89:c7:ad:87:17:6f:c3:dd:aa:7b:ef:19:12:a5:
a9:3b:99:29:06:b6:5f:9e:e1:b5:99:e5:f6:be:13:
52:1b:b3:2e:0e:11:87:41:41:f9:78:69:70:d4:0c:
0b:5d:2a:43:b8:0e:46:12:38:d4:48:01:e2:cc:81:
60:52:2c:80:d9:bd:cc:27:de:1b:cc:16:b7:57:5c:
d6:dd:94:fd:19:33:87:19:64:56:c0:77:15:36:59:
e2:fe:48:94:5b:86:17:15:84:f6:b0:1c:bc:e3:f0:
80:5d:09:4e:93:e5:27:21:dd:f4:25:02:69:f4:d5:
bf:64:a0:a2:a8:ad:64:5a:db:69:fd:85:a2:79:d7:
d6:10:29:06:bf:cc:c3:6c:19:a7:50:8c:ba:b9:5b:
19:84:93:a7:d6:8d:e8:f1:86:37:74:f6:2e:7c:3c:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:33:AD:C1:2E:14:66:DB:BC:AD:08:D5:B2:90:1C:ED:18:1C:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c0:59:4f:6e:ad:15:ad:6d:5a:44:08:c1:cf:85:48:a3:47:
b0:67:1f:b9:98:f5:1f:3f:12:84:8d:9c:77:b9:d9:00:74:7a:
9b:0c:d0:5d:f9:b3:a7:17:1e:bc:96:26:80:db:12:73:f4:06:
5b:23:44:e3:5c:eb:8f:fb:2c:13:3a:b8:a4:5a:6c:19:98:fc:
4f:90:c7:1c:35:f4:a5:a3:48:7e:03:04:14:4a:ef:e4:30:b2:
ed:9b:65:6f:04:29:37:51:cb:ed:cc:0a:59:bf:bd:fd:14:48:
5c:d3:b7:33:14:c3:4d:a9:11:a7:5e:59:96:76:ce:10:f5:48:
66:5f:f0:73:57:43:49:1a:e7:24:7a:49:4d:9e:67:b8:0d:17:
72:a7:be:94:8c:a6:64:10:ba:96:08:2c:81:17:b7:74:82:5b:
76:8f:c5:df:47:0f:d9:62:2e:fc:a1:cc:2c:bf:b8:7d:d5:51:
a1:2b:4f:30:68:b9:6e:57:6e:00:62:04:6d:56:17:eb:3c:34:
90:a4:14:b3:d1:c3:97:ff:8a:f9:31:57:a7:48:fd:e9:f1:2f:
b0:02:74:74:7d:36:dc:9e:93:a8:c6:0c:89:66:97:70:96:63:
7f:45:87:12:7f:27:51:fc:f2:bf:5a:18:e2:4f:8d:1f:92:a2:
a4:9f:c6:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSGutcWhgZbXLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
YTUxNTlkZWMtZDIwMS00MjY5LTk4NzQtNjk4MDZkZmUwOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPWgCmYj5vasbCGili4eUW+VMQzv51l/CBL/
0nzwURFIk2HLGir/HwERKpjBED5w//7G6VwJ+8jUkxfDuCwP4dREfD90doDnZwyE
OkHL2FU7zdTgBRvqRLVkicethxdvw92qe+8ZEqWpO5kpBrZfnuG1meX2vhNSG7Mu
DhGHQUH5eGlw1AwLXSpDuA5GEjjUSAHizIFgUiyA2b3MJ94bzBa3V1zW3ZT9GTOH
GWRWwHcVNlni/kiUW4YXFYT2sBy84/CAXQlOk+UnId30JQJp9NW/ZKCiqK1kWttp
/YWiedfWECkGv8zDbBmnUIy6uVsZhJOn1o3o8YY3dPYufDz+tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLihM63BLhRm27ytCNWykBztGBwlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE0ZTQ5MmEtNzFlMC0z
ZjZmLWE2ODMtN2RmMGNmZGViNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADAWU9urRWtbVpECMHPhUijR7BnH7mY9R8/EoSNnHe52QB0epsM0F35
s6cXHryWJoDbEnP0BlsjRONc64/7LBM6uKRabBmY/E+Qxxw19KWjSH4DBBRK7+Qw
su2bZW8EKTdRy+3MClm/vf0USFzTtzMUw02pEadeWZZ2zhD1SGZf8HNXQ0ka5yR6
SU2eZ7gNF3KnvpSMpmQQupYILIEXt3SCW3aPxd9HD9liLvyhzCy/uH3VUaErTzBo
uW5XbgBiBG1WF+s8NJCkFLPRw5f/ivkxV6dI/enxL7ACdHR9Ntyek6jGDIlml3CW
Y39FhxJ/J1H88r9aGOJPjR+SoqSfxus=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:50 2025 by rpki-client