Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa
File: da88b2bd-e381-3804-af7d-337f02bc71e1.roa (raw, json)
Hash identifier: G5gzsdDihfJuianjWItfh1AVGofpQHlGkSs2SEk9yFk=
Subject key identifier: 8B:E0:89:65:0B:1D:96:B3:B2:0D:9D:C5:25:26:32:DF:60:A6:31:86
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EF61496C9E0EB8CC8CB57A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36183
IP address blocks: 172.225.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:49:6c:9e:0e:b8:cc:8c:b5:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=40883f2e-6b29-4fb3-9216-6a7bb8f2ff0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:23:d0:3b:d1:79:97:30:af:0e:c0:8c:54:
e7:f8:03:51:70:bd:65:d0:84:96:72:f2:bc:39:36:
25:70:1d:23:c8:05:f0:68:1a:f6:50:bb:ce:d0:67:
56:9a:e9:9b:b6:a5:88:ea:c2:6e:95:ea:64:00:f2:
0b:48:cc:71:76:49:89:bc:a1:0d:70:6a:81:bc:e2:
e2:67:71:70:e7:02:55:3e:a9:fd:c0:e7:5b:1a:b1:
01:ee:ac:ba:98:15:2f:79:da:9b:bf:38:32:0e:a4:
29:52:5f:35:57:07:45:e6:87:09:77:f2:cf:4c:37:
8e:04:ce:52:a9:ff:b6:37:5d:e1:ff:b1:73:54:76:
0a:7f:3c:42:5f:eb:3b:31:36:5e:e7:94:f3:34:78:
57:08:6c:d3:29:8c:e8:46:49:78:af:12:b5:11:cd:
9a:67:20:b9:1c:8c:2b:51:0a:d4:2c:08:a9:88:05:
4c:40:e2:21:1d:b7:ef:a1:71:dc:6b:e2:0d:f1:53:
48:bf:f0:96:7f:85:5a:a7:2e:34:88:b9:67:f0:7a:
62:f8:08:fa:c3:75:e0:a0:cb:24:e1:06:64:34:ee:
cc:52:96:d8:3d:0e:3b:f5:2a:25:fd:9b:ce:35:3a:
51:68:f4:90:1e:be:fe:f0:b1:f9:17:dd:66:b1:b0:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:89:65:0B:1D:96:B3:B2:0D:9D:C5:25:26:32:DF:60:A6:31:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b4:fd:52:1d:dc:a6:ad:20:15:5b:eb:4d:5f:3b:7e:57:b4:
9a:44:d4:84:83:86:68:81:9e:34:26:05:b1:d6:09:47:4a:64:
9e:89:70:a5:5b:3b:4b:3a:07:04:3c:58:cf:59:79:98:73:41:
10:07:d0:f4:9d:e4:e5:0b:89:05:50:38:1c:e5:11:76:21:0c:
21:22:79:6c:55:5b:43:58:6a:91:14:22:84:77:c5:97:7d:68:
ff:ff:00:da:09:83:ab:37:5f:98:fe:f3:ee:f0:7e:83:cd:79:
21:3c:f8:3b:6f:21:c1:9e:4b:ae:00:7a:bb:d6:c8:ec:e6:a0:
ce:e3:ba:a8:74:f7:17:d4:23:4c:f9:31:62:25:51:25:e2:dd:
f3:c3:2e:8f:ab:b8:2e:02:b4:7d:c3:27:79:94:b3:73:f0:92:
a7:53:9f:a5:80:89:8c:86:e8:b5:24:62:0d:6b:56:7e:90:f7:
cb:d4:4c:09:03:d7:43:25:99:e2:a9:52:d0:b3:66:ba:fe:1e:
96:c5:71:91:51:94:26:bb:69:8a:de:de:a1:12:65:2e:71:30:
db:ae:92:56:2f:d7:9b:49:9e:c6:95:ce:eb:7d:3c:bc:6d:5e:
a4:e3:e8:05:03:23:73:36:79:0f:3a:8a:e6:f5:a4:20:d5:3b:
21:e1:38:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUlsng64zIy1egAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDA4ODNmMmUtNmIyOS00ZmIzLTkyMTYtNmE3YmI4ZjJmZjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc4j0DvReZcwrw7AjFTn+ANRcL1l0ISWcvK8
OTYlcB0jyAXwaBr2ULvO0GdWmumbtqWI6sJulepkAPILSMxxdkmJvKENcGqBvOLi
Z3Fw5wJVPqn9wOdbGrEB7qy6mBUvedqbvzgyDqQpUl81VwdF5ocJd/LPTDeOBM5S
qf+2N13h/7FzVHYKfzxCX+s7MTZe55TzNHhXCGzTKYzoRkl4rxK1Ec2aZyC5HIwr
UQrULAipiAVMQOIhHbfvoXHca+IN8VNIv/CWf4Vapy40iLln8Hpi+Aj6w3XgoMsk
4QZkNO7MUpbYPQ479Sol/ZvONTpRaPSQHr7+8LH5F91msbBG8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvgiWULHZazsg2dxSUmMt9gpjGGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4OGIyYmQtZTM4MS0z
ODA0LWFmN2QtMzM3ZjAyYmM3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHm0/VId3KatIBVb601fO35XtJpE1ISDhmiBnjQmBbHWCUdKZJ6JcKVb
O0s6BwQ8WM9ZeZhzQRAH0PSd5OULiQVQOBzlEXYhDCEieWxVW0NYapEUIoR3xZd9
aP//ANoJg6s3X5j+8+7wfoPNeSE8+DtvIcGeS64AervWyOzmoM7juqh09xfUI0z5
MWIlUSXi3fPDLo+ruC4CtH3DJ3mUs3PwkqdTn6WAiYyG6LUkYg1rVn6Q98vUTAkD
10MlmeKpUtCzZrr+HpbFcZFRlCa7aYre3qESZS5xMNuuklYv15tJnsaVzut9PLxt
XqTj6AUDI3M2eQ86iub1pCDVOyHhODE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:28 2025 by rpki-client