Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eee6e5fe-41ce-3911-be71-0f8976eef295.roa
File: eee6e5fe-41ce-3911-be71-0f8976eef295.roa (raw, json)
Hash identifier: giCdKYqbRI9K8xOjMoKWHZccobuWDrNBTRs2yncVhWc=
Subject key identifier: 29:9F:E8:AE:B5:64:0E:3A:75:C9:9E:96:32:5A:A1:55:7C:E3:1F:32
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848E2D1A49067D3F094E45E20A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eee6e5fe-41ce-3911-be71-0f8976eef295.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 36183
IP address blocks: 172.225.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:a4:90:67:d3:f0:94:e4:5e:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=aed9a728-54ca-4433-ba46-370f96c37934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:b3:f1:68:41:e8:d7:70:8f:05:4e:6e:e9:
3b:8e:5f:7c:04:88:62:0b:84:00:7a:e9:23:d6:58:
ad:b6:bd:d1:ea:e8:29:d4:d6:8b:c1:59:78:41:05:
06:da:63:22:b7:3c:03:08:a2:e6:ae:04:42:5d:77:
95:26:57:67:29:07:8e:4d:54:2b:dd:2c:6b:63:86:
bd:c9:cb:fd:0d:1e:80:d2:f5:7d:03:1a:ac:61:ad:
61:7a:e3:d2:05:db:25:54:4a:cf:61:bd:fe:b6:70:
f4:e3:6f:bc:0a:96:24:71:14:a1:e6:ae:7f:f2:25:
4b:1d:4b:9e:5a:17:61:6c:1b:9f:f4:73:46:da:86:
57:a1:fe:b6:5d:d0:b8:e6:33:2c:03:42:35:00:4d:
2a:3a:6c:e4:b1:99:36:9a:aa:b9:11:cc:65:ce:e5:
9d:4c:43:60:48:59:04:6f:ad:7b:51:60:2f:a9:a0:
7a:89:51:9d:9d:e8:7a:46:2e:84:33:4a:80:c9:e1:
c4:5c:11:45:a0:82:89:38:29:ff:e4:ac:07:4c:16:
ec:51:45:cc:33:08:12:31:35:f3:c3:9d:c2:79:d7:
96:b4:76:96:55:f0:0c:f5:4f:a3:cd:21:0e:94:f6:
32:08:d7:b5:12:f9:4a:32:28:64:0c:a7:5f:3a:f5:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9F:E8:AE:B5:64:0E:3A:75:C9:9E:96:32:5A:A1:55:7C:E3:1F:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eee6e5fe-41ce-3911-be71-0f8976eef295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:40:f8:91:c2:8a:01:82:ad:71:07:25:56:3b:c2:a2:48:63:
6e:df:05:60:4a:31:f2:9d:91:9a:1b:b4:e8:f9:21:fd:b2:a2:
9a:0a:d5:fe:da:a0:d0:57:7f:ef:18:01:a0:38:d7:61:61:e4:
8a:53:96:fd:48:08:f5:49:95:71:2f:10:ed:93:01:7a:cf:45:
2c:56:2a:5c:89:5d:50:ad:ec:4c:5b:c3:a0:d7:5a:b4:78:1b:
f8:98:52:6c:6c:53:a3:44:11:01:43:ab:7b:f9:49:04:bf:0e:
45:bc:4f:fd:af:39:b8:a8:96:dd:96:34:12:53:07:89:94:dc:
3c:a1:a2:d6:81:1a:af:2c:ce:50:54:73:4c:c3:ca:e8:5d:52:
7d:0d:20:10:b1:15:39:0b:d8:9c:bf:ae:0d:00:da:12:ac:ff:
88:10:5a:be:4a:eb:9f:a1:c8:98:67:81:3b:9a:39:1e:a0:ec:
91:42:eb:1a:f7:c4:39:47:58:98:1c:99:c0:3e:b2:d6:04:01:
26:9d:d2:95:70:f2:4a:90:14:b4:ad:d6:cf:1d:98:d8:fe:0b:
bd:f2:d1:53:51:77:20:29:d1:3e:1a:1e:9e:ea:e2:b3:e9:0b:
c3:eb:63:37:f3:95:71:45:7a:c2:da:23:0c:7e:ca:d9:71:a0:
a7:fd:11:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aSQZ9PwlOReIKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
YWVkOWE3MjgtNTRjYS00NDMzLWJhNDYtMzcwZjk2YzM3OTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcez8WhB6NdwjwVObuk7jl98BIhiC4QAeukj
1littr3R6ugp1NaLwVl4QQUG2mMitzwDCKLmrgRCXXeVJldnKQeOTVQr3SxrY4a9
ycv9DR6A0vV9AxqsYa1heuPSBdslVErPYb3+tnD042+8CpYkcRSh5q5/8iVLHUue
WhdhbBuf9HNG2oZXof62XdC45jMsA0I1AE0qOmzksZk2mqq5EcxlzuWdTENgSFkE
b617UWAvqaB6iVGdneh6Ri6EM0qAyeHEXBFFoIKJOCn/5KwHTBbsUUXMMwgSMTXz
w53CedeWtHaWVfAM9U+jzSEOlPYyCNe1EvlKMihkDKdfOvW8ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmf6K61ZA46dcmeljJaoVV84x8yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWVlNmU1ZmUtNDFjZS0z
OTExLWJlNzEtMGY4OTc2ZWVmMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNA+JHCigGCrXEHJVY7wqJIY27fBWBKMfKdkZobtOj5If2yopoK1f7a
oNBXf+8YAaA412Fh5IpTlv1ICPVJlXEvEO2TAXrPRSxWKlyJXVCt7Exbw6DXWrR4
G/iYUmxsU6NEEQFDq3v5SQS/DkW8T/2vObiolt2WNBJTB4mU3DyhotaBGq8szlBU
c0zDyuhdUn0NIBCxFTkL2Jy/rg0A2hKs/4gQWr5K65+hyJhngTuaOR6g7JFC6xr3
xDlHWJgcmcA+stYEASad0pVw8kqQFLSt1s8dmNj+C73y0VNRdyAp0T4aHp7q4rPp
C8PrYzfzlXFFesLaIwx+ytlxoKf9EQw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:33 2025 by rpki-client