Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa
File: fa0fbb5a-951e-372c-89bc-dc308489326b.roa (raw, json)
Hash identifier: EPoD2vS/sdozXR+raBQ5tvKNPxlWfRP724MVOc31PF0=
Subject key identifier: 44:86:26:70:F5:0A:3C:7B:97:28:D4:B4:08:E4:4A:7C:36:16:F0:39
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848DBD67371D247A9B60953F140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa
Signing time: Wed 12 Feb 2025 14:00:53 +0000
ROA not before: Wed 12 Feb 2025 14:00:53 +0000
ROA not after: Tue 13 May 2025 13:00:53 +0000
asID: 36183
IP address blocks: 172.225.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:db:d6:73:71:d2:47:a9:b6:09:53:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 12 14:00:53 2025 GMT
Not After : May 13 13:00:53 2025 GMT
Subject: CN=91f36af2-94eb-4f9c-bdd1-bd29a084fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:3b:97:f8:1e:3e:1d:a1:24:cf:25:d8:fe:
d4:07:ee:39:bf:ab:d6:70:f6:26:1c:05:8c:0f:6f:
d9:e8:11:ee:d8:6e:3a:bc:49:a7:b3:17:94:75:9b:
66:7b:bb:1d:33:65:53:1c:c5:4e:28:f1:f9:fa:93:
b0:e0:10:46:44:87:0a:d2:b8:b3:5e:b9:de:e1:03:
bf:0c:2e:4f:91:25:13:c5:6c:4c:91:0e:87:c9:b0:
b6:01:85:64:35:52:79:ae:ad:d3:d4:d1:e2:11:cc:
3d:a0:45:66:4b:46:18:f2:f1:ee:0d:a7:fd:59:2f:
7e:57:98:56:f8:9c:ac:1f:74:8d:59:b0:8a:09:b6:
16:86:3d:7c:71:61:2e:86:30:3c:63:b2:17:6d:ad:
46:54:66:4b:1c:62:ed:a3:28:08:bf:29:ac:02:e2:
84:61:0a:3b:ae:98:91:2b:35:ba:ed:f3:a3:b9:2c:
00:af:ec:2f:41:28:5e:7f:a0:4e:50:91:66:5f:f0:
b2:64:5a:35:37:57:91:a1:78:bb:2d:80:cf:4f:52:
50:e3:b8:51:61:db:f1:6b:5a:43:c7:d4:5f:4e:19:
b0:73:44:fc:c0:9f:86:08:9f:37:8c:e3:d6:71:0c:
57:01:f5:8a:be:2e:bb:84:d6:b0:7b:eb:30:46:c7:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:26:70:F5:0A:3C:7B:97:28:D4:B4:08:E4:4A:7C:36:16:F0:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.225.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:70:3c:75:a6:df:fd:d2:16:ed:0f:bf:5f:e8:e9:9e:89:f5:
f9:ad:a0:0d:cb:e0:7a:0c:7e:cc:89:41:52:cc:27:bd:5b:17:
fe:19:c1:1f:d4:53:28:41:0f:27:41:ed:a5:47:18:8c:ca:a4:
59:54:ad:97:82:3a:8b:b3:a8:c9:b9:41:29:92:aa:79:47:71:
00:be:f9:a4:eb:5c:25:a7:bd:eb:2c:1e:57:c2:0f:4a:2d:0b:
de:ff:f4:27:6a:24:ab:00:5d:13:b3:26:1d:7c:f7:ab:b6:22:
e3:d9:5f:74:40:71:ec:8b:91:38:bf:c8:6f:ff:da:36:ec:00:
22:99:f8:82:b9:5f:ce:86:a4:79:48:31:ac:d1:c6:e3:09:c2:
c9:6d:78:85:5c:42:61:50:3c:30:2d:3f:ae:93:ed:d6:b5:f8:
a2:8a:3f:a2:d4:99:41:f1:6c:64:44:e2:7e:80:7c:c0:ca:6b:
a7:b4:64:07:55:bb:78:71:5a:cd:1b:fd:96:bc:0f:66:e4:76:
5a:3a:d6:5c:99:66:64:aa:56:5c:2c:b7:0f:ef:1d:fe:1d:42:
8b:e0:c3:ef:e1:6d:b1:c4:4c:11:cc:35:f1:50:29:a3:c5:8a:
95:bd:bd:be:14:60:16:e8:46:77:7c:cc:17:42:de:79:a3:1e:
4d:7b:64:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1nNx0keptglT8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk
OTFmMzZhZjItOTRlYi00ZjljLWJkZDEtYmQyOWEwODRmZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HU7l/gePh2hJM8l2P7UB+45v6vWcPYmHAWM
D2/Z6BHu2G46vEmnsxeUdZtme7sdM2VTHMVOKPH5+pOw4BBGRIcK0rizXrne4QO/
DC5PkSUTxWxMkQ6HybC2AYVkNVJ5rq3T1NHiEcw9oEVmS0YY8vHuDaf9WS9+V5hW
+JysH3SNWbCKCbYWhj18cWEuhjA8Y7IXba1GVGZLHGLtoygIvymsAuKEYQo7rpiR
KzW67fOjuSwAr+wvQShef6BOUJFmX/CyZFo1N1eRoXi7LYDPT1JQ47hRYdvxa1pD
x9RfThmwc0T8wJ+GCJ83jOPWcQxXAfWKvi67hNawe+swRsddywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESGJnD1Cjx7lyjUtAjkSnw2FvA5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwZmJiNWEtOTUxZS0z
NzJjLTg5YmMtZGMzMDg0ODkzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhwPHWm3/3SFu0Pv1/o6Z6J9fmtoA3L4HoMfsyJQVLMJ71bF/4ZwR/U
UyhBDydB7aVHGIzKpFlUrZeCOouzqMm5QSmSqnlHcQC++aTrXCWnvessHlfCD0ot
C97/9CdqJKsAXROzJh1896u2IuPZX3RAceyLkTi/yG//2jbsACKZ+IK5X86GpHlI
MazRxuMJwslteIVcQmFQPDAtP66T7da1+KKKP6LUmUHxbGRE4n6AfMDKa6e0ZAdV
u3hxWs0b/Za8D2bkdlo61lyZZmSqVlwstw/vHf4dQovgw+/hbbHETBHMNfFQKaPF
ipW9vb4UYBboRnd8zBdC3nmjHk17ZBU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:01 2025 by rpki-client