Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa
File: 03869d3c-77f4-3705-aed3-af0b2f180872.roa (raw, json)
Hash identifier: bC3VlL5PTNxaYRdzbNerbS3Lq7R165XE3VJjag5Uw7o=
Subject key identifier: E2:F0:B9:CE:07:8D:60:1B:1D:96:88:BD:8E:C7:BB:F0:29:4A:50:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD085B552D83E1380CEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d0:85:b5:52:d8:3e:13:80:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3b3e68df-83ed-4bb2-9727-8937389d4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:12:c7:df:77:a8:11:b5:39:1f:e9:8a:3d:
e3:a3:ae:24:6d:6d:6e:a0:6d:5d:4f:fc:11:e7:30:
96:24:98:8f:c9:74:93:4a:11:22:b3:ad:7f:9f:bb:
b2:82:c5:a5:0d:20:bb:b1:17:2b:64:4e:3f:13:d6:
b6:e3:2c:3a:d7:11:33:14:d0:5b:51:0b:e4:27:65:
76:4f:67:8c:04:69:eb:eb:74:5a:d2:bf:75:75:61:
52:57:b2:b4:82:75:af:95:20:6d:18:1e:08:ee:74:
be:1b:3f:7e:37:0e:b9:82:2b:71:f7:ff:37:7d:b9:
ed:33:ae:32:9a:f4:57:3f:0f:53:b0:62:e1:55:75:
bb:ca:ec:3b:f9:a5:bf:b3:8a:62:f1:12:15:55:08:
7e:a4:bd:f7:41:b0:ee:21:e3:10:24:84:e8:62:3e:
11:d7:cd:2e:64:20:0b:b9:a6:30:4e:99:77:f7:65:
33:3b:10:63:60:f2:61:df:a9:4a:78:4d:99:63:bc:
73:a2:bf:ea:5f:cb:c5:75:bc:43:db:f9:25:69:bb:
94:0a:92:a4:85:4e:6a:bf:c0:df:f2:40:a2:ba:73:
15:21:09:fd:26:6d:2a:4a:41:94:97:fb:a8:56:87:
62:e8:07:eb:6e:c9:58:be:93:ea:d9:c8:c7:0b:ca:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F0:B9:CE:07:8D:60:1B:1D:96:88:BD:8E:C7:BB:F0:29:4A:50:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:f1:c4:a1:7b:c5:3f:a0:48:82:c5:c0:79:79:23:1f:03:0b:
77:c1:4b:66:33:17:87:f3:bf:33:81:29:d1:86:1a:85:14:b6:
26:dd:9e:b4:fd:c4:e4:7d:d4:8e:91:67:05:36:69:ea:c6:41:
01:64:85:1c:ae:1d:27:2f:ae:f0:25:bc:5a:6a:14:8e:98:c8:
36:b3:85:2f:d6:16:eb:68:17:69:fa:17:d7:87:77:a7:71:e4:
b1:fe:f2:6f:de:ac:e6:0d:4a:ff:3a:6b:bb:e3:bd:2c:ba:21:
27:93:a5:77:34:a3:26:42:26:44:64:1f:6d:46:c2:40:37:5c:
2b:ca:80:36:99:1b:ec:13:db:bd:96:ba:48:1c:36:0d:25:e0:
87:7d:80:e5:1a:f7:bd:00:89:e1:53:ab:6a:cf:9d:86:ab:53:
24:cd:9c:dc:bb:42:7d:aa:7d:aa:fb:f8:a1:a2:1a:d5:4b:63:
75:76:d2:b9:be:5e:3b:1f:c1:59:67:39:cd:fb:7d:0c:51:5f:
33:6f:8d:3b:5e:84:0b:eb:a8:78:f6:c9:64:b6:17:bf:d4:b1:
80:11:86:19:05:6b:65:97:52:5c:14:d0:15:14:3f:0f:20:d1:
58:7a:0b:5b:10:c9:5a:f2:00:49:52:32:79:49:fd:4f:1d:98:
cc:45:95:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtCFtVLYPhOAzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
M2IzZTY4ZGYtODNlZC00YmIyLTk3MjctODkzNzM4OWQ0Y2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+cSx993qBG1OR/pij3jo64kbW1uoG1dT/wR
5zCWJJiPyXSTShEis61/n7uygsWlDSC7sRcrZE4/E9a24yw61xEzFNBbUQvkJ2V2
T2eMBGnr63Ra0r91dWFSV7K0gnWvlSBtGB4I7nS+Gz9+Nw65gitx9/83fbntM64y
mvRXPw9TsGLhVXW7yuw7+aW/s4pi8RIVVQh+pL33QbDuIeMQJIToYj4R180uZCAL
uaYwTpl392UzOxBjYPJh36lKeE2ZY7xzor/qX8vFdbxD2/klabuUCpKkhU5qv8Df
8kCiunMVIQn9Jm0qSkGUl/uoVodi6AfrbslYvpPq2cjHC8qZVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLwuc4HjWAbHZaIvY7Hu/ApSlCYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDM4NjlkM2MtNzdmNC0z
NzA1LWFlZDMtYWYwYjJmMTgwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK15MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHDxxKF7xT+gSILFwHl5Ix8DC3fBS2YzF4fzvzOBKdGGGoUUtibdnrT9
xOR91I6RZwU2aerGQQFkhRyuHScvrvAlvFpqFI6YyDazhS/WFutoF2n6F9eHd6dx
5LH+8m/erOYNSv86a7vjvSy6ISeTpXc0oyZCJkRkH21GwkA3XCvKgDaZG+wT272W
ukgcNg0l4Id9gOUa970AieFTq2rPnYarUyTNnNy7Qn2qfar7+KGiGtVLY3V20rm+
XjsfwVlnOc37fQxRXzNvjTtehAvrqHj2yWS2F7/UsYARhhkFa2WXUlwU0BUUPw8g
0Vh6C1sQyVryAElSMnlJ/U8dmMxFlUI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:20 2025 by rpki-client