Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa
File: 1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa (raw, json)
Hash identifier: q5F4Hvpx1HRRjMpxo4eSpENO5HADV471kuEr5wWfNt8=
Subject key identifier: 4C:B6:C2:63:5F:9A:67:A1:F5:3C:80:6A:53:1D:BB:70:14:E5:70:3D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A37F12A949ABE9D645D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:37:f1:2a:94:9a:be:9d:64:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d52736d6-6307-4dac-b0aa-550160aaaa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:4d:af:dc:48:08:82:5b:9a:6f:75:47:b2:
fb:bf:ff:61:10:10:0d:35:4a:6a:60:91:34:07:f3:
46:fe:bf:2f:1d:3a:2b:81:9c:04:9a:16:d3:86:ed:
fd:1f:d0:57:75:1e:a2:73:0d:ae:d0:27:6a:a5:41:
a2:3b:b5:e7:5a:82:48:2e:76:27:6c:58:4b:35:eb:
04:98:5d:54:38:05:64:b2:fb:d9:4a:b8:05:d7:64:
82:c6:db:52:5c:b1:86:71:80:54:4f:d5:09:fa:1f:
b8:12:1b:4b:59:ca:b4:3c:23:e1:a7:be:7b:e9:6c:
f9:e4:04:57:27:26:de:71:11:07:51:d8:a6:e3:c1:
f1:0d:99:c0:34:23:0e:ba:91:8d:e9:a9:42:50:f0:
4b:fe:3a:d3:ff:88:9d:d3:04:39:e4:e0:a4:8d:78:
92:0c:0b:d1:bf:ae:74:b8:ea:54:8e:37:d2:08:28:
0d:6a:41:f0:73:a5:bf:a1:23:90:a7:ce:97:04:24:
b2:6b:c2:a8:60:bc:63:1a:da:16:4f:f0:f9:70:87:
a6:c2:2f:72:a1:b0:68:e2:5e:8c:e5:92:8b:70:b5:
56:17:18:5c:47:52:64:62:ef:b9:20:fb:c3:df:bc:
21:60:4d:36:84:ad:47:91:02:52:d6:a5:c7:41:f0:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:C2:63:5F:9A:67:A1:F5:3C:80:6A:53:1D:BB:70:14:E5:70:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:1d:c8:7c:4a:45:64:99:da:ef:9f:87:f7:2a:f8:04:ad:33:
d2:fe:5c:f1:31:97:e1:37:f4:9e:eb:61:4a:3f:17:ab:5f:19:
93:28:a6:d2:fd:7a:f6:82:63:c7:1b:25:a5:0b:b3:5d:83:84:
d4:7b:33:3c:1d:a3:e8:c1:4f:9b:9c:1e:d6:87:01:b6:4a:e9:
42:6b:c4:eb:87:b5:fb:e9:8f:32:ee:05:92:4b:d5:d9:54:db:
d7:e6:2f:96:d2:9c:b5:11:7d:d4:6f:54:be:ea:04:f1:1f:ac:
9d:3b:19:a7:99:a0:8c:90:fe:73:30:f9:86:68:a5:81:9d:26:
04:c4:52:34:4c:8b:92:88:b9:3b:a8:26:8d:91:de:3b:81:25:
2b:b3:b6:ba:e1:63:d6:9c:e8:11:7b:b8:35:06:25:b8:68:09:
b6:e5:e0:f0:15:9c:1a:13:53:fd:ea:a8:57:61:f2:a2:b9:ce:
9a:57:5c:6d:27:48:08:00:e5:1b:63:3e:6a:d4:d3:38:03:99:
d9:d3:f7:8c:43:94:12:b3:93:ab:4e:fe:86:67:eb:78:12:5b:
c3:b0:7b:32:a8:2e:5e:5b:e7:0a:fc:0b:60:37:8f:44:92:2b:
39:45:ae:dc:a9:07:a5:4a:fc:c0:32:da:30:82:63:ad:dc:91:
24:3c:c0:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjfxKpSavp1kXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDUyNzM2ZDYtNjMwNy00ZGFjLWIwYWEtNTUwMTYwYWFhYTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNRNr9xICIJbmm91R7L7v/9hEBANNUpqYJE0
B/NG/r8vHTorgZwEmhbThu39H9BXdR6icw2u0CdqpUGiO7XnWoJILnYnbFhLNesE
mF1UOAVksvvZSrgF12SCxttSXLGGcYBUT9UJ+h+4EhtLWcq0PCPhp7576Wz55ARX
JybecREHUdim48HxDZnANCMOupGN6alCUPBL/jrT/4id0wQ55OCkjXiSDAvRv650
uOpUjjfSCCgNakHwc6W/oSOQp86XBCSya8KoYLxjGtoWT/D5cIemwi9yobBo4l6M
5ZKLcLVWFxhcR1JkYu+5IPvD37whYE02hK1HkQJS1qXHQfAi/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEy2wmNfmmeh9TyAalMdu3AU5XA9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWY0YzFiMmUtZGRiZi0z
NTNjLTk4ZTEtNzE1Y2JlNjllMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8dyHxKRWSZ2u+fh/cq+AStM9L+XPExl+E39J7rYUo/F6tfGZMoptL9
evaCY8cbJaULs12DhNR7Mzwdo+jBT5ucHtaHAbZK6UJrxOuHtfvpjzLuBZJL1dlU
29fmL5bSnLURfdRvVL7qBPEfrJ07GaeZoIyQ/nMw+YZopYGdJgTEUjRMi5KIuTuo
Jo2R3juBJSuztrrhY9ac6BF7uDUGJbhoCbbl4PAVnBoTU/3qqFdh8qK5zppXXG0n
SAgA5RtjPmrU0zgDmdnT94xDlBKzk6tO/oZn63gSW8OwezKoLl5b5wr8C2A3j0SS
KzlFrtypB6VK/MAy2jCCY63ckSQ8wNc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:53:23 2025 by rpki-client