Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa
File: 4ff9a155-2a75-33cb-a2a0-853e282a294b.roa (raw, json)
Hash identifier: R3jtczbVf4wQlDDBRUQw4OCDAvZpHqRYDORQgQqkq8w=
Subject key identifier: E8:EA:DD:31:BB:A6:4D:9D:B7:EA:4F:F3:21:00:66:69:E8:13:52:5E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A427DECA4EC931739F900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:42:7d:ec:a4:ec:93:17:39:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=0d94f009-294a-49aa-9ccf-f5296eaeb981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:9d:47:86:42:83:6e:e9:cf:1c:85:18:c7:
da:b9:11:3f:e4:0a:2d:e8:68:3f:46:61:d1:8a:27:
58:ab:75:e3:a5:76:0a:a4:ab:09:56:5c:53:c1:46:
a2:a3:d7:54:85:d7:b2:6e:99:67:7f:f8:1b:92:ed:
65:3b:a2:80:ea:c1:38:15:92:16:31:3c:51:48:c0:
55:3a:11:0e:32:63:47:f0:a3:18:c3:e4:ab:93:cf:
2b:26:73:c4:d7:60:f7:58:41:46:4a:01:ac:31:d5:
06:60:99:36:7e:ed:8f:e1:c7:c9:ef:7c:e2:6d:ce:
fe:f9:78:2b:b4:7a:7a:14:da:ef:5c:96:2f:a7:22:
61:34:74:c2:d5:4d:10:85:5f:93:b6:a6:f3:ec:4b:
56:d2:ef:24:f0:dc:46:24:dc:7e:6f:69:f1:72:5b:
54:e6:a8:7a:0f:33:44:9d:3f:6b:39:06:89:ef:1b:
a8:bd:11:c6:f6:a2:12:15:54:60:a6:b4:52:bc:96:
ec:a5:d6:9a:12:66:5b:22:0e:6b:88:e8:bc:24:19:
27:7e:72:30:3a:0b:e4:32:88:8c:f4:14:5c:fa:cd:
96:4b:96:d8:bd:a7:83:b7:ff:4d:d5:5a:1d:99:ab:
52:84:b9:1c:b0:41:68:e8:f2:d7:34:b3:ff:9d:30:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:DD:31:BB:A6:4D:9D:B7:EA:4F:F3:21:00:66:69:E8:13:52:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:b0:1a:9b:69:1a:0a:bd:44:9c:22:57:d8:d3:a5:a4:9f:37:
36:f1:96:5b:9e:30:29:9e:d6:b3:01:e9:b2:07:80:be:72:7a:
6c:92:d0:27:de:a7:fe:e8:61:e4:c1:06:23:80:7b:a7:83:a4:
e9:79:c4:11:11:66:17:26:d6:9f:7c:9e:a5:18:d7:b0:32:c5:
00:4d:0e:37:f7:9a:f5:a5:11:f6:55:bf:65:52:3a:43:a9:0d:
70:50:91:eb:9e:e4:8f:14:a9:bb:93:11:3b:d6:42:9b:62:41:
38:f3:82:61:ef:60:c0:10:18:ff:26:1a:9e:3f:25:86:86:78:
39:20:1f:fd:f5:85:b0:48:87:53:21:33:2d:a6:6c:48:68:be:
4a:a9:14:44:8d:3f:71:27:fa:7c:96:8d:ff:a2:be:0f:55:c9:
9b:7a:2d:71:6a:3d:ad:65:50:84:87:71:bf:5c:d7:c7:fa:0b:
c6:b7:51:e5:5a:9b:50:cc:ac:16:20:0e:63:60:66:9c:b7:48:
68:c1:a4:2a:91:3d:46:cd:11:b4:80:4b:10:d3:22:46:57:58:
1a:7f:9a:75:13:fc:fc:f2:ad:4a:2a:a5:3e:e9:69:8e:ea:6b:
d6:46:41:16:95:74:40:7e:d8:4a:5a:05:4c:f6:9b:e6:42:86:
74:d4:c4:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkJ97KTskxc5+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MGQ5NGYwMDktMjk0YS00OWFhLTljY2YtZjUyOTZlYWViOTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnydR4ZCg27pzxyFGMfauRE/5Aot6Gg/RmHR
iidYq3XjpXYKpKsJVlxTwUaio9dUhdeybplnf/gbku1lO6KA6sE4FZIWMTxRSMBV
OhEOMmNH8KMYw+Srk88rJnPE12D3WEFGSgGsMdUGYJk2fu2P4cfJ73zibc7++Xgr
tHp6FNrvXJYvpyJhNHTC1U0QhV+Ttqbz7EtW0u8k8NxGJNx+b2nxcltU5qh6DzNE
nT9rOQaJ7xuovRHG9qISFVRgprRSvJbspdaaEmZbIg5riOi8JBknfnIwOgvkMoiM
9BRc+s2WS5bYvaeDt/9N1VodmatShLkcsEFo6PLXNLP/nTDmswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjq3TG7pk2dt+pP8yEAZmnoE1JeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZmOWExNTUtMmE3NS0z
M2NiLWEyYTAtODUzZTI4MmEyOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCwGptpGgq9RJwiV9jTpaSfNzbxllueMCme1rMB6bIHgL5yemyS0Cfe
p/7oYeTBBiOAe6eDpOl5xBERZhcm1p98nqUY17AyxQBNDjf3mvWlEfZVv2VSOkOp
DXBQkeue5I8UqbuTETvWQptiQTjzgmHvYMAQGP8mGp4/JYaGeDkgH/31hbBIh1Mh
My2mbEhovkqpFESNP3En+nyWjf+ivg9VyZt6LXFqPa1lUISHcb9c18f6C8a3UeVa
m1DMrBYgDmNgZpy3SGjBpCqRPUbNEbSASxDTIkZXWBp/mnUT/PzyrUoqpT7paY7q
a9ZGQRaVdEB+2EpaBUz2m+ZChnTUxIY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:40:21 2025 by rpki-client