Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
File: 638d0c7c-5c12-3419-add7-d1fee46c98fa.roa (raw, json)
Hash identifier: RIkyzYlRd9QP3KrsEa6KqdeprXePFUN53BsjNG/KYjY=
Subject key identifier: A8:A9:A0:CA:F4:48:46:3A:18:AB:5A:21:60:26:9E:B6:15:62:47:DC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A743D7C8C3A77C781EEA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:74:3d:7c:8c:3a:77:c7:81:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=52ffc388-a9a0-4833-a8e8-12a5ebdd2e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cc:46:2f:37:40:32:42:26:e7:af:83:7a:83:
95:57:25:55:e0:73:60:d7:41:fa:24:3e:ef:2b:9f:
0d:28:8b:4a:d1:ef:66:97:4f:99:7b:95:54:71:04:
79:47:67:b1:8c:cc:85:df:c8:98:9c:8d:89:3d:fa:
83:bc:f9:c0:3e:31:bc:0a:2c:0e:be:a7:1f:1a:b5:
71:c5:88:80:79:4c:47:8e:e5:d9:a6:ca:0d:25:23:
f2:7f:5d:60:8d:dc:94:3d:87:ed:5d:51:43:b8:34:
d6:fc:e6:65:5a:2c:89:6b:60:97:7a:72:74:f8:78:
e4:6d:2f:d8:3e:a0:08:65:98:d8:0d:a6:49:3c:d6:
36:9f:b3:50:8e:d1:fc:b7:62:cd:7a:73:dd:9d:e6:
f3:de:b7:63:6f:23:75:80:15:14:83:44:bc:5a:20:
da:e6:bd:3a:b5:78:81:20:05:9c:1d:b6:02:d7:10:
e4:1c:10:8d:8d:cb:58:2f:f9:dd:bd:a6:72:33:7d:
d6:a4:68:07:40:55:2c:86:bc:fd:d5:e8:9d:ed:91:
dd:48:79:fa:d7:e6:50:39:9a:cf:e4:9b:38:90:58:
bd:02:a3:95:5a:a4:c7:19:69:40:33:7a:49:07:27:
2e:91:0a:d3:d0:8d:52:59:9c:38:60:6c:32:ea:2f:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:A0:CA:F4:48:46:3A:18:AB:5A:21:60:26:9E:B6:15:62:47:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:a4:bd:a6:7a:6d:5d:4a:c7:8e:cc:6c:b0:bd:04:7f:c8:a5:
8a:c6:71:8b:3d:c1:74:12:cc:3f:11:75:70:46:4c:10:80:50:
3f:4d:39:3f:7c:b2:cd:2a:88:55:a7:69:11:43:44:6b:f8:35:
7c:54:fe:7b:d1:3e:2a:18:85:a8:20:22:f3:e9:be:ca:74:82:
aa:99:51:3a:8a:fc:c9:aa:d2:34:0e:c8:4b:20:40:87:cb:78:
5d:41:81:46:b4:4d:ab:b7:92:9e:10:02:be:e0:f8:19:7f:2a:
f1:e5:de:a3:c1:8f:a0:6e:d8:22:90:0a:7b:12:bc:55:9b:5b:
68:a1:77:bc:39:15:62:9e:4f:b2:be:44:9f:63:d1:de:91:8e:
65:8d:1f:8a:6e:22:c9:9c:93:e9:77:d3:6d:c5:18:a2:c9:dc:
c0:1a:95:72:6b:bb:cf:b5:97:67:cc:0f:f8:15:36:6b:8a:aa:
ba:7b:16:1f:99:6c:4a:f8:65:8b:7d:12:b1:aa:1a:0f:1a:02:
ca:c7:31:84:1a:5c:43:c7:57:1e:71:31:91:05:05:1a:06:ea:
81:53:44:d3:4d:7d:6b:ec:80:82:a9:3a:b4:52:69:a9:52:cc:
0d:78:eb:d8:e0:77:c3:80:d5:3a:1a:09:59:a5:b5:58:fa:3e:
00:19:6a:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnQ9fIw6d8eB7qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTJmZmMzODgtYTlhMC00ODMzLWE4ZTgtMTJhNWViZGQyZThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsxGLzdAMkIm56+DeoOVVyVV4HNg10H6JD7v
K58NKItK0e9ml0+Ze5VUcQR5R2exjMyF38iYnI2JPfqDvPnAPjG8CiwOvqcfGrVx
xYiAeUxHjuXZpsoNJSPyf11gjdyUPYftXVFDuDTW/OZlWiyJa2CXenJ0+HjkbS/Y
PqAIZZjYDaZJPNY2n7NQjtH8t2LNenPdnebz3rdjbyN1gBUUg0S8WiDa5r06tXiB
IAWcHbYC1xDkHBCNjctYL/ndvaZyM33WpGgHQFUshrz91eid7ZHdSHn61+ZQOZrP
5Js4kFi9AqOVWqTHGWlAM3pJBycukQrT0I1SWZw4YGwy6i/7fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKipoMr0SEY6GKtaIWAmnrYVYkfcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM4ZDBjN2MtNWMxMi0z
NDE5LWFkZDctZDFmZWU0NmM5OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2kvaZ6bV1Kx47MbLC9BH/IpYrGcYs9wXQSzD8RdXBGTBCAUD9NOT98
ss0qiFWnaRFDRGv4NXxU/nvRPioYhaggIvPpvsp0gqqZUTqK/Mmq0jQOyEsgQIfL
eF1BgUa0Tau3kp4QAr7g+Bl/KvHl3qPBj6Bu2CKQCnsSvFWbW2ihd7w5FWKeT7K+
RJ9j0d6RjmWNH4puIsmck+l3023FGKLJ3MAalXJru8+1l2fMD/gVNmuKqrp7Fh+Z
bEr4ZYt9ErGqGg8aAsrHMYQaXEPHVx5xMZEFBRoG6oFTRNNNfWvsgIKpOrRSaalS
zA1469jgd8OA1ToaCVmltVj6PgAZanY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:25 2025 by rpki-client