Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa
File: 709022ba-bce3-332b-b27b-e9977a14f24c.roa (raw, json)
Hash identifier: A9ihGOmGjnYq/2C1clo2/m8KY/57W43fpErE1xuJeq8=
Subject key identifier: 0C:3C:75:1D:7F:7A:37:7B:43:7F:6B:E8:CE:61:AE:53:6A:32:DF:1D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A70E72BECCDCA5B82D480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:70:e7:2b:ec:cd:ca:5b:82:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cead2b14-07e6-4fbe-9898-a5a8553d07f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:d5:74:7f:2a:20:b2:09:6c:89:ef:e5:76:
b2:79:75:4b:fb:62:08:fe:43:d1:47:90:29:88:e8:
5f:82:c8:07:64:57:9b:11:66:86:9b:c5:c2:b0:0b:
43:97:4b:f8:16:c5:89:ad:6f:9f:19:ff:c2:1e:49:
f4:33:d8:fd:ca:84:56:ff:f7:69:80:46:6e:11:9e:
b1:8e:14:58:31:e6:3b:f3:06:ae:97:41:1e:d7:a9:
37:f8:58:b8:69:7b:be:14:f6:9f:42:36:7c:17:c1:
24:dc:32:ef:5c:b6:2f:12:95:f0:08:88:47:8d:a2:
0f:dc:69:31:38:74:1d:fb:43:63:aa:8f:80:a0:f3:
ac:f1:11:f3:00:81:e5:16:ee:f4:07:06:03:b0:da:
51:98:a9:af:4a:9f:69:ee:af:c0:c1:5e:ad:e9:a2:
5a:0e:f1:ab:2c:dd:b3:d0:53:9b:35:41:f8:96:cd:
9c:85:ce:53:db:ad:ce:eb:6a:db:43:35:ea:03:cb:
62:6d:ca:07:40:e7:23:ba:2f:ef:70:bb:8f:55:4b:
da:74:2e:1c:0e:c5:36:f1:ac:f4:94:24:cd:8f:11:
a1:df:c3:bd:40:22:64:05:20:39:55:94:2b:99:c6:
f5:be:a8:1d:9b:cb:7f:92:8e:57:58:7c:b0:80:24:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:75:1D:7F:7A:37:7B:43:7F:6B:E8:CE:61:AE:53:6A:32:DF:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:5c:c4:d4:2b:46:15:20:af:5a:f8:1f:a9:01:e4:89:98:f1:
fa:ae:40:a6:0b:90:6c:3f:92:fb:4b:78:81:d6:ee:22:92:8a:
37:af:b4:35:d6:0b:f3:e9:61:14:c2:1e:22:f5:d5:f7:ee:2b:
76:5d:27:8d:d4:dc:03:55:2d:89:a0:85:07:f7:7c:5d:4a:2d:
be:61:0a:cd:06:2c:66:12:cc:a9:39:3d:bc:e5:0d:d6:66:00:
b8:3a:0d:9e:ab:4b:29:96:b1:68:7c:e4:6e:3e:15:76:56:e5:
61:16:d6:e8:e5:f9:e0:97:d9:a2:92:54:ff:94:f5:9e:c7:dd:
57:e4:68:1d:44:9b:ad:ca:6d:67:ed:44:af:2e:9c:d6:39:48:
3a:47:9d:c4:95:4c:c4:97:26:4e:3e:7a:dc:cd:aa:37:f5:a5:
1c:8a:af:f7:e6:16:34:28:67:92:2d:c6:a7:14:60:72:58:50:
e2:df:1a:55:45:c7:dc:bc:e3:85:0b:21:f4:90:bd:c7:99:a0:
58:4c:c8:21:98:d4:f6:6a:5a:1e:a0:92:12:c5:2c:5a:83:88:
24:f8:c0:96:bd:7b:dc:bc:ca:6f:09:ed:07:b5:91:b0:b5:60:
03:d5:c0:71:50:bf:e7:db:0a:0d:c0:ef:80:c1:45:61:df:b5:
e0:16:ef:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnDnK+zNyluC1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2VhZDJiMTQtMDdlNi00ZmJlLTk4OTgtYTVhODU1M2QwN2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/PVdH8qILIJbInv5XayeXVL+2II/kPRR5Ap
iOhfgsgHZFebEWaGm8XCsAtDl0v4FsWJrW+fGf/CHkn0M9j9yoRW//dpgEZuEZ6x
jhRYMeY78waul0Ee16k3+Fi4aXu+FPafQjZ8F8Ek3DLvXLYvEpXwCIhHjaIP3Gkx
OHQd+0Njqo+AoPOs8RHzAIHlFu70BwYDsNpRmKmvSp9p7q/AwV6t6aJaDvGrLN2z
0FObNUH4ls2chc5T263O62rbQzXqA8tibcoHQOcjui/vcLuPVUvadC4cDsU28az0
lCTNjxGh38O9QCJkBSA5VZQrmcb1vqgdm8t/ko5XWHywgCQh1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAw8dR1/ejd7Q39r6M5hrlNqMt8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzA5MDIyYmEtYmNlMy0z
MzJiLWIyN2ItZTk5NzdhMTRmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPISMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVcxNQrRhUgr1r4H6kB5ImY8fquQKYLkGw/kvtLeIHW7iKSijevtDXW
C/PpYRTCHiL11ffuK3ZdJ43U3ANVLYmghQf3fF1KLb5hCs0GLGYSzKk5PbzlDdZm
ALg6DZ6rSymWsWh85G4+FXZW5WEW1ujl+eCX2aKSVP+U9Z7H3VfkaB1Em63KbWft
RK8unNY5SDpHncSVTMSXJk4+etzNqjf1pRyKr/fmFjQoZ5ItxqcUYHJYUOLfGlVF
x9y844ULIfSQvceZoFhMyCGY1PZqWh6gkhLFLFqDiCT4wJa9e9y8ym8J7Qe1kbC1
YAPVwHFQv+fbCg3A74DBRWHfteAW71c=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:51:01 2025 by rpki-client