Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa
File: 989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa (raw, json)
Hash identifier: iwNkkGXpjcJK2o5yo35W+Kuv0Uw0F42A6AY+u5LAePU=
Subject key identifier: 2B:A9:70:8A:29:12:0E:47:FD:18:FE:59:84:63:67:B6:75:D6:49:18
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B03745A17F2CF602F7400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 162.72.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:03:74:5a:17:f2:cf:60:2f:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=56ca9b5d-392b-4bea-824c-006cd56bec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:05:b1:8c:3c:72:d9:a8:a1:80:b6:1f:6e:
cd:9c:1f:e2:7b:87:9d:d2:bc:86:94:03:26:d7:52:
a6:cd:44:07:26:9b:f1:4f:a6:d2:d0:dd:de:20:4b:
45:97:1e:19:42:1a:7b:69:b6:4b:6f:df:7f:8e:97:
72:02:ae:f7:99:4d:c7:c1:91:08:20:aa:bf:56:06:
fc:d0:8c:70:90:a2:d2:24:42:b2:82:c7:b2:3c:89:
5f:e9:59:ed:1d:e7:42:12:8e:be:2d:03:36:d9:f1:
f3:f6:59:63:c1:89:32:aa:88:a1:1e:d7:c5:2b:98:
9d:d1:9f:0d:96:1e:ab:d4:5e:aa:07:9d:b4:d2:9d:
72:a4:47:f6:bf:de:87:ec:80:21:18:2e:5e:d4:fa:
f1:fa:de:bc:e3:10:2f:5d:97:c5:10:83:98:66:e5:
a5:69:06:2a:a4:56:a5:ea:3a:1d:81:9d:30:b3:0a:
35:e0:fe:10:a6:df:32:78:45:6f:2a:63:d4:2f:19:
34:67:3f:f7:b5:c1:ba:6a:a2:68:c9:dd:49:79:21:
97:f6:c8:9c:6e:4b:3f:46:16:5f:dd:e6:87:16:e1:
c5:30:d0:0f:b7:6d:64:e6:e7:cc:a9:af:1c:00:8d:
52:d0:b1:0e:05:85:51:3c:12:da:e3:a8:98:ad:5d:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:70:8A:29:12:0E:47:FD:18:FE:59:84:63:67:B6:75:D6:49:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2d:a2:b1:a3:cd:17:28:da:be:be:0f:9a:71:f8:64:4f:72:
7a:22:00:81:28:81:e4:e2:30:df:08:cb:fe:a0:b0:5d:0c:e6:
58:a2:89:03:fa:e1:d4:c6:fa:c0:f5:12:92:b5:27:8a:08:88:
ea:56:b9:c5:a9:82:a6:dd:f5:44:1c:7b:01:c1:c0:e3:a0:ca:
f0:c7:5f:ed:40:b2:6e:67:51:6f:e3:c6:10:ec:5e:3c:d1:a8:
ce:2c:85:2a:15:6c:42:43:32:3d:45:a3:0d:2c:c4:8f:fe:09:
ab:40:66:b9:63:35:59:4a:f3:84:96:66:cd:d0:eb:7c:67:50:
cb:74:3d:f9:7e:43:e3:57:44:be:97:7d:7a:b1:e2:51:31:c3:
73:c7:97:37:74:2f:a1:c4:0c:bb:ce:84:ae:3d:8d:9f:12:67:
5f:b5:ce:d4:c6:28:6c:11:3b:69:29:8e:73:dd:98:09:8d:bf:
b0:e4:fa:b5:25:1b:f8:9f:fa:ac:cf:fc:fe:68:62:66:26:98:
c1:3f:47:b0:cc:91:4d:46:37:5d:51:ed:19:f4:b0:08:48:2e:
b8:42:02:86:f9:b4:4d:e5:a9:e0:c4:5a:84:85:d2:2b:b1:05:
22:53:9b:48:27:d6:a2:df:dd:8f:c2:6e:25:c3:bb:53:00:d5:
48:fe:9b:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwN0Whfyz2AvdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTZjYTliNWQtMzkyYi00YmVhLTgyNGMtMDA2Y2Q1NmJlYzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAkFsYw8ctmooYC2H27NnB/ie4ed0ryGlAMm
11KmzUQHJpvxT6bS0N3eIEtFlx4ZQhp7abZLb99/jpdyAq73mU3HwZEIIKq/Vgb8
0IxwkKLSJEKygseyPIlf6VntHedCEo6+LQM22fHz9lljwYkyqoihHtfFK5id0Z8N
lh6r1F6qB5200p1ypEf2v96H7IAhGC5e1Prx+t684xAvXZfFEIOYZuWlaQYqpFal
6jodgZ0wswo14P4Qpt8yeEVvKmPULxk0Zz/3tcG6aqJoyd1JeSGX9sicbks/RhZf
3eaHFuHFMNAPt21k5ufMqa8cAI1S0LEOBYVRPBLa46iYrV2UOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCupcIopEg5H/Rj+WYRjZ7Z11kkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTg5YzJkMDgtOWFjOC0z
ZGZlLWI4YmQtZDI3NTc1NjA0ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokihMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAActorGjzRco2r6+D5px+GRPcnoiAIEogeTiMN8Iy/6gsF0M5liiiQP6
4dTG+sD1EpK1J4oIiOpWucWpgqbd9UQcewHBwOOgyvDHX+1Asm5nUW/jxhDsXjzR
qM4shSoVbEJDMj1Fow0sxI/+CatAZrljNVlK84SWZs3Q63xnUMt0Pfl+Q+NXRL6X
fXqx4lExw3PHlzd0L6HEDLvOhK49jZ8SZ1+1ztTGKGwRO2kpjnPdmAmNv7Dk+rUl
G/if+qzP/P5oYmYmmME/R7DMkU1GN11R7Rn0sAhILrhCAob5tE3lqeDEWoSF0iux
BSJTm0gn1qLf3Y/CbiXDu1MA1Uj+mwU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:40 2025 by rpki-client