Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa
File: 9aa09022-f085-32b2-a4a0-806657394db8.roa (raw, json)
Hash identifier: CS5OmTUINSxynsB5dVVW5VkHflaNLcoWRz2z5G65tFU=
Subject key identifier: FC:57:F1:79:2E:BB:07:AE:5B:55:48:CB:88:D0:A2:39:EF:1F:B4:F9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A71FCBA8BE85A542B9E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:71:fc:ba:8b:e8:5a:54:2b:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5cf202b0-5ea3-42d3-87e1-5ded6c668dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:32:ac:17:ae:eb:1e:3c:05:3e:15:44:fa:
de:89:db:47:47:57:66:1c:6b:ec:f6:bc:b2:e2:1d:
80:ef:3c:74:9b:b0:02:26:e2:0f:e2:18:e6:ba:7c:
c9:a1:b4:50:d2:72:d7:c0:52:f5:be:32:b7:16:14:
00:83:92:dd:22:b4:cf:f3:2e:98:6c:c9:81:80:64:
b4:b0:18:7f:02:1f:70:ce:71:ae:f2:11:23:d6:02:
43:de:79:ab:28:79:7f:53:2d:a6:68:b0:46:52:ff:
71:1c:64:15:bf:d1:17:3c:1e:69:98:d8:c4:87:ab:
30:22:78:26:b2:f2:06:47:f3:34:94:8f:a1:8e:ae:
f2:90:be:84:d5:82:8d:f8:53:b2:26:ad:d1:57:e3:
f0:45:e1:35:a2:55:48:29:43:79:10:52:39:3a:e4:
e1:fc:b6:76:32:91:ea:ed:da:4f:ff:4b:1c:d9:ac:
cd:41:00:d5:94:b5:34:1f:b4:f5:01:c2:11:00:6f:
c9:b4:a0:ee:c9:ff:b7:e7:f7:d4:90:45:6f:b7:8f:
8b:fc:7f:0b:d8:97:98:6c:1a:9c:30:c9:2a:64:6e:
e0:b1:cb:f5:0b:e2:52:ae:1b:c6:b9:31:14:e5:a5:
bf:41:6b:c1:84:42:78:ed:39:9b:9e:b2:43:50:32:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:F1:79:2E:BB:07:AE:5B:55:48:CB:88:D0:A2:39:EF:1F:B4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:5c:6d:df:91:7b:63:82:38:50:d0:dd:f2:30:9b:f1:58:be:
2c:f1:12:a7:00:d1:df:44:b1:35:0a:ec:24:35:88:80:63:d1:
e3:ce:db:e6:e0:16:28:0b:e9:46:a3:3a:1b:16:63:5c:82:c9:
4e:44:22:58:1b:c2:36:ad:a3:58:89:83:f9:02:03:4d:85:26:
27:c7:7d:62:f0:53:56:dd:72:c1:8d:e0:31:dc:4a:42:d9:7d:
30:27:58:0b:1d:39:80:6a:be:81:56:8e:67:9a:d5:90:ff:74:
95:49:e9:ad:cd:cf:76:45:bc:6a:81:18:75:0f:75:4a:0d:78:
ae:f1:18:fb:d7:89:f1:b8:34:c7:ed:67:d4:4e:44:12:f9:54:
7c:1e:ef:00:cf:d9:a2:a7:a3:fe:e1:8f:15:fa:99:b8:c5:54:
ed:e6:b2:7a:4d:1d:f2:19:f1:38:b5:ec:2e:04:0a:5a:de:2c:
8a:ca:ec:6d:aa:fa:e8:73:91:ef:d4:2d:46:cc:12:b4:e6:c2:
eb:db:fb:0e:27:83:7b:fd:19:d5:7d:c6:63:02:21:ad:96:50:
d7:d5:9b:76:ea:23:e8:bf:f7:33:4c:13:d4:63:5a:46:fe:18:
92:89:09:1d:ea:8a:67:48:c4:e1:bf:5d:fa:3a:2a:bf:ba:ae:
fc:da:c7:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnH8uovoWlQrnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NWNmMjAyYjAtNWVhMy00MmQzLTg3ZTEtNWRlZDZjNjY4ZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNAyrBeu6x48BT4VRPreidtHR1dmHGvs9ryy
4h2A7zx0m7ACJuIP4hjmunzJobRQ0nLXwFL1vjK3FhQAg5LdIrTP8y6YbMmBgGS0
sBh/Ah9wznGu8hEj1gJD3nmrKHl/Uy2maLBGUv9xHGQVv9EXPB5pmNjEh6swIngm
svIGR/M0lI+hjq7ykL6E1YKN+FOyJq3RV+PwReE1olVIKUN5EFI5OuTh/LZ2MpHq
7dpP/0sc2azNQQDVlLU0H7T1AcIRAG/JtKDuyf+35/fUkEVvt4+L/H8L2JeYbBqc
MMkqZG7gscv1C+JSrhvGuTEU5aW/QWvBhEJ47TmbnrJDUDL/mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxX8XkuuweuW1VIy4jQojnvH7T5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWFhMDkwMjItZjA4NS0z
MmIyLWE0YTAtODA2NjU3Mzk0ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZcbd+Re2OCOFDQ3fIwm/FYvizxEqcA0d9EsTUK7CQ1iIBj0ePO2+bg
FigL6UajOhsWY1yCyU5EIlgbwjato1iJg/kCA02FJifHfWLwU1bdcsGN4DHcSkLZ
fTAnWAsdOYBqvoFWjmea1ZD/dJVJ6a3Nz3ZFvGqBGHUPdUoNeK7xGPvXifG4NMft
Z9RORBL5VHwe7wDP2aKno/7hjxX6mbjFVO3msnpNHfIZ8Ti17C4EClreLIrK7G2q
+uhzke/ULUbMErTmwuvb+w4ng3v9GdV9xmMCIa2WUNfVm3bqI+i/9zNME9RjWkb+
GJKJCR3qimdIxOG/Xfo6Kr+6rvzax/I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:55 2025 by rpki-client