Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa
File: 9c1be859-b42c-3b7e-b47c-e4434a583204.roa (raw, json)
Hash identifier: 3UW/OF+0TEdKSzOl7fouP12vKOhzOkBhLnytdzaFMIg=
Subject key identifier: 0A:F5:F4:EB:7C:8E:82:77:18:12:AD:B8:4B:45:E4:71:E3:71:7F:50
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A454EE7B4F2619B620740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 75.104.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:45:4e:e7:b4:f2:61:9b:62:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7aefe357-50fd-4ef2-bb3b-e3db0da632fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:9b:a3:5c:e6:c5:81:53:ce:d3:26:8f:47:
23:a0:40:b7:3d:6e:eb:04:a6:ae:29:22:a3:5d:a7:
28:7c:c9:5a:f1:ac:1a:de:74:fe:0a:63:46:b7:0a:
ee:1c:06:98:f3:ef:67:1f:fd:d4:f3:c6:6e:31:87:
61:83:a1:07:0e:7a:a1:fe:15:c1:65:bf:bf:f6:a1:
a0:1d:65:63:2a:38:4a:e0:88:3f:41:7c:a3:ef:86:
92:25:09:5b:94:bc:84:e5:0d:21:02:e1:64:43:8c:
e5:47:a6:10:aa:db:be:13:14:6b:91:a0:7f:54:b4:
9f:e5:69:07:df:13:52:6f:05:80:10:01:1a:97:07:
50:e5:c4:9a:60:f2:82:5e:07:d8:1a:b0:64:29:01:
d5:17:2a:87:5b:7b:1d:07:59:b1:6f:a3:e8:6f:fc:
75:a9:5c:be:a0:4c:37:b0:91:f9:68:2c:e8:d3:13:
4d:a5:db:03:c5:8a:45:79:c5:23:8e:12:3b:d4:39:
8e:da:43:a6:6b:02:66:a3:8b:b3:3f:65:3b:0d:10:
3f:0b:67:1b:47:37:09:4d:21:e6:96:c9:d5:dc:0f:
2b:83:d7:18:8d:38:d1:75:d0:47:4f:03:1d:7b:9a:
38:c2:f1:2c:05:32:7f:5f:67:8b:71:2e:7f:0c:87:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:F4:EB:7C:8E:82:77:18:12:AD:B8:4B:45:E4:71:E3:71:7F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c1be859-b42c-3b7e-b47c-e4434a583204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:19:0c:e4:d6:77:1a:d9:bc:4f:13:11:d5:61:46:3c:cd:1f:
c1:d5:c2:eb:13:02:76:d6:3f:aa:ef:ec:c3:a3:db:c2:96:2e:
86:6b:0e:48:60:0f:cb:23:86:94:38:8c:b0:94:7f:36:66:c2:
f8:22:22:2b:d3:4f:8b:f3:f4:d2:b6:6f:97:60:16:9c:8f:60:
5a:19:1d:7d:cd:f1:a9:23:59:13:39:7a:00:b9:4f:bf:30:02:
5d:f6:e7:62:dc:16:3e:a5:82:33:99:27:e9:c7:c4:e6:5f:ed:
8f:a6:e2:43:db:87:ae:62:62:23:4a:b9:22:56:33:e1:96:ce:
fa:6a:80:d3:8e:f8:f5:6a:98:33:ed:d1:93:a4:0d:1b:68:9a:
7b:3f:55:b6:54:00:63:32:1b:ab:15:a9:4e:34:96:90:1b:3c:
ed:85:91:e5:08:70:35:e0:77:be:5a:f4:05:c0:b1:0b:56:8f:
d5:a5:0e:eb:29:5a:9d:c8:a2:59:6b:e1:6c:f5:a8:1d:9b:73:
36:6f:27:d8:c9:0b:eb:f3:6b:a9:61:d0:bf:ce:35:2b:a6:47:
14:28:17:b8:b0:0a:49:44:70:08:6d:4c:b9:c2:89:7c:f2:7b:
52:80:86:9a:c7:57:a7:6d:6d:eb:66:4c:b5:ef:b2:80:6a:87:
b9:eb:08:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkVO57TyYZtiB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
N2FlZmUzNTctNTBmZC00ZWYyLWJiM2ItZTNkYjBkYTYzMmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT6bo1zmxYFTztMmj0cjoEC3PW7rBKauKSKj
XacofMla8awa3nT+CmNGtwruHAaY8+9nH/3U88ZuMYdhg6EHDnqh/hXBZb+/9qGg
HWVjKjhK4Ig/QXyj74aSJQlblLyE5Q0hAuFkQ4zlR6YQqtu+ExRrkaB/VLSf5WkH
3xNSbwWAEAEalwdQ5cSaYPKCXgfYGrBkKQHVFyqHW3sdB1mxb6Pob/x1qVy+oEw3
sJH5aCzo0xNNpdsDxYpFecUjjhI71DmO2kOmawJmo4uzP2U7DRA/C2cbRzcJTSHm
lsnV3A8rg9cYjTjRddBHTwMde5o4wvEsBTJ/X2eLcS5/DIf03wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAr19Ot8joJ3GBKtuEtF5HHjcX9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWMxYmU4NTktYjQyYy0z
YjdlLWI0N2MtZTQ0MzRhNTgzMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYZDOTWdxrZvE8TEdVhRjzNH8HVwusTAnbWP6rv7MOj28KWLoZrDkhg
D8sjhpQ4jLCUfzZmwvgiIivTT4vz9NK2b5dgFpyPYFoZHX3N8akjWRM5egC5T78w
Al3252LcFj6lgjOZJ+nHxOZf7Y+m4kPbh65iYiNKuSJWM+GWzvpqgNOO+PVqmDPt
0ZOkDRtomns/VbZUAGMyG6sVqU40lpAbPO2FkeUIcDXgd75a9AXAsQtWj9WlDusp
Wp3Iollr4Wz1qB2bczZvJ9jJC+vza6lh0L/ONSumRxQoF7iwCklEcAhtTLnCiXzy
e1KAhprHV6dtbetmTLXvsoBqh7nrCMI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:02 2025 by rpki-client