Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
File: a6a73760-9990-3ce6-970f-de482b5a0755.roa (raw, json)
Hash identifier: nypcULhmuECSeHEC0jYTt7klvTSGpQlyGC8569oEDeM=
Subject key identifier: 1B:5F:F9:39:0B:B9:49:F7:34:B1:CD:51:EA:41:13:04:CB:79:A9:3F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A98081DC2DA2D8E92E900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:98:08:1d:c2:da:2d:8e:92:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d3dccaa6-50f6-4363-8f31-cae219eee9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:4d:13:40:36:0e:e5:1d:f2:4d:4c:fd:a6:
5a:91:4b:09:2c:54:35:50:eb:e0:30:be:ce:ca:14:
cc:4c:05:83:ec:63:81:0f:1a:26:c7:83:e4:f4:5b:
75:e6:c3:9e:8f:73:c7:4a:fd:f8:13:89:47:5c:be:
42:32:49:60:28:6b:29:ee:6d:ca:7d:db:6d:aa:d7:
85:1f:e9:c1:87:3f:06:72:c6:c7:6e:83:0d:17:28:
bd:cb:34:69:e1:0c:6e:2d:4c:eb:9a:b3:f3:b0:d9:
84:78:9b:87:47:9b:5a:0d:71:df:40:9c:b1:7b:d8:
32:b2:96:c4:17:b9:2f:cd:e7:b2:be:20:b0:ff:5f:
53:98:38:58:fa:9c:0c:a6:cf:fb:7c:35:59:c0:fb:
d3:ab:9f:f1:a7:32:6b:cd:50:ff:44:dd:71:cd:12:
40:4f:11:81:2e:de:84:9a:c0:38:78:8b:e0:f7:e9:
6e:d8:a1:53:d1:fb:a1:cf:3a:e1:e6:4f:1e:26:9b:
9d:d6:c7:36:50:81:d0:81:a3:98:d7:0d:d5:b2:71:
b0:d3:2c:75:92:85:b7:46:9b:54:1d:66:bf:fc:57:
20:ec:09:f5:b3:9d:78:76:4e:50:03:51:cc:b4:b4:
b8:c0:89:72:af:05:bb:77:fc:42:f6:fc:93:ea:50:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:F9:39:0B:B9:49:F7:34:B1:CD:51:EA:41:13:04:CB:79:A9:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:c0:f2:f0:66:e6:16:20:ed:9b:11:6d:5f:b2:4c:ea:b0:b3:
2e:d6:3f:08:e1:9c:ea:03:1c:69:c4:b2:c3:a5:9c:55:a8:1b:
19:98:86:3a:1c:d5:a8:7a:51:21:f5:6b:d6:57:72:ad:5a:39:
41:08:f6:0d:4c:7d:0d:4f:6f:bf:d8:3f:af:ce:54:42:78:b3:
b6:ce:8b:91:1e:2d:6b:fe:e8:a7:09:45:e8:3e:ad:6d:bd:3e:
23:b8:82:98:57:bd:18:0b:7e:2b:af:42:ee:16:52:01:18:da:
04:65:3a:77:ff:71:b3:58:4b:60:81:6e:ac:60:36:57:e1:e9:
4d:57:e6:4b:ff:dd:46:69:1b:63:08:ca:34:f9:ba:21:be:86:
62:d4:61:5e:27:19:5d:63:44:1c:48:67:d7:d6:3e:57:38:10:
63:a7:f2:c5:9c:5f:12:a4:57:7a:1c:9b:3d:3d:3e:40:b3:24:
84:53:a9:b0:26:14:ba:90:3b:16:81:de:2c:6f:bb:0d:0e:52:
76:f1:5e:fb:05:64:41:fa:e5:c6:91:d5:cf:20:e1:f3:a5:5f:
ab:7e:d8:d9:92:00:36:58:dd:a3:33:db:1c:fa:2e:69:8b:d4:
6b:6f:40:3c:85:43:32:2f:69:d9:d1:0a:53:aa:f6:9c:a9:04:
ad:fc:df:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpgIHcLaLY6S6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDNkY2NhYTYtNTBmNi00MzYzLThmMzEtY2FlMjE5ZWVlOWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY9NE0A2DuUd8k1M/aZakUsJLFQ1UOvgML7O
yhTMTAWD7GOBDxomx4Pk9Ft15sOej3PHSv34E4lHXL5CMklgKGsp7m3KfdttqteF
H+nBhz8GcsbHboMNFyi9yzRp4QxuLUzrmrPzsNmEeJuHR5taDXHfQJyxe9gyspbE
F7kvzeeyviCw/19TmDhY+pwMps/7fDVZwPvTq5/xpzJrzVD/RN1xzRJATxGBLt6E
msA4eIvg9+lu2KFT0fuhzzrh5k8eJpud1sc2UIHQgaOY1w3VsnGw0yx1koW3RptU
HWa//Fcg7An1s514dk5QA1HMtLS4wIlyrwW7d/xC9vyT6lAODQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtf+TkLuUn3NLHNUepBEwTLeak/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZhNzM3NjAtOTk5MC0z
Y2U2LTk3MGYtZGU0ODJiNWEwNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPA8vBm5hYg7ZsRbV+yTOqwsy7WPwjhnOoDHGnEssOlnFWoGxmYhjoc
1ah6USH1a9ZXcq1aOUEI9g1MfQ1Pb7/YP6/OVEJ4s7bOi5EeLWv+6KcJReg+rW29
PiO4gphXvRgLfiuvQu4WUgEY2gRlOnf/cbNYS2CBbqxgNlfh6U1X5kv/3UZpG2MI
yjT5uiG+hmLUYV4nGV1jRBxIZ9fWPlc4EGOn8sWcXxKkV3ocmz09PkCzJIRTqbAm
FLqQOxaB3ixvuw0OUnbxXvsFZEH65caR1c8g4fOlX6t+2NmSADZY3aMz2xz6LmmL
1GtvQDyFQzIvadnRClOq9pypBK3832U=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:08 2025 by rpki-client