Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa
File: a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa (raw, json)
Hash identifier: XLTq0BWGvIZlXrri4aOd5fRaLGj7TbOLS4QYnti5mQk=
Subject key identifier: 5F:E9:E6:7D:CA:C0:88:3A:07:FD:64:1C:8A:1C:5E:F5:2C:9F:E4:96
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0EB50AA8A81F0947D8D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0e:b5:0a:a8:a8:1f:09:47:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d16967b7-bff9-46f6-99e3-01bcd61b04a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:13:5f:3c:f4:ee:8e:33:e5:c4:80:03:8c:
77:6a:fb:60:76:26:f8:3b:7e:77:67:e5:af:2e:b5:
58:7b:55:91:76:fb:b5:ab:50:0a:66:19:83:32:be:
db:93:09:2a:82:2c:30:6c:c8:89:24:a3:dd:af:44:
75:36:64:b8:2a:a3:fc:90:5a:33:7b:e7:fb:3a:84:
c3:ea:a5:68:0b:48:bd:35:3c:c3:00:de:e2:c0:96:
2b:b8:17:4d:04:79:a1:51:2c:58:34:91:ac:69:98:
f1:42:ce:25:a2:e7:8a:75:65:d0:dc:bb:c8:5d:30:
06:56:ca:d8:d8:e2:bb:46:94:20:99:3e:49:42:a7:
f9:d3:0d:49:cc:a6:8d:08:51:51:91:c0:23:8b:c4:
70:a6:3b:29:0a:3b:03:69:a4:3d:47:f8:ad:6b:de:
46:10:6a:d1:e6:da:5d:43:17:fe:26:ad:39:2d:ad:
63:63:d3:63:47:67:8a:cd:3a:d5:14:2a:fd:2b:13:
79:29:dd:e4:dd:aa:f9:93:4f:2c:aa:74:02:4a:e0:
9f:2f:d9:57:d3:c3:9e:ec:05:16:59:2f:70:f9:a1:
c5:e6:cb:1d:af:5b:e4:55:d3:69:48:36:41:04:07:
05:15:75:84:d7:00:d7:50:4e:54:ef:d6:88:60:41:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:E6:7D:CA:C0:88:3A:07:FD:64:1C:8A:1C:5E:F5:2C:9F:E4:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:20:28:ed:57:c7:87:4b:9f:51:72:1d:82:43:a6:38:89:25:
ca:e7:5d:3d:40:8b:56:3d:ee:40:c9:8a:1e:5f:f7:d4:65:00:
c5:45:98:09:43:ab:eb:ee:fd:e8:03:e6:9c:0c:c2:4e:1a:f4:
fc:dd:0c:4e:aa:fd:36:57:eb:9f:e2:f9:54:08:f6:23:43:10:
9b:98:07:94:ad:1a:72:3d:e8:92:53:60:2b:46:85:99:4c:18:
e1:bb:a2:b1:69:9d:50:2b:78:30:57:35:93:cb:db:b2:7f:bf:
b8:4f:68:0b:0c:ab:62:e8:42:08:f1:c5:35:16:7d:e7:dd:2b:
c5:04:b7:4b:b8:d5:38:88:86:8c:81:49:bd:6e:6c:51:20:f7:
73:17:84:64:8b:9c:15:4c:ae:94:5b:09:40:22:98:99:d1:9f:
8c:7d:23:5f:bd:31:41:bc:de:9c:82:b9:6b:73:c8:5f:8d:05:
00:8b:a5:0e:f8:17:16:4b:ac:5b:1a:72:ab:18:36:52:2f:01:
ed:9b:f7:88:78:e8:90:e3:b0:04:3b:49:7f:54:07:df:39:28:
fd:9b:d3:9f:9b:9d:9e:2f:b9:1e:8d:4e:6c:09:b4:ce:82:8f:
5d:d1:fa:c8:15:0e:e9:ec:cb:a2:01:3e:14:5f:78:49:13:95:
3d:74:34:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw61CqioHwlH2NAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDE2OTY3YjctYmZmOS00NmY2LTk5ZTMtMDFiY2Q2MWIwNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwQTXzz07o4z5cSAA4x3avtgdib4O353Z+Wv
LrVYe1WRdvu1q1AKZhmDMr7bkwkqgiwwbMiJJKPdr0R1NmS4KqP8kFoze+f7OoTD
6qVoC0i9NTzDAN7iwJYruBdNBHmhUSxYNJGsaZjxQs4loueKdWXQ3LvIXTAGVsrY
2OK7RpQgmT5JQqf50w1JzKaNCFFRkcAji8RwpjspCjsDaaQ9R/ita95GEGrR5tpd
Qxf+Jq05La1jY9NjR2eKzTrVFCr9KxN5Kd3k3ar5k08sqnQCSuCfL9lX08Oe7AUW
WS9w+aHF5ssdr1vkVdNpSDZBBAcFFXWE1wDXUE5U79aIYEEBaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/p5n3KwIg6B/1kHIocXvUsn+SWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmFiZmMtNTk2ZC0z
ZGFjLWJkOWUtODg1ZTE0ZTFjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYgKO1Xx4dLn1FyHYJDpjiJJcrnXT1Ai1Y97kDJih5f99RlAMVFmAlD
q+vu/egD5pwMwk4a9PzdDE6q/TZX65/i+VQI9iNDEJuYB5StGnI96JJTYCtGhZlM
GOG7orFpnVAreDBXNZPL27J/v7hPaAsMq2LoQgjxxTUWfefdK8UEt0u41TiIhoyB
Sb1ubFEg93MXhGSLnBVMrpRbCUAimJnRn4x9I1+9MUG83pyCuWtzyF+NBQCLpQ74
FxZLrFsacqsYNlIvAe2b94h46JDjsAQ7SX9UB985KP2b05+bnZ4vuR6NTmwJtM6C
j13R+sgVDunsy6IBPhRfeEkTlT10NBw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:54 2025 by rpki-client