Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa
File: a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa (raw, json)
Hash identifier: jGtPVFqQaLpuV3uOFWSd9bpc+YlT+/bzQLDAAuEt5To=
Subject key identifier: 73:78:1D:33:5F:3C:B9:D1:02:68:61:20:8A:FF:E7:29:2C:FF:EF:2D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A98CCE247103590D05D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:98:cc:e2:47:10:35:90:d0:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=56c7dfdb-55f7-4441-93c6-400e7a79c3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:f5:55:0b:aa:a5:95:df:14:76:21:18:6c:
d2:8c:ba:af:af:88:1c:51:1a:a3:17:73:5b:09:1d:
a5:9e:5f:b3:23:5c:81:ef:7d:94:6e:07:50:01:a8:
6b:13:e9:c3:20:f9:fb:cc:b8:49:f3:a2:bd:3a:58:
3c:ad:5f:4e:dd:e9:69:4f:89:40:93:f8:3c:8c:e3:
3a:df:c9:df:a5:45:8e:68:cf:90:9c:74:19:49:26:
c2:03:14:23:71:a5:5e:89:71:12:00:38:4c:8c:35:
6b:49:fd:e1:94:90:b8:20:aa:a4:57:bf:6e:05:dd:
f6:30:ca:48:bd:17:0b:56:c7:5d:89:21:e3:a2:c1:
5e:b4:22:a4:59:c8:64:b8:68:9c:f9:fd:49:e3:47:
46:6f:63:b2:cb:b8:c9:0e:9c:e1:80:4f:74:44:d0:
cc:08:70:5f:31:88:d3:74:a4:88:84:dc:26:d8:3e:
c6:39:9e:75:81:fd:4e:e5:b3:53:c7:39:dd:9f:4e:
53:20:9e:2d:dc:d6:06:68:1f:f3:c1:39:b1:05:4f:
4c:22:7c:49:73:23:8d:17:03:be:66:9e:06:d4:80:
34:2a:64:f3:37:c5:f6:e1:11:cd:5a:99:15:27:a8:
6a:c5:a0:2d:41:c3:ef:4a:b1:2d:ab:7c:95:47:5c:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:1D:33:5F:3C:B9:D1:02:68:61:20:8A:FF:E7:29:2C:FF:EF:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:61:41:2b:1e:51:4e:47:c4:dd:f2:6a:b5:5b:fb:62:64:5b:
ea:67:69:2a:84:2f:d2:25:7c:33:1e:d5:6b:44:ce:3b:f5:38:
cb:b3:fa:78:38:cc:72:1f:c5:25:12:3a:f5:3e:d4:15:d3:37:
93:55:9b:3e:a8:3b:15:b7:0c:84:d9:98:89:72:9e:83:8d:cc:
87:3a:8b:96:b0:ed:c3:0c:b1:7c:18:4e:5d:64:3f:bc:2e:8f:
39:11:57:e7:d5:11:38:ba:ca:ba:d0:2e:f6:e0:b7:ab:4e:fd:
fa:6c:0b:a7:e7:d0:6d:5b:51:06:e9:22:eb:de:bd:67:71:48:
09:27:bd:d6:a9:c7:1c:3e:60:4a:63:f6:1c:ae:48:0d:8b:ba:
b0:a4:53:66:cc:1b:75:00:ed:64:b4:17:00:3e:16:16:bc:f9:
b5:3f:57:35:5e:d1:15:38:9d:0a:bd:a0:3b:f1:7c:b0:0d:d2:
70:e7:b8:74:e6:16:98:6f:26:a3:24:3e:d6:9f:83:f7:2e:cd:
5e:2c:d0:16:15:51:e7:ce:20:68:45:14:41:07:a2:92:32:a1:
95:30:62:96:75:f2:c5:54:a1:76:3d:ea:cf:69:11:16:19:42:
58:b6:43:90:16:02:1e:18:d8:1f:60:ee:c4:e1:98:96:27:a1:
f1:0d:c7:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpjM4kcQNZDQXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTZjN2RmZGItNTVmNy00NDQxLTkzYzYtNDAwZTdhNzljM2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Gz1VQuqpZXfFHYhGGzSjLqvr4gcURqjF3Nb
CR2lnl+zI1yB732UbgdQAahrE+nDIPn7zLhJ86K9Olg8rV9O3elpT4lAk/g8jOM6
38nfpUWOaM+QnHQZSSbCAxQjcaVeiXESADhMjDVrSf3hlJC4IKqkV79uBd32MMpI
vRcLVsddiSHjosFetCKkWchkuGic+f1J40dGb2Oyy7jJDpzhgE90RNDMCHBfMYjT
dKSIhNwm2D7GOZ51gf1O5bNTxzndn05TIJ4t3NYGaB/zwTmxBU9MInxJcyONFwO+
Zp4G1IA0KmTzN8X24RHNWpkVJ6hqxaAtQcPvSrEtq3yVR1zVswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHN4HTNfPLnRAmhhIIr/5yks/+8tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTlkMzk2ZjMtYjM4NC0z
MmYwLWEyOTgtZDU4ZTJkNTBkMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJhQSseUU5HxN3yarVb+2JkW+pnaSqEL9IlfDMe1WtEzjv1OMuz+ng4
zHIfxSUSOvU+1BXTN5NVmz6oOxW3DITZmIlynoONzIc6i5aw7cMMsXwYTl1kP7wu
jzkRV+fVETi6yrrQLvbgt6tO/fpsC6fn0G1bUQbpIuvevWdxSAknvdapxxw+YEpj
9hyuSA2LurCkU2bMG3UA7WS0FwA+Fha8+bU/VzVe0RU4nQq9oDvxfLAN0nDnuHTm
FphvJqMkPtafg/cuzV4s0BYVUefOIGhFFEEHopIyoZUwYpZ18sVUoXY96s9pERYZ
Qli2Q5AWAh4Y2B9g7sThmJYnofENx+A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:53:20 2025 by rpki-client