Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa
File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json)
Hash identifier: jDN5NtIffbGgHcuPR8Cj6oT+IsUpRgOi9397hx+KpE0=
Subject key identifier: 97:84:F7:A9:9F:ED:52:D6:22:39:E4:C3:11:B2:49:7D:B8:D2:20:78
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A421A315C3EA7086F7E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:42:1a:31:5c:3e:a7:08:6f:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3425f07f-5414-467e-84b8-4827762b1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:5e:94:f2:39:07:45:0a:96:e5:8f:b8:87:
95:89:12:77:d1:e2:4d:00:f5:21:17:f9:d4:86:37:
9d:84:1a:ad:fe:2c:54:73:4f:4b:dc:ae:59:15:50:
89:fa:85:98:15:5d:fc:af:94:a6:7b:35:78:ed:a4:
a8:17:ad:de:f7:5c:72:46:f7:47:8c:eb:17:bf:32:
10:b0:1b:46:48:42:82:fe:f9:03:f9:23:85:be:0d:
a4:28:78:57:92:0c:ba:c4:ff:95:f4:e8:b3:55:64:
c8:0d:7c:72:65:49:15:2f:b0:a8:1d:df:7f:f9:6a:
1a:65:f5:19:7e:84:03:e4:4e:da:49:4e:2f:99:64:
f0:6c:89:0c:d9:bf:0a:81:4e:a7:09:6e:cc:70:95:
0d:04:af:a0:6a:34:9a:6f:fe:11:ac:a0:ec:dc:17:
67:5e:d7:8f:e5:5f:4a:e8:b8:c8:93:4f:46:cd:36:
e4:e3:b0:0f:71:2a:9b:f3:c8:4b:41:49:62:f3:cd:
d9:28:24:60:5d:31:d7:6a:dd:22:31:8a:1d:23:27:
8c:7e:36:a5:9e:54:6c:13:dd:a0:4f:fb:34:4b:41:
2c:9a:d6:5b:14:56:52:d5:eb:ed:cc:20:07:c9:0e:
39:08:15:be:cc:a0:55:f6:e0:8c:57:3c:36:42:0b:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:F7:A9:9F:ED:52:D6:22:39:E4:C3:11:B2:49:7D:B8:D2:20:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:cb:31:b1:d8:a1:db:b3:5f:03:6a:96:48:32:f3:5a:89:6e:
4f:f6:65:91:7a:92:c3:15:20:65:cd:57:49:1a:ea:72:c7:7b:
20:c4:7a:59:02:c5:9d:88:7a:c0:bc:4a:aa:6c:51:0e:0e:85:
2b:5b:8f:24:08:fe:9a:fc:96:cb:12:d1:1a:1a:fb:b5:5e:26:
82:5e:dd:5c:a5:74:a5:67:17:25:e0:fb:43:7a:3c:af:43:d4:
86:cd:e4:6e:ac:0b:f3:f3:31:d6:af:cc:0f:47:87:5a:d8:0c:
a2:23:3c:87:25:f7:b8:8a:de:43:8a:e8:e9:cd:ea:60:79:58:
41:84:f8:03:c8:dd:14:96:2e:30:6d:c4:79:54:7a:8f:bc:b5:
e4:17:c2:66:0c:85:57:d4:de:3d:d3:68:ef:fa:08:6b:7d:2a:
5a:68:36:1b:27:d8:f3:59:42:d4:fc:b4:b8:4b:bd:af:3a:fb:
82:8b:90:9c:67:8e:65:74:9a:16:1f:19:67:bf:65:e5:13:5c:
28:d4:c5:6b:3a:fd:b9:75:51:bb:a7:e2:15:2f:26:43:17:a9:
1d:c8:5b:4a:74:78:2f:8a:93:25:9b:c2:3c:25:46:cc:29:07:
9c:bd:58:c4:3b:5e:20:d8:4d:21:fa:cf:c0:20:64:8b:30:12:
be:a1:07:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkIaMVw+pwhvfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzQyNWYwN2YtNTQxNC00NjdlLTg0YjgtNDgyNzc2MmIxNTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkINelPI5B0UKluWPuIeViRJ30eJNAPUhF/nU
hjedhBqt/ixUc09L3K5ZFVCJ+oWYFV38r5SmezV47aSoF63e91xyRvdHjOsXvzIQ
sBtGSEKC/vkD+SOFvg2kKHhXkgy6xP+V9OizVWTIDXxyZUkVL7CoHd9/+WoaZfUZ
foQD5E7aSU4vmWTwbIkM2b8KgU6nCW7McJUNBK+gajSab/4RrKDs3BdnXteP5V9K
6LjIk09GzTbk47APcSqb88hLQUli883ZKCRgXTHXat0iMYodIyeMfjalnlRsE92g
T/s0S0EsmtZbFFZS1evtzCAHyQ45CBW+zKBV9uCMVzw2QgvBIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeE96mf7VLWIjnkwxGySX240iB4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z
ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3LMbHYoduzXwNqlkgy81qJbk/2ZZF6ksMVIGXNV0ka6nLHeyDEelkC
xZ2IesC8SqpsUQ4OhStbjyQI/pr8lssS0Roa+7VeJoJe3VyldKVnFyXg+0N6PK9D
1IbN5G6sC/PzMdavzA9Hh1rYDKIjPIcl97iK3kOK6OnN6mB5WEGE+API3RSWLjBt
xHlUeo+8teQXwmYMhVfU3j3TaO/6CGt9KlpoNhsn2PNZQtT8tLhLva86+4KLkJxn
jmV0mhYfGWe/ZeUTXCjUxWs6/bl1Ubun4hUvJkMXqR3IW0p0eC+KkyWbwjwlRswp
B5y9WMQ7XiDYTSH6z8AgZIswEr6hB+s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:21 2025 by rpki-client