Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b35272e9-a1fd-30dc-a2e0-bf4543f984f7.roa
File: b35272e9-a1fd-30dc-a2e0-bf4543f984f7.roa (raw, json)
Hash identifier: 5oriISHjrQZbOZZ2LqaW4z4zDuSfPoJD2x8Ak/e+eV0=
Subject key identifier: 6C:A4:31:D4:7F:23:C5:F2:5E:83:00:5A:B1:70:11:EF:0F:9F:3D:59
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B1B3C1DB88542E8999760
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b35272e9-a1fd-30dc-a2e0-bf4543f984f7.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.21.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:1b:3c:1d:b8:85:42:e8:99:97:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=aca4577b-5987-4e52-a0ba-5455f72e9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:a1:ff:b3:93:41:c8:8a:f9:47:db:aa:ae:
0f:cf:c9:74:75:9e:7f:02:1a:ad:db:b4:a6:e0:f7:
16:81:9e:1e:51:fc:62:61:c3:bc:ab:4b:0e:8d:13:
f6:07:dc:9d:b6:15:17:b5:9b:d2:98:92:f4:5a:21:
e0:5a:6d:05:93:ef:c2:e9:7f:56:13:c0:3e:52:53:
4e:65:15:a7:aa:5f:94:0a:cd:cb:a4:94:07:8c:42:
0a:25:a8:c1:4b:16:49:fe:4a:77:a1:a2:51:5c:a6:
78:53:6e:d4:c0:94:2d:f3:cf:f5:22:83:59:b9:ab:
a0:85:d2:09:60:dc:2f:55:17:3d:89:dc:aa:40:e6:
30:b5:b3:65:2d:87:df:66:72:57:0f:c0:9e:81:0c:
18:09:30:ff:82:3c:cd:d5:70:7f:6d:e9:7f:de:e4:
6b:42:59:44:da:12:41:d2:35:2c:aa:77:18:72:f0:
77:33:db:19:a4:18:45:21:38:c7:cd:16:b9:aa:cb:
52:d4:84:16:f7:c6:bf:35:21:a2:c1:b7:12:c4:56:
65:30:72:1a:cd:5a:38:45:3c:d9:2a:c2:e4:7a:0c:
3a:f6:b3:6d:1a:d0:61:08:be:1f:c9:96:0b:93:cb:
36:a5:d0:3c:72:da:b1:79:9b:67:cf:db:f0:89:99:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:31:D4:7F:23:C5:F2:5E:83:00:5A:B1:70:11:EF:0F:9F:3D:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b35272e9-a1fd-30dc-a2e0-bf4543f984f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:b1:2b:6a:de:fa:ef:72:e5:7a:71:74:39:3d:a2:1a:10:fc:
91:e7:ad:1e:a6:0f:56:9f:29:03:55:19:53:69:bc:e2:55:38:
cf:f9:6f:3d:38:94:38:11:22:b1:84:01:06:f8:9c:e6:2e:9c:
6b:67:88:04:16:6a:84:c2:2c:a8:33:1e:78:60:fa:fe:5a:7f:
6a:df:c9:ec:9b:93:64:82:f2:96:b5:83:e7:fc:b4:c5:6d:57:
25:13:32:31:24:3b:a9:fd:47:66:82:c5:7a:bf:aa:76:f9:aa:
7f:61:93:9b:4d:df:ed:7f:88:6b:30:f7:a8:3e:90:76:da:34:
ea:16:07:61:bd:02:83:e0:5d:aa:d6:01:16:9e:9f:1e:25:5e:
a7:f4:9c:ec:0f:07:b9:27:c4:ae:ec:c5:6e:bc:46:2b:34:cc:
8c:83:c7:8a:b8:68:ef:3a:20:7c:68:f7:65:1a:96:0c:f1:44:
36:14:cb:2d:32:2e:c4:f4:c2:09:78:47:75:13:85:e4:10:75:
2c:fd:0a:0e:94:61:c8:f2:5a:00:ec:e6:5c:ec:d9:1e:5b:62:
74:ab:c8:8b:1c:d5:ed:fe:58:be:db:d1:d2:bf:73:00:10:e2:
b8:f5:26:25:0a:26:f4:52:3a:ad:66:62:cb:2a:d2:67:0d:c1:
8d:bf:ce:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxs8HbiFQuiZl2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YWNhNDU3N2ItNTk4Ny00ZTUyLWEwYmEtNTQ1NWY3MmU5Mzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuah/7OTQciK+Ufbqq4Pz8l0dZ5/Ahqt27Sm
4PcWgZ4eUfxiYcO8q0sOjRP2B9ydthUXtZvSmJL0WiHgWm0Fk+/C6X9WE8A+UlNO
ZRWnql+UCs3LpJQHjEIKJajBSxZJ/kp3oaJRXKZ4U27UwJQt88/1IoNZuaughdIJ
YNwvVRc9idyqQOYwtbNlLYffZnJXD8CegQwYCTD/gjzN1XB/bel/3uRrQllE2hJB
0jUsqncYcvB3M9sZpBhFITjHzRa5qstS1IQW98a/NSGiwbcSxFZlMHIazVo4RTzZ
KsLkegw69rNtGtBhCL4fyZYLk8s2pdA8ctqxeZtnz9vwiZnEcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGykMdR/I8XyXoMAWrFwEe8Pnz1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM1MjcyZTktYTFmZC0z
MGRjLWEyZTAtYmY0NTQzZjk4NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGxK2re+u9y5XpxdDk9ohoQ/JHnrR6mD1afKQNVGVNpvOJVOM/5bz04
lDgRIrGEAQb4nOYunGtniAQWaoTCLKgzHnhg+v5af2rfyeybk2SC8pa1g+f8tMVt
VyUTMjEkO6n9R2aCxXq/qnb5qn9hk5tN3+1/iGsw96g+kHbaNOoWB2G9AoPgXarW
ARaenx4lXqf0nOwPB7knxK7sxW68Ris0zIyDx4q4aO86IHxo92UalgzxRDYUyy0y
LsT0wgl4R3UTheQQdSz9Cg6UYcjyWgDs5lzs2R5bYnSryIsc1e3+WL7b0dK/cwAQ
4rj1JiUKJvRSOq1mYssq0mcNwY2/zs8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:32 2025 by rpki-client