Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b36acedb-186a-3a91-b12d-f8483e65d030.roa
File: b36acedb-186a-3a91-b12d-f8483e65d030.roa (raw, json)
Hash identifier: 4nRrjNrzmBvQwuTZMcn791NwbuwocQHgLDiLE8AlQ2Y=
Subject key identifier: F0:64:44:76:39:BA:67:27:91:58:C5:16:02:BC:50:0E:E6:77:3A:F7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACA61A050760009286740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b36acedb-186a-3a91-b12d-f8483e65d030.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ca:61:a0:50:76:00:09:28:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b535087d-732c-4f27-a7d8-8a3a01fe2a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:56:69:49:29:00:fe:ab:9b:2c:9a:69:e7:
ae:76:cc:fd:7f:3c:7c:24:1a:d2:89:a3:b3:49:64:
d3:e6:2a:cc:7a:8a:2a:c2:23:e8:4c:fd:5c:83:c8:
19:71:40:bb:74:51:e3:e6:bd:af:77:76:0c:af:77:
ec:9e:b6:21:68:f9:e4:6b:1c:93:fc:65:f7:0d:7c:
ca:41:62:0a:76:b6:95:3a:ef:91:8d:fa:42:0b:5d:
4f:02:be:10:c0:1a:05:f6:56:38:62:f3:2e:4d:16:
84:7b:00:25:e3:81:a6:73:9f:b2:0d:e7:05:b5:74:
42:72:d3:df:f2:4c:c6:78:a9:9b:e7:64:1f:21:f1:
c9:4a:c3:da:34:70:66:7d:90:54:96:b4:43:5d:35:
9f:b8:17:86:92:da:70:c2:4f:68:84:cc:83:b9:28:
e1:b5:f4:3a:8b:5d:94:35:f9:8a:3d:1b:71:2d:29:
dd:1b:63:be:1c:d4:ef:6e:89:e9:08:aa:f8:eb:dc:
d9:55:56:e6:3f:06:ee:63:fa:4c:2d:ad:8f:d5:88:
cb:cf:93:20:f3:4b:fe:69:95:32:b4:5d:21:e0:39:
41:8c:05:22:65:a4:dc:e1:4e:21:c4:f5:76:31:75:
bc:b8:d5:70:93:a2:b2:34:6e:bc:60:1b:bd:48:00:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:44:76:39:BA:67:27:91:58:C5:16:02:BC:50:0E:E6:77:3A:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b36acedb-186a-3a91-b12d-f8483e65d030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:f2:d6:ae:b5:b5:22:d2:12:6b:b0:91:6a:eb:45:b2:5d:f4:
d2:f4:aa:8a:84:7f:a3:4d:4b:c0:cf:c0:ab:c5:a1:78:fa:ae:
3c:20:78:91:b1:a6:6a:1e:84:88:c5:b6:5e:59:76:4c:82:f0:
55:b9:df:b3:49:2a:be:23:f8:46:5b:df:f8:f1:1d:3c:51:64:
1a:82:a6:78:bd:64:36:b7:13:c9:48:9b:41:99:9d:fe:86:96:
ce:f5:4e:6e:db:af:f7:5d:2e:e8:dc:d5:7a:c4:39:67:10:a6:
09:39:51:22:83:76:9b:d9:fb:23:13:9c:4c:54:dc:1b:61:6b:
30:17:8c:15:fb:2f:e7:7a:90:d1:7b:27:1a:1e:33:61:46:59:
92:26:d6:d4:4a:0e:c0:82:2b:16:18:2d:d2:f9:93:3c:36:f1:
b9:da:93:78:8e:97:c9:81:42:ec:cd:bd:61:cd:01:a0:e2:22:
e9:d8:0a:32:c0:9f:db:73:ce:9c:79:af:9c:9d:15:e0:9f:c4:
b7:66:c6:08:0a:37:d7:a5:bb:ea:dc:19:dd:c1:54:aa:41:99:
bf:41:c2:9f:bd:76:82:0f:49:4a:dd:78:d2:c6:32:5a:8b:5a:
50:3b:5e:f1:e9:a9:17:6d:e0:7e:99:1c:0d:88:93:62:63:b5:
8a:e1:45:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsphoFB2AAkoZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjUzNTA4N2QtNzMyYy00ZjI3LWE3ZDgtOGEzYTAxZmUyYTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6RWaUkpAP6rmyyaaeeudsz9fzx8JBrSiaOz
SWTT5irMeooqwiPoTP1cg8gZcUC7dFHj5r2vd3YMr3fsnrYhaPnkaxyT/GX3DXzK
QWIKdraVOu+RjfpCC11PAr4QwBoF9lY4YvMuTRaEewAl44Gmc5+yDecFtXRCctPf
8kzGeKmb52QfIfHJSsPaNHBmfZBUlrRDXTWfuBeGktpwwk9ohMyDuSjhtfQ6i12U
NfmKPRtxLSndG2O+HNTvbonpCKr469zZVVbmPwbuY/pMLa2P1YjLz5Mg80v+aZUy
tF0h4DlBjAUiZaTc4U4hxPV2MXW8uNVwk6KyNG68YBu9SAA/FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBkRHY5umcnkVjFFgK8UA7mdzr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2YWNlZGItMTg2YS0z
YTkxLWIxMmQtZjg0ODNlNjVkMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTy1q61tSLSEmuwkWrrRbJd9NL0qoqEf6NNS8DPwKvFoXj6rjwgeJGx
pmoehIjFtl5ZdkyC8FW537NJKr4j+EZb3/jxHTxRZBqCpni9ZDa3E8lIm0GZnf6G
ls71Tm7br/ddLujc1XrEOWcQpgk5USKDdpvZ+yMTnExU3BthazAXjBX7L+d6kNF7
JxoeM2FGWZIm1tRKDsCCKxYYLdL5kzw28bnak3iOl8mBQuzNvWHNAaDiIunYCjLA
n9tzzpx5r5ydFeCfxLdmxggKN9elu+rcGd3BVKpBmb9Bwp+9doIPSUrdeNLGMlqL
WlA7XvHpqRdt4H6ZHA2Ik2JjtYrhRRo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:38 2025 by rpki-client