Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa
File: bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa (raw, json)
Hash identifier: 2wvv/iIBlL43XnHI5UlKT1JzlO/ifnzDeP+IIbuQ1To=
Subject key identifier: B1:31:3C:A8:0F:8D:0C:13:AE:51:24:EA:D1:3F:77:A7:94:C5:52:37
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A8035F9D677A5BCFFECA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 184.20.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:80:35:f9:d6:77:a5:bc:ff:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cd74d8ef-7cd5-4155-8eab-bc0c6bcb164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:73:ac:ac:4d:d1:33:0d:a8:ff:6c:6e:1e:
5b:35:3b:ac:cd:64:21:13:e2:d2:5c:2c:9a:fb:19:
12:dd:83:83:08:7e:df:67:19:3d:a6:31:b0:7b:b9:
32:b4:dc:af:16:a0:82:7c:e1:b5:aa:85:5a:42:77:
1a:28:4b:9d:c2:6d:5e:32:bd:ef:83:2f:a9:d4:db:
c3:01:4b:b2:21:16:09:53:05:9b:e7:ea:70:e3:82:
ee:cf:dd:61:38:d4:b5:9e:59:88:9b:56:c5:c8:f6:
77:21:1e:08:bc:93:88:d0:34:ab:ef:90:4e:ea:6b:
3b:6b:34:41:80:c9:a5:2e:99:ea:8a:9d:c5:6e:35:
43:e0:23:aa:fa:a2:53:df:a9:ce:79:97:4e:ba:a0:
3c:ea:9d:f1:c9:63:b7:28:30:73:c7:ea:bc:af:69:
47:fa:dc:8a:c1:ad:f6:83:14:14:61:63:15:54:68:
55:e9:3d:87:3e:e1:1a:85:a9:c4:c3:40:86:4e:ef:
88:cc:4c:ca:ab:f7:84:9e:fd:d6:d7:db:20:78:bb:
88:49:99:4d:96:8f:49:86:ab:68:d8:bc:28:c2:e5:
55:a2:62:81:62:d3:1c:23:49:3f:a5:35:1d:fe:fb:
91:91:7b:09:db:7b:07:4f:b7:90:bf:ea:fa:8b:d1:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:3C:A8:0F:8D:0C:13:AE:51:24:EA:D1:3F:77:A7:94:C5:52:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:22:99:30:d4:ea:d5:8b:03:c5:6f:e6:a9:b2:d3:91:86:47:
54:e1:3b:82:9a:c0:89:2d:0b:70:1a:d7:8d:5e:6c:f9:a0:7e:
25:84:98:71:c6:bc:8b:26:dd:94:29:e2:d4:78:63:bc:bc:00:
fe:be:90:1c:be:f8:59:69:bf:8d:0f:08:13:fb:a1:9e:4b:4d:
ee:0f:60:5f:77:1a:22:91:a1:ca:05:75:ce:3c:d5:10:a7:c5:
05:85:de:cf:03:f8:8b:fa:09:bf:80:8d:28:66:72:a4:fe:5d:
4b:fd:aa:b9:7b:fc:e0:ad:8f:d4:e1:82:94:6f:5b:fd:32:9b:
1a:ed:87:17:f1:c4:17:bb:e0:db:9c:34:80:7a:4c:15:8e:40:
cd:eb:2b:8e:ab:2e:a9:ce:1f:22:7f:c9:b3:f2:2e:35:ce:db:
3c:ea:80:d3:9e:e9:ca:5a:4e:c7:a2:f0:4e:32:34:a2:d6:70:
09:f0:b9:48:c5:6c:84:c5:cd:5d:cd:b7:9c:7f:68:82:05:eb:
d1:da:bf:8d:65:03:39:46:13:5f:bb:ac:e1:ee:63:6b:60:99:
52:ad:2c:ca:85:bc:d6:dd:78:d3:1d:97:53:93:7f:99:7f:20:
41:f4:f7:4a:9c:91:61:51:cf:31:1e:e1:a5:90:31:55:7a:c7:
28:84:12:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKoA1+dZ3pbz/7KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2Q3NGQ4ZWYtN2NkNS00MTU1LThlYWItYmMwYzZiY2IxNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/FzrKxN0TMNqP9sbh5bNTuszWQhE+LSXCya
+xkS3YODCH7fZxk9pjGwe7kytNyvFqCCfOG1qoVaQncaKEudwm1eMr3vgy+p1NvD
AUuyIRYJUwWb5+pw44Luz91hONS1nlmIm1bFyPZ3IR4IvJOI0DSr75BO6ms7azRB
gMmlLpnqip3FbjVD4COq+qJT36nOeZdOuqA86p3xyWO3KDBzx+q8r2lH+tyKwa32
gxQUYWMVVGhV6T2HPuEahanEw0CGTu+IzEzKq/eEnv3W19sgeLuISZlNlo9Jhqto
2LwowuVVomKBYtMcI0k/pTUd/vuRkXsJ23sHT7eQv+r6i9HDCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLExPKgPjQwTrlEk6tE/d6eUxVI3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmMGUyYWEtYWRkMy0z
Y2FhLTg0ODQtNzVlOGMwZWYyMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAimTDU6tWLA8Vv5qmy05GGR1ThO4KawIktC3Aa141ebPmgfiWEmHHG
vIsm3ZQp4tR4Y7y8AP6+kBy++Flpv40PCBP7oZ5LTe4PYF93GiKRocoFdc481RCn
xQWF3s8D+Iv6Cb+AjShmcqT+XUv9qrl7/OCtj9ThgpRvW/0ymxrthxfxxBe74Nuc
NIB6TBWOQM3rK46rLqnOHyJ/ybPyLjXO2zzqgNOe6cpaTsei8E4yNKLWcAnwuUjF
bITFzV3Nt5x/aIIF69Hav41lAzlGE1+7rOHuY2tgmVKtLMqFvNbdeNMdl1OTf5l/
IEH090qckWFRzzEe4aWQMVV6xyiEEuQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:27 2025 by rpki-client