Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa
File: c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa (raw, json)
Hash identifier: L9ovudjEhlbUP/hBQgib7EpYe86UETQRKaijjIxNgwo=
Subject key identifier: 12:6C:36:82:98:0F:EA:CD:BB:70:37:5D:C0:BC:A4:C2:B6:7C:BC:89
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7B7950B02FC2E73125C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7b:79:50:b0:2f:c2:e7:31:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=12c05e68-42ff-43ec-8435-eb0128e4751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:b1:f9:f3:c1:57:ca:13:97:7d:4a:6b:13:
97:29:47:ff:fb:0c:f9:2b:14:ff:09:d7:df:2c:f0:
8a:79:dc:67:43:34:b0:64:41:a6:04:0b:e3:26:05:
41:03:0a:54:f4:5b:1a:24:8d:15:e6:84:06:47:00:
45:a5:85:5b:81:fb:35:dc:e6:8d:12:80:17:91:71:
c6:38:ec:e4:52:88:c0:06:92:d0:8a:4d:4c:20:f5:
3a:6c:55:f8:29:98:42:33:b3:b5:de:61:0c:61:b0:
2e:ed:3b:84:00:6f:04:12:f5:3c:71:e8:b2:3f:c7:
16:0a:d0:40:c6:a6:91:58:a2:74:ab:87:1e:f6:a4:
fc:d2:af:8b:cd:74:8d:43:67:cb:14:24:c0:df:02:
75:81:93:15:33:bd:ab:0a:28:9b:78:6d:a2:a2:d2:
49:16:57:87:05:24:01:4c:ae:26:ce:1f:28:fa:bb:
63:3e:7e:79:af:09:c1:d6:80:b8:46:cc:d0:2e:9e:
27:74:d0:ea:7d:65:cd:11:5f:0c:70:fa:fa:14:fb:
cb:95:b5:09:44:80:ed:86:b8:be:e6:22:01:a3:61:
07:2b:11:b0:1e:9e:da:81:bb:ad:6e:24:dd:03:9b:
d0:91:02:1c:d5:a8:e1:db:a1:3a:5b:54:a4:dc:c1:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:36:82:98:0F:EA:CD:BB:70:37:5D:C0:BC:A4:C2:B6:7C:BC:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:64:8b:92:0c:1c:f2:b3:e9:0c:b7:c6:c7:a6:c2:8a:96:70:
6e:91:43:f6:50:52:f8:e5:50:d0:3f:6b:37:00:c0:cb:e5:a5:
6c:8c:59:9d:4e:4a:06:3f:2d:d0:74:0e:fa:dc:05:ee:0f:09:
af:f9:19:3c:89:b8:48:53:66:ef:2b:0c:6c:00:72:18:50:93:
3b:9a:cd:63:dc:5d:65:b5:d4:65:3c:f9:d9:7b:8c:41:23:1b:
df:e0:70:26:74:84:f6:3b:c3:08:72:08:d0:94:0b:52:68:a6:
c3:59:30:0d:24:a7:ec:75:86:4c:96:b3:4f:cb:3f:be:67:c2:
ef:83:5a:c2:d9:70:c0:4a:8b:b8:48:b5:eb:3f:a4:ea:37:cd:
aa:d0:d8:87:f0:8c:0f:ea:92:85:16:4e:a5:67:97:be:3c:85:
c5:d9:b8:59:cf:30:03:0c:87:a2:46:18:2a:e0:20:49:01:92:
a6:56:08:18:32:31:a0:84:0f:ed:e0:4d:36:e1:0e:de:55:c6:
1e:89:ba:02:a3:a8:15:ef:29:41:f6:ee:ee:1f:c2:68:61:a5:
24:23:60:17:e8:3c:89:82:f0:85:36:d8:9c:c1:e0:15:3f:96:
01:8d:4e:bf:36:dc:1c:c6:0d:57:31:99:34:a9:3f:a0:1b:51:
60:4d:db:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnt5ULAvwucxJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTJjMDVlNjgtNDJmZi00M2VjLTg0MzUtZWIwMTI4ZTQ3NTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl6x+fPBV8oTl31KaxOXKUf/+wz5KxT/Cdff
LPCKedxnQzSwZEGmBAvjJgVBAwpU9FsaJI0V5oQGRwBFpYVbgfs13OaNEoAXkXHG
OOzkUojABpLQik1MIPU6bFX4KZhCM7O13mEMYbAu7TuEAG8EEvU8ceiyP8cWCtBA
xqaRWKJ0q4ce9qT80q+LzXSNQ2fLFCTA3wJ1gZMVM72rCiibeG2iotJJFleHBSQB
TK4mzh8o+rtjPn55rwnB1oC4RszQLp4ndNDqfWXNEV8McPr6FPvLlbUJRIDthri+
5iIBo2EHKxGwHp7agbutbiTdA5vQkQIc1ajh26E6W1Sk3MFgqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJsNoKYD+rNu3A3XcC8pMK2fLyJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5YTI4YWQtMGQxZS0z
NGFiLTljNWEtZmYzZTU5YWY0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBki5IMHPKz6Qy3xsemwoqWcG6RQ/ZQUvjlUNA/azcAwMvlpWyMWZ1O
SgY/LdB0DvrcBe4PCa/5GTyJuEhTZu8rDGwAchhQkzuazWPcXWW11GU8+dl7jEEj
G9/gcCZ0hPY7wwhyCNCUC1JopsNZMA0kp+x1hkyWs0/LP75nwu+DWsLZcMBKi7hI
tes/pOo3zarQ2IfwjA/qkoUWTqVnl748hcXZuFnPMAMMh6JGGCrgIEkBkqZWCBgy
MaCED+3gTTbhDt5Vxh6JugKjqBXvKUH27u4fwmhhpSQjYBfoPImC8IU22JzB4BU/
lgGNTr823BzGDVcxmTSpP6AbUWBN28o=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:35 2025 by rpki-client