Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa
File: caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa (raw, json)
Hash identifier: ReOBJz5rAKEKrDbMx/p7b0wFe+dZR/ElmwOUeSsJ3cs=
Subject key identifier: 1B:56:B9:6E:9C:0A:0B:C0:87:07:93:E4:F0:25:8E:E3:24:C3:50:09
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AC539A432B77D3EEDD000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:c5:39:a4:32:b7:7d:3e:ed:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d3543ee5-f34f-4e0f-a06f-1ea8423e6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:87:f6:59:82:8e:b5:01:6f:c3:06:43:1b:
af:99:6a:61:e2:08:28:3e:3e:0d:f3:81:fc:c7:50:
e4:ee:48:22:8a:98:71:54:1e:4c:c8:70:55:a4:59:
8d:aa:14:fd:ec:65:13:d4:9e:3e:81:12:af:b8:20:
03:c1:49:26:6a:b2:7e:b9:d9:f6:40:97:e6:ae:4c:
b0:d6:cf:34:96:0d:e1:65:1b:34:e3:95:af:32:46:
72:54:00:1d:78:9e:db:38:a6:0e:ef:63:68:db:34:
80:77:35:8d:21:e6:5b:cd:ea:84:e1:1d:fe:c1:21:
92:24:00:48:ef:2f:c6:25:d8:d2:cf:a1:cc:75:34:
22:9e:a2:41:88:1c:8c:87:2e:70:37:5e:5f:63:8c:
cb:11:b4:46:17:13:11:c4:9b:7a:bc:5b:92:79:12:
00:a1:ee:42:4b:dd:84:f6:7e:58:3e:5e:a6:72:05:
8a:ae:73:f2:47:10:04:c2:01:79:5c:b8:42:6f:0e:
c0:d0:9f:64:47:73:7e:c1:7d:88:37:fc:2a:12:db:
65:c1:e7:07:71:05:11:f4:1e:fa:21:40:c7:8b:77:
e2:c7:fd:3f:a4:1c:ab:1c:6d:c8:d5:ee:1b:b5:90:
b3:61:f7:dc:dc:e0:60:8b:8d:8e:75:b2:86:c6:1c:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:56:B9:6E:9C:0A:0B:C0:87:07:93:E4:F0:25:8E:E3:24:C3:50:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:58:a6:28:25:97:97:4e:97:ef:0b:ff:3d:bd:7e:34:c1:54:
7b:2f:3d:8f:28:0e:b6:f5:5d:8b:0f:bd:28:9a:c4:ae:b2:27:
f6:36:1d:cc:21:ed:10:36:2c:24:fd:c2:57:3c:3e:39:41:63:
80:4e:e1:7f:bb:a5:56:af:92:10:15:aa:84:34:9d:2c:bb:7c:
9b:5a:ea:b0:db:eb:bf:6a:d3:19:27:57:4f:25:ad:a7:29:47:
ed:25:86:77:85:3c:39:e3:ba:24:e7:63:24:bb:8c:80:93:38:
29:8d:1a:d4:d9:8b:e3:eb:d2:9a:af:be:af:d8:ca:0a:4a:40:
f5:e7:5b:ca:c5:c2:71:73:79:a8:ac:c9:02:b6:f0:3f:3c:06:
f4:af:8e:b1:10:fe:6f:53:e7:ec:f5:f4:70:e5:34:48:21:b8:
15:a5:ff:f8:33:33:13:c4:c2:d8:d7:a3:2b:fb:c0:7e:49:0c:
c6:70:6c:59:ea:78:cb:d4:1a:fa:a3:97:77:55:9a:02:dd:12:
e7:02:9b:7a:17:be:1a:55:5f:22:1e:ba:91:f1:65:4f:09:de:
90:c5:4f:b0:2f:33:61:34:b5:19:66:7d:1a:30:af:91:95:dd:
76:20:53:47:c5:0a:2f:a7:4e:ec:31:7a:59:07:b1:fb:bc:f7:
14:49:a4:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsU5pDK3fT7t0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDM1NDNlZTUtZjM0Zi00ZTBmLWEwNmYtMWVhODQyM2U2MjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYuH9lmCjrUBb8MGQxuvmWph4ggoPj4N84H8
x1Dk7kgiiphxVB5MyHBVpFmNqhT97GUT1J4+gRKvuCADwUkmarJ+udn2QJfmrkyw
1s80lg3hZRs045WvMkZyVAAdeJ7bOKYO72No2zSAdzWNIeZbzeqE4R3+wSGSJABI
7y/GJdjSz6HMdTQinqJBiByMhy5wN15fY4zLEbRGFxMRxJt6vFuSeRIAoe5CS92E
9n5YPl6mcgWKrnPyRxAEwgF5XLhCbw7A0J9kR3N+wX2IN/wqEttlwecHcQUR9B76
IUDHi3fix/0/pByrHG3I1e4btZCzYffc3OBgi42OdbKGxhw1/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtWuW6cCgvAhweT5PAljuMkw1AJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2FmMzFmMjgtNDZkMi0z
NTExLTg4YjEtNmJhYTZiZGFmNTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9Ypigll5dOl+8L/z29fjTBVHsvPY8oDrb1XYsPvSiaxK6yJ/Y2Hcwh
7RA2LCT9wlc8PjlBY4BO4X+7pVavkhAVqoQ0nSy7fJta6rDb679q0xknV08lracp
R+0lhneFPDnjuiTnYyS7jICTOCmNGtTZi+Pr0pqvvq/YygpKQPXnW8rFwnFzeais
yQK28D88BvSvjrEQ/m9T5+z19HDlNEghuBWl//gzMxPEwtjXoyv7wH5JDMZwbFnq
eMvUGvqjl3dVmgLdEucCm3oXvhpVXyIeupHxZU8J3pDFT7AvM2E0tRlmfRowr5GV
3XYgU0fFCi+nTuwxelkHsfu89xRJpKc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:23 2025 by rpki-client