Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
File: cd00562d-c510-3278-bc5b-277689f9a48d.roa (raw, json)
Hash identifier: LeZt0Q8+5zCZPgKs9I0CjFXyp4t5FL8OWqO3HCcUAOk=
Subject key identifier: C4:25:D4:C1:F1:93:9E:4F:68:74:A0:D2:58:F7:5F:6F:9B:02:CA:A9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A40C166FA3DAA3062A380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:40:c1:66:fa:3d:aa:30:62:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=96ac3d7d-1bf3-4bd5-b677-7dec893ebc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:9a:8f:c0:8e:c2:0b:87:51:29:96:cd:d6:
aa:d2:29:91:ff:c3:9c:fd:3b:08:ba:a9:2d:6e:91:
ea:b2:2c:59:e9:18:ca:4c:4e:cd:7a:f0:99:3d:37:
d5:44:f0:3c:d6:a8:c8:54:3c:1e:77:64:ca:8b:9f:
22:09:d6:4c:e0:94:81:65:81:00:48:6d:20:bd:1a:
ff:27:31:0a:01:8f:f4:e9:8d:5e:cb:3c:5c:ec:b1:
0d:9d:38:45:6d:8f:ed:e4:96:40:43:e6:5e:f8:43:
ef:3e:a5:ee:86:81:7c:e6:97:25:85:85:03:de:4c:
5b:4f:b1:b9:74:d7:5d:d9:67:cc:3b:47:a6:b6:f1:
46:cf:01:2f:80:d8:90:1b:0f:c6:f4:49:2f:1b:30:
90:19:3f:ae:bf:d8:84:a2:73:a0:d8:38:4c:3f:35:
02:f6:5a:ec:cd:b3:62:26:93:da:53:86:ba:a0:e4:
71:2e:39:2d:b4:e2:d2:67:e0:11:1e:4d:cf:3b:fa:
45:53:38:7a:ef:e4:35:11:db:3d:9f:5e:5c:3d:42:
85:a8:34:3c:31:b7:2a:b9:e3:ba:fa:f8:1f:b0:29:
98:f0:58:b3:d4:8e:64:6a:ce:b4:49:54:f2:98:6f:
53:44:d1:b9:62:0c:61:68:a0:76:cb:fa:43:bd:4e:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:D4:C1:F1:93:9E:4F:68:74:A0:D2:58:F7:5F:6F:9B:02:CA:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a9:24:58:b2:14:03:cb:d3:d9:93:a1:a4:80:f7:23:9b:b8:
0a:bd:6d:9c:7d:d1:89:e1:84:de:6d:df:ed:e0:5b:f2:cb:3a:
6a:e5:8a:45:3b:f9:6b:a2:e0:c2:48:2a:1b:d6:99:93:b5:50:
22:de:1f:ae:11:58:12:1a:ab:15:c2:df:9e:b5:85:4f:87:f2:
12:a5:af:da:44:b8:f7:83:6a:b6:f4:aa:7f:33:57:6a:59:1d:
97:ee:61:7b:22:e4:08:d5:b2:f0:56:60:d6:d6:95:ca:36:28:
67:bf:aa:24:2a:18:0c:44:4c:e5:b2:72:0f:39:cc:0c:de:53:
1a:23:3d:d3:19:74:6d:ee:7f:9d:44:11:44:8e:f7:70:76:c1:
f7:fb:dd:b6:65:e1:bc:be:a3:78:b8:30:7e:37:44:f1:dd:0f:
c0:6a:e6:92:79:db:ab:1d:df:6b:bd:44:00:f0:cd:3c:e5:1d:
9d:0c:c9:2c:38:c1:c1:e5:c5:88:d3:d9:9d:b2:47:f6:2a:c7:
41:5e:df:e3:90:79:a7:e2:df:18:15:0c:0f:bf:80:ec:67:34:
65:19:9b:66:a7:e4:80:b9:e3:bb:37:f8:f4:98:b3:f3:a6:91:
87:62:8e:74:b2:85:22:7b:a8:10:b7:d1:60:85:9e:e2:50:2f:
d9:4c:db:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKkDBZvo9qjBio4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTZhYzNkN2QtMWJmMy00YmQ1LWI2NzctN2RlYzg5M2ViYzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDqaj8COwguHUSmWzdaq0imR/8Oc/TsIuqkt
bpHqsixZ6RjKTE7NevCZPTfVRPA81qjIVDwed2TKi58iCdZM4JSBZYEASG0gvRr/
JzEKAY/06Y1eyzxc7LENnThFbY/t5JZAQ+Ze+EPvPqXuhoF85pclhYUD3kxbT7G5
dNdd2WfMO0emtvFGzwEvgNiQGw/G9EkvGzCQGT+uv9iEonOg2DhMPzUC9lrszbNi
JpPaU4a6oORxLjkttOLSZ+ARHk3PO/pFUzh67+Q1Eds9n15cPUKFqDQ8MbcqueO6
+vgfsCmY8Fiz1I5kas60SVTymG9TRNG5YgxhaKB2y/pDvU65zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQl1MHxk55PaHSg0lj3X2+bAsqpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QwMDU2MmQtYzUxMC0z
Mjc4LWJjNWItMjc3Njg5ZjlhNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGpJFiyFAPL09mToaSA9yObuAq9bZx90YnhhN5t3+3gW/LLOmrlikU7
+Wui4MJIKhvWmZO1UCLeH64RWBIaqxXC3561hU+H8hKlr9pEuPeDarb0qn8zV2pZ
HZfuYXsi5AjVsvBWYNbWlco2KGe/qiQqGAxETOWycg85zAzeUxojPdMZdG3uf51E
EUSO93B2wff73bZl4by+o3i4MH43RPHdD8Bq5pJ526sd32u9RADwzTzlHZ0MySw4
wcHlxYjT2Z2yR/Yqx0Fe3+OQeafi3xgVDA+/gOxnNGUZm2an5IC547s3+PSYs/Om
kYdijnSyhSJ7qBC30WCFnuJQL9lM2w0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:56 2025 by rpki-client