Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa
File: cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa (raw, json)
Hash identifier: 0KctOOfZ2YSAc2nbgsUA6PQt1vbcyklIeerZ+HP3G8k=
Subject key identifier: D8:66:EE:71:1A:9F:41:AD:36:A4:E0:14:1F:F8:2E:4D:D9:8C:B7:3E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A97C22891F5CA47A25700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 198.45.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:97:c2:28:91:f5:ca:47:a2:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=def8fd8a-9fba-46a3-8d02-2387d0710b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:1b:86:72:04:01:6d:42:74:4f:54:1c:0a:
30:be:0f:9d:4b:50:18:fa:f7:d6:cc:7b:56:75:26:
eb:0a:de:01:e3:ad:e7:0a:8a:ff:98:13:70:1c:49:
05:cb:8c:d1:af:21:f0:46:ad:49:0b:d5:ed:eb:a6:
45:b6:18:c1:57:35:64:4d:3e:56:eb:68:d8:b6:0b:
5a:11:a7:f2:b4:02:06:bb:28:7c:6f:e1:f3:34:8c:
f9:23:98:14:99:62:39:dd:54:4f:bd:04:20:e9:70:
af:7c:ee:3e:81:3e:81:8b:93:d0:26:fd:a8:5f:a1:
75:ed:a4:01:08:84:89:fb:1a:30:1c:81:ef:9c:ad:
34:8f:0c:6b:7b:79:0e:ec:4d:02:a2:f4:e4:21:64:
01:35:52:56:66:db:31:c2:9c:36:32:a1:04:27:68:
35:dc:9d:eb:e8:e7:48:70:a4:e8:10:de:24:bf:70:
be:3e:71:8d:c3:60:ea:d9:de:4c:81:49:45:64:cd:
69:a4:a2:cb:b3:9d:ed:2c:3f:03:93:58:26:e9:de:
52:d7:22:2f:fa:ef:31:6e:e2:9f:64:45:fd:c0:6c:
98:28:10:1c:23:a3:b5:b2:5b:a9:da:32:54:c5:ed:
9c:96:98:e0:ce:8c:a5:bb:48:87:7e:58:e2:2a:f3:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:EE:71:1A:9F:41:AD:36:A4:E0:14:1F:F8:2E:4D:D9:8C:B7:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd1c8e68-8d92-3fe1-9a51-65ca1877abad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:36:0e:f0:7c:97:a5:0c:c8:ff:86:6d:da:74:bc:8f:ea:33:
dd:93:99:4c:88:8b:ec:72:56:60:3a:0d:02:f5:3e:fc:40:c0:
14:9b:66:6a:c3:5c:b0:22:9f:b2:32:43:56:8c:0d:76:f6:26:
2d:89:8c:58:cb:9d:b5:64:c0:99:50:30:48:8b:6d:1b:ae:09:
07:b9:78:18:df:18:b2:a6:01:29:ca:2f:e4:6f:9c:5f:ba:c4:
c7:c0:f4:7c:fa:bc:c4:80:eb:21:89:bb:47:49:ef:7b:bc:8c:
9b:99:fa:8b:53:49:f4:b6:64:ae:8a:1e:10:7b:ef:cf:6e:2e:
f8:e4:c8:12:65:2e:e0:06:21:c8:11:e2:c5:37:53:45:c9:09:
3d:39:00:e3:36:d5:fd:da:b7:17:f1:87:a7:0f:52:92:91:85:
b3:f9:7a:72:8f:3a:02:fe:72:9d:2b:9e:6e:3a:d8:32:da:2b:
6a:52:37:d9:15:39:46:24:96:cf:20:a6:fa:f6:c6:9e:ce:1e:
3d:0b:fd:40:dd:2f:bc:da:eb:6c:50:08:9c:8f:de:b8:33:71:
12:83:17:f6:cd:90:46:ce:cf:9a:94:e6:f7:f4:fb:a7:67:50:
3a:71:c0:ac:51:58:49:18:fa:92:04:18:57:3c:fa:97:cf:a0:
c2:20:b1:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKpfCKJH1ykeiVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZGVmOGZkOGEtOWZiYS00NmEzLThkMDItMjM4N2QwNzEwYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaobhnIEAW1CdE9UHAowvg+dS1AY+vfWzHtW
dSbrCt4B463nCor/mBNwHEkFy4zRryHwRq1JC9Xt66ZFthjBVzVkTT5W62jYtgta
EafytAIGuyh8b+HzNIz5I5gUmWI53VRPvQQg6XCvfO4+gT6Bi5PQJv2oX6F17aQB
CISJ+xowHIHvnK00jwxre3kO7E0CovTkIWQBNVJWZtsxwpw2MqEEJ2g13J3r6OdI
cKToEN4kv3C+PnGNw2Dq2d5MgUlFZM1ppKLLs53tLD8Dk1gm6d5S1yIv+u8xbuKf
ZEX9wGyYKBAcI6O1slup2jJUxe2clpjgzoylu0iHfljiKvNxOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhm7nEan0GtNqTgFB/4Lk3ZjLc+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QxYzhlNjgtOGQ5Mi0z
ZmUxLTlhNTEtNjVjYTE4NzdhYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQ2DvB8l6UMyP+Gbdp0vI/qM92TmUyIi+xyVmA6DQL1PvxAwBSbZmrD
XLAin7IyQ1aMDXb2Ji2JjFjLnbVkwJlQMEiLbRuuCQe5eBjfGLKmASnKL+RvnF+6
xMfA9Hz6vMSA6yGJu0dJ73u8jJuZ+otTSfS2ZK6KHhB7789uLvjkyBJlLuAGIcgR
4sU3U0XJCT05AOM21f3atxfxh6cPUpKRhbP5enKPOgL+cp0rnm462DLaK2pSN9kV
OUYkls8gpvr2xp7OHj0L/UDdL7za62xQCJyP3rgzcRKDF/bNkEbOz5qU5vf0+6dn
UDpxwKxRWEkY+pIEGFc8+pfPoMIgsUY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:39 2025 by rpki-client