Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa
File: cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa (raw, json)
Hash identifier: ACWMmeMb0GEWzai4K/CpjboKn3Ku70Jk5l1uHug2BlI=
Subject key identifier: E6:A6:9E:E3:6A:4B:62:CE:11:11:BB:F1:00:89:48:A1:00:C2:C4:7E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AFFBBE3A6B55DE7A36E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 162.72.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ff:bb:e3:a6:b5:5d:e7:a3:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6624dd7c-2390-4218-8027-14ea8022be27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:91:97:6e:1c:c8:62:34:05:b8:cf:25:36:
11:74:e1:7c:71:e6:d3:5b:c1:02:85:32:94:de:2d:
ca:06:b6:70:1f:f6:fb:24:00:a6:03:15:75:b8:3c:
99:b8:9e:6c:a6:2b:be:17:4a:d7:43:48:d9:c5:bc:
3e:d6:3b:d8:7d:d2:91:ef:7b:51:02:af:76:5f:56:
36:c7:f4:a3:48:bc:4e:fa:91:e6:c4:c6:07:8b:bc:
67:d6:fd:2b:24:a6:91:89:85:4c:57:34:fa:2a:c3:
86:0b:b4:cb:31:93:87:3f:42:1e:f7:90:bc:84:57:
47:7d:d6:4e:a9:26:4d:85:12:f3:9f:61:60:71:75:
86:8d:9a:c3:20:54:05:5d:e6:cb:65:c5:ee:c7:7f:
6d:0e:f6:cb:0b:f4:67:60:79:f7:12:be:0b:85:f3:
04:3d:ab:35:30:c0:c1:8c:df:61:a8:c1:69:cb:bf:
0d:e1:45:23:55:db:96:aa:aa:4f:6d:f3:52:09:f0:
32:ec:0b:bc:ab:b8:8a:c9:d9:a8:8f:53:b2:3a:6c:
cc:f8:24:4f:99:f5:6f:1d:23:95:4a:59:ce:1b:27:
de:1a:be:cd:f1:67:d6:a9:35:51:82:9a:bd:81:53:
e3:c6:5e:82:f1:7b:fb:be:41:a0:b3:4b:af:59:ea:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:9E:E3:6A:4B:62:CE:11:11:BB:F1:00:89:48:A1:00:C2:C4:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:c6:1f:7a:55:2e:d8:a9:5a:8c:98:ed:83:4f:b4:0b:28:73:
7c:d5:aa:8f:a2:ee:64:28:de:9e:d4:86:f3:55:f5:c2:fe:8a:
62:ef:1c:e2:7e:94:2f:66:c6:c2:af:12:47:2d:cc:95:ee:16:
53:0a:ad:b5:bb:84:f3:48:5b:a4:f9:04:20:ad:a8:50:6f:e1:
1d:b9:23:81:bd:ce:b4:a0:42:4b:be:9c:a2:52:2f:b9:54:7a:
d2:38:0c:36:9a:55:46:8b:42:28:fa:6e:33:79:78:7e:41:39:
0e:3f:e0:0c:2c:20:e1:59:11:b8:77:db:da:8b:62:e0:f8:42:
40:f3:40:7e:db:96:af:6a:83:25:5e:80:4b:61:f2:6d:4b:b7:
39:27:7a:f5:4a:de:c0:d4:b1:b4:2c:4c:fa:68:28:57:0a:10:
c4:fc:89:e0:d7:3e:f8:a4:b7:e4:24:5e:77:aa:c0:12:ae:d9:
84:aa:d9:23:c6:a8:49:dd:dc:06:c3:65:9a:7a:5e:3e:3b:f5:
1e:8b:31:aa:b8:38:ce:5d:56:31:ca:58:91:3d:38:b1:e5:a5:
5d:53:44:86:d5:27:17:23:7d:92:d2:05:e7:4b:44:0f:1c:a2:
78:87:f2:4f:a6:1f:85:dc:73:26:08:ac:9e:60:35:3a:af:01:
39:2f:8f:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKv+746a1XeejboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjYyNGRkN2MtMjM5MC00MjE4LTgwMjctMTRlYTgwMjJiZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudeRl24cyGI0BbjPJTYRdOF8cebTW8EChTKU
3i3KBrZwH/b7JACmAxV1uDyZuJ5spiu+F0rXQ0jZxbw+1jvYfdKR73tRAq92X1Y2
x/SjSLxO+pHmxMYHi7xn1v0rJKaRiYVMVzT6KsOGC7TLMZOHP0Ie95C8hFdHfdZO
qSZNhRLzn2FgcXWGjZrDIFQFXebLZcXux39tDvbLC/RnYHn3Er4LhfMEPas1MMDB
jN9hqMFpy78N4UUjVduWqqpPbfNSCfAy7Au8q7iKydmoj1OyOmzM+CRPmfVvHSOV
SlnOGyfeGr7N8WfWqTVRgpq9gVPjxl6C8Xv7vkGgs0uvWeoGEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOamnuNqS2LOERG78QCJSKEAwsR+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2YxYzE0NzAtZThiNi0z
MWY0LWFkZTEtMGRmZjk1Yzk5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfGH3pVLtipWoyY7YNPtAsoc3zVqo+i7mQo3p7UhvNV9cL+imLvHOJ+
lC9mxsKvEkctzJXuFlMKrbW7hPNIW6T5BCCtqFBv4R25I4G9zrSgQku+nKJSL7lU
etI4DDaaVUaLQij6bjN5eH5BOQ4/4AwsIOFZEbh329qLYuD4QkDzQH7blq9qgyVe
gEth8m1LtzknevVK3sDUsbQsTPpoKFcKEMT8ieDXPvikt+QkXneqwBKu2YSq2SPG
qEnd3AbDZZp6Xj479R6LMaq4OM5dVjHKWJE9OLHlpV1TRIbVJxcjfZLSBedLRA8c
oniH8k+mH4XccyYIrJ5gNTqvATkvj6o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:07 2025 by rpki-client