Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa
File: d12c5bca-e1ca-3d00-afc0-e005b203b536.roa (raw, json)
Hash identifier: sslJa8xtoDf9f5R0SqoA1EkB2KC2zJw1CBR1zLZlJEM=
Subject key identifier: 06:5B:DD:96:60:C3:DD:2D:17:83:11:B2:E8:52:46:92:7A:47:1C:4F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B09305DC2BE6E00111300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:09:30:5d:c2:be:6e:00:11:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6feebd0e-d4d5-4e96-bc90-6475b94999ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:a0:f9:9f:5c:3c:7a:70:5f:4a:80:67:24:
4d:c4:d9:75:ca:de:da:4f:9d:08:89:80:6e:bd:1b:
b1:b2:bd:f8:a6:d0:c2:39:15:c7:a4:cc:bc:8a:8f:
5e:84:1f:82:97:0d:4a:ff:2a:be:1c:a7:d3:90:80:
3a:00:bc:36:ef:13:16:85:61:80:92:61:95:1b:93:
d3:fb:ca:a5:b6:6c:59:90:f4:61:00:7f:a6:8a:d8:
60:6b:25:c3:77:81:97:f2:24:08:0f:13:0e:ed:fe:
b0:0f:e7:0f:5c:4b:60:6c:ec:96:b8:54:96:f7:99:
51:cb:1f:82:92:26:32:f9:b6:30:d1:f6:aa:86:d8:
7e:09:75:9e:15:6b:8b:fd:04:b1:ef:30:53:a3:a9:
9e:5a:2b:95:8f:08:b1:a3:c5:47:3f:53:e8:88:93:
3b:78:20:17:a8:67:31:65:59:48:43:48:69:93:2c:
f1:33:d6:8b:7e:5a:13:c4:75:04:2c:52:a2:cb:b0:
7b:4d:53:0b:eb:a7:68:3d:3f:91:b1:a1:fb:f9:50:
00:f8:33:19:6f:f5:49:51:70:2b:d5:79:d2:5a:23:
f2:3d:2d:40:00:51:a2:f4:35:b9:d7:f1:3f:06:e0:
26:60:4e:13:45:f6:33:c0:13:f0:f6:de:d3:82:30:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:DD:96:60:C3:DD:2D:17:83:11:B2:E8:52:46:92:7A:47:1C:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:1a:1f:c7:3c:b9:c5:46:9e:86:77:a9:0b:33:01:6d:26:b8:
1c:4a:d6:05:7f:03:74:9f:f2:c7:79:1a:3d:19:a2:ad:fe:bf:
e8:a2:c8:48:f2:66:e5:9e:13:af:bb:3c:0c:60:ba:20:97:d2:
5f:f5:75:29:52:0e:be:06:15:54:49:dd:cf:c1:3a:5c:a6:25:
db:fd:b2:ef:a5:83:e9:f6:38:10:a7:be:5b:c3:27:5f:d9:a7:
60:02:dc:00:33:cd:cc:ac:2d:88:d2:83:47:38:75:80:a1:ec:
87:fb:cd:00:34:34:43:2d:1f:db:58:8d:f6:89:61:af:3d:56:
8e:9c:09:97:90:1e:43:6a:12:40:91:b7:be:72:7c:56:a2:46:
e8:a7:f1:42:9f:33:f7:82:28:c6:35:34:c3:a3:5b:12:33:a2:
48:65:a6:ad:06:ff:4a:60:10:0c:79:b3:2d:3b:62:a2:42:ad:
4f:76:5a:fc:54:e3:c4:13:ad:fe:6c:99:08:f9:7e:05:26:c8:
88:ad:60:93:10:9e:44:db:62:0d:35:e9:25:f4:75:f8:f6:95:
07:d5:d5:b4:11:70:a9:9e:8a:81:e9:c9:b5:77:91:f0:35:12:
94:ff:ab:dd:8a:13:34:23:60:9e:25:d9:3a:a1:ee:09:b9:50:
dc:24:6a:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwkwXcK+bgAREwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmZlZWJkMGUtZDRkNS00ZTk2LWJjOTAtNjQ3NWI5NDk5OWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvqg+Z9cPHpwX0qAZyRNxNl1yt7aT50IiYBu
vRuxsr34ptDCORXHpMy8io9ehB+Clw1K/yq+HKfTkIA6ALw27xMWhWGAkmGVG5PT
+8qltmxZkPRhAH+mithgayXDd4GX8iQIDxMO7f6wD+cPXEtgbOyWuFSW95lRyx+C
kiYy+bYw0faqhth+CXWeFWuL/QSx7zBTo6meWiuVjwixo8VHP1PoiJM7eCAXqGcx
ZVlIQ0hpkyzxM9aLfloTxHUELFKiy7B7TVML66doPT+RsaH7+VAA+DMZb/VJUXAr
1XnSWiPyPS1AAFGi9DW51/E/BuAmYE4TRfYzwBPw9t7TgjCLFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZb3ZZgw90tF4MRsuhSRpJ6RxxPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyYzViY2EtZTFjYS0z
ZDAwLWFmYzAtZTAwNWIyMDNiNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYaH8c8ucVGnoZ3qQszAW0muBxK1gV/A3Sf8sd5Gj0Zoq3+v+iiyEjy
ZuWeE6+7PAxguiCX0l/1dSlSDr4GFVRJ3c/BOlymJdv9su+lg+n2OBCnvlvDJ1/Z
p2AC3AAzzcysLYjSg0c4dYCh7If7zQA0NEMtH9tYjfaJYa89Vo6cCZeQHkNqEkCR
t75yfFaiRuin8UKfM/eCKMY1NMOjWxIzokhlpq0G/0pgEAx5sy07YqJCrU92WvxU
48QTrf5smQj5fgUmyIitYJMQnkTbYg016SX0dfj2lQfV1bQRcKmeioHpybV3kfA1
EpT/q92KEzQjYJ4l2Tqh7gm5UNwkars=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:34 2025 by rpki-client