Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa
File: d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa (raw, json)
Hash identifier: vKV+6grPtIkPswzenvTFV0mgnHh1qn6vm0fp40wJqB4=
Subject key identifier: 71:6B:AA:8B:97:41:63:B0:BB:44:2A:C5:4B:3A:13:AD:5E:49:E8:07
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0C9E01DADECDDCC32AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0c:9e:01:da:de:cd:dc:c3:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=14101b64-aea5-4a3f-89bb-c54a8bbe6c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:16:ba:1a:e5:91:b6:0f:24:f3:e3:53:6c:
3c:36:c9:e0:db:60:9e:57:95:8a:97:b6:ed:37:1c:
91:b4:f3:ee:e1:d1:3a:84:02:b3:9d:15:61:9a:ee:
5b:c2:87:a3:16:b9:b3:2d:a9:50:a6:c3:e8:ef:08:
d1:aa:ac:bf:4a:4a:bd:6d:f9:63:31:2e:01:af:67:
17:8b:3b:43:9f:43:97:c4:7b:e6:29:f1:20:24:9e:
50:34:f0:78:88:bc:bd:e6:52:df:8c:85:93:b8:89:
ee:02:79:92:b9:67:0a:b4:a7:4c:95:a8:9d:49:25:
78:03:f7:e0:a1:4e:1f:a5:f6:17:aa:3c:51:ce:64:
26:74:68:6e:c0:72:1e:b3:41:d6:24:66:43:a8:2c:
ea:80:92:bd:84:e1:f0:9f:89:a9:d3:13:c3:65:69:
a2:62:e3:31:f3:f9:ff:93:8b:5b:eb:57:e6:90:c3:
12:89:22:32:fa:54:fd:be:94:9b:ab:08:34:2a:af:
74:25:2c:b4:2f:db:f7:f7:ac:d4:91:29:ec:84:e3:
3b:a2:62:4a:20:b5:63:53:d2:0d:c1:9b:25:ad:14:
9e:97:bb:26:e7:6b:d2:b2:fd:c0:d2:d5:48:ef:5d:
df:72:8f:fe:35:e8:40:5e:31:9e:3b:2e:a2:cc:a1:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:AA:8B:97:41:63:B0:BB:44:2A:C5:4B:3A:13:AD:5E:49:E8:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:4a:55:0d:d6:01:a4:8c:7c:01:23:eb:0b:bf:9a:41:b6:bb:
78:ea:da:8a:2b:ab:16:91:be:a7:02:99:1c:e7:4f:2c:a0:85:
09:13:a3:8b:26:10:e5:5e:b4:91:48:7b:dd:12:f9:bc:8b:b3:
3a:6c:ca:d2:9f:35:7c:ed:48:88:79:6d:7c:0f:66:e6:9e:27:
c9:3a:ee:ce:fc:70:d4:f7:8e:a8:59:67:b7:d6:3b:24:a6:bf:
b4:93:6f:52:ed:cd:7e:a4:aa:1b:28:1f:fb:57:b1:ac:57:bf:
4b:55:51:60:01:46:ff:3c:b3:6f:34:38:c6:30:59:6e:37:fd:
40:cf:28:49:51:2b:2f:98:33:73:69:e2:97:2a:6b:8d:9d:82:
82:bf:40:50:2f:5f:21:da:96:97:ae:41:96:c0:ad:53:28:73:
8d:aa:ef:0c:07:ad:2d:b2:9c:02:2d:00:d3:ee:2e:54:c2:4a:
d0:13:4b:c4:cb:16:f1:87:2c:fc:b4:2d:1e:42:ec:db:d4:e9:
69:1a:0f:9b:4e:1e:98:dd:23:eb:10:00:f6:ee:d4:cd:94:7f:
0c:ed:1f:c2:fc:eb:d8:91:16:db:ac:c1:c0:58:b0:ce:77:ce:
35:ea:29:62:4b:5b:33:77:ff:01:2e:42:50:d1:2f:84:46:c0:
7d:fe:91:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwyeAdrezdzDKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTQxMDFiNjQtYWVhNS00YTNmLTg5YmItYzU0YThiYmU2YzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQWuhrlkbYPJPPjU2w8Nsng22CeV5WKl7bt
NxyRtPPu4dE6hAKznRVhmu5bwoejFrmzLalQpsPo7wjRqqy/Skq9bfljMS4Br2cX
iztDn0OXxHvmKfEgJJ5QNPB4iLy95lLfjIWTuInuAnmSuWcKtKdMlaidSSV4A/fg
oU4fpfYXqjxRzmQmdGhuwHIes0HWJGZDqCzqgJK9hOHwn4mp0xPDZWmiYuMx8/n/
k4tb61fmkMMSiSIy+lT9vpSbqwg0Kq90JSy0L9v396zUkSnshOM7omJKILVjU9IN
wZslrRSel7sm52vSsv3A0tVI713fco/+NehAXjGeOy6izKElGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFrqouXQWOwu0QqxUs6E61eSegHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJlNGMwMGYtMTA5Mi0z
YzJlLWE4ZjUtYWJlM2U5NDQzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFKVQ3WAaSMfAEj6wu/mkG2u3jq2oorqxaRvqcCmRznTyyghQkTo4sm
EOVetJFIe90S+byLszpsytKfNXztSIh5bXwPZuaeJ8k67s78cNT3jqhZZ7fWOySm
v7STb1LtzX6kqhsoH/tXsaxXv0tVUWABRv88s280OMYwWW43/UDPKElRKy+YM3Np
4pcqa42dgoK/QFAvXyHalpeuQZbArVMoc42q7wwHrS2ynAItANPuLlTCStATS8TL
FvGHLPy0LR5C7NvU6WkaD5tOHpjdI+sQAPbu1M2UfwztH8L869iRFtuswcBYsM53
zjXqKWJLWzN3/wEuQlDRL4RGwH3+kUk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:26 2025 by rpki-client