Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa
File: d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa (raw, json)
Hash identifier: 2tiN4O+qojkyXmC1gZRG5gRVey6+rn2TO9NZRZ5YOvg=
Subject key identifier: FB:F9:B6:1A:55:95:62:46:AF:8E:88:66:32:8D:B3:08:C1:0F:82:23
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B084ED2BC8E431C5CBCE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:08:4e:d2:bc:8e:43:1c:5c:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=978eba74-7879-4dd2-b7b1-396e8cfcf4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:fd:c2:f1:8c:95:a7:ba:cc:04:81:9a:19:
1b:a4:ae:9a:9a:29:63:a3:21:53:ef:14:06:b5:e3:
96:8e:5a:c2:81:89:f3:97:85:57:7b:9f:d2:d4:25:
05:4a:d5:8e:7b:9f:e9:e9:9b:d3:f7:dc:4b:13:0b:
da:98:60:cc:ed:f8:3a:2b:c3:b5:94:cc:68:d1:71:
c3:5c:9e:80:22:9b:03:88:94:5f:1e:b4:b0:6f:67:
70:31:9d:d3:4c:7a:f5:34:4b:b3:94:10:1d:65:ef:
5c:7e:57:41:5e:b5:b5:4c:37:4a:42:77:ab:f7:83:
5b:9a:04:a7:3a:14:07:4a:98:66:64:a7:39:be:a7:
8a:43:97:35:36:74:04:40:81:ee:e3:a4:c5:2b:cb:
11:ed:a9:93:30:fc:ef:5a:eb:56:d3:40:3b:e4:58:
9c:1f:aa:40:b6:aa:9d:e3:4a:4e:50:7e:f8:48:27:
ca:e9:a4:b6:1f:00:5d:e3:b5:14:90:13:d6:9b:44:
03:b3:48:55:08:ec:d6:8a:c0:7f:ff:dd:5a:e5:1f:
69:2e:e1:41:a6:42:20:94:ce:b1:08:ca:12:b5:43:
d6:0d:c8:8b:03:60:9d:5f:18:7d:9f:5b:e9:c1:6c:
cf:f5:ae:de:35:5e:e5:1f:aa:9f:20:33:9f:28:6f:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:B6:1A:55:95:62:46:AF:8E:88:66:32:8D:B3:08:C1:0F:82:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8e8fa5e-c66c-395e-b819-56d247bfd1c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:d6:c3:bd:e1:13:d5:91:02:61:e3:99:9f:03:e2:9a:d0:d3:
09:4f:80:81:3b:36:95:a5:bb:e3:23:a0:d2:79:3c:27:fa:b4:
16:bf:cd:2c:51:dc:fa:2d:4e:29:87:d0:af:f8:a6:21:3c:c1:
d4:9d:0a:83:04:75:4f:d2:15:db:05:0a:11:e2:9a:29:9c:c9:
97:1d:d1:2d:4e:03:b7:3d:52:54:53:f6:72:fa:d5:b6:60:d5:
62:8f:48:95:4d:87:3a:12:31:12:f5:d5:78:d7:0d:30:39:59:
e2:a3:19:38:31:55:86:0c:d3:d0:27:08:84:93:1a:90:df:8c:
44:03:51:4f:cd:23:bc:54:59:1d:c6:e4:50:93:e6:cd:bf:3f:
40:d1:21:ec:b4:86:cc:4c:00:7d:45:c2:68:a4:93:cc:39:09:
a4:50:15:e2:28:cf:45:86:be:3b:e5:c5:81:c9:36:3f:c3:d6:
af:99:ca:18:5f:ad:6a:02:95:1f:28:33:73:f1:2f:02:a6:e0:
9f:62:2c:49:ef:ba:b3:d6:52:dd:e1:76:38:66:63:51:2b:19:
91:0d:27:81:b9:90:08:bd:88:7c:fa:42:d2:72:6f:fe:b5:d0:
69:86:a5:5b:59:d8:c0:a2:e5:47:07:ff:d8:08:5e:2f:0b:4a:
92:16:30:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwhO0ryOQxxcvOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTc4ZWJhNzQtNzg3OS00ZGQyLWI3YjEtMzk2ZThjZmNmNGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc79wvGMlae6zASBmhkbpK6amiljoyFT7xQG
teOWjlrCgYnzl4VXe5/S1CUFStWOe5/p6ZvT99xLEwvamGDM7fg6K8O1lMxo0XHD
XJ6AIpsDiJRfHrSwb2dwMZ3TTHr1NEuzlBAdZe9cfldBXrW1TDdKQner94NbmgSn
OhQHSphmZKc5vqeKQ5c1NnQEQIHu46TFK8sR7amTMPzvWutW00A75FicH6pAtqqd
40pOUH74SCfK6aS2HwBd47UUkBPWm0QDs0hVCOzWisB//91a5R9pLuFBpkIglM6x
CMoStUPWDciLA2CdXxh9n1vpwWzP9a7eNV7lH6qfIDOfKG8UzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPv5thpVlWJGr46IZjKNswjBD4IjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhlOGZhNWUtYzY2Yy0z
OTVlLWI4MTktNTZkMjQ3YmZkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ3Ww73hE9WRAmHjmZ8D4prQ0wlPgIE7NpWlu+MjoNJ5PCf6tBa/zSxR
3PotTimH0K/4piE8wdSdCoMEdU/SFdsFChHimimcyZcd0S1OA7c9UlRT9nL61bZg
1WKPSJVNhzoSMRL11XjXDTA5WeKjGTgxVYYM09AnCISTGpDfjEQDUU/NI7xUWR3G
5FCT5s2/P0DRIey0hsxMAH1Fwmikk8w5CaRQFeIoz0WGvjvlxYHJNj/D1q+Zyhhf
rWoClR8oM3PxLwKm4J9iLEnvurPWUt3hdjhmY1ErGZENJ4G5kAi9iHz6QtJyb/61
0GmGpVtZ2MCi5UcH/9gIXi8LSpIWMKY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:36 2025 by rpki-client