Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f211c495-6e46-39e4-9a36-e83f88edbef1.roa
File: f211c495-6e46-39e4-9a36-e83f88edbef1.roa (raw, json)
Hash identifier: pDzhGuJXLRNYJeCXgzMEweE31spIy8GtYyL3lZ5ncEo=
Subject key identifier: 75:35:D0:69:5A:5C:DF:4E:63:85:FF:4A:3C:60:A8:A7:45:3B:B4:A7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACC8523279F3187370C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f211c495-6e46-39e4-9a36-e83f88edbef1.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:cc:85:23:27:9f:31:87:37:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=326d2557-2762-4167-9093-0261bc0f3503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:3d:a6:71:5a:4e:6f:ba:5c:24:25:a5:9d:
db:7e:81:7c:c1:4b:b5:ae:aa:bd:90:24:d7:da:e4:
0c:34:be:87:ae:17:34:d2:e2:34:65:bc:56:ab:e0:
00:71:75:d5:ce:ec:e5:e3:d2:59:0b:7d:9b:9b:48:
74:9f:4e:f2:13:ac:87:e7:f5:80:7a:5f:80:e8:97:
10:36:3b:78:0e:1d:2a:1c:cf:36:23:25:eb:c0:8e:
03:d0:2e:af:76:93:ea:77:24:a4:eb:14:d6:f3:99:
f8:de:ff:ed:68:33:99:13:d2:08:8d:f1:7d:eb:1c:
9a:a3:24:c3:f2:e3:ca:96:87:01:d2:bf:95:c8:b6:
01:aa:89:2a:05:fa:0e:98:f3:85:01:fb:d8:72:64:
eb:ae:d5:9c:23:5a:b3:4d:f6:a7:91:ed:24:08:ee:
99:ea:4b:40:be:0f:c6:9a:84:23:6e:66:11:5d:2e:
dd:86:d5:d8:5c:06:ec:97:5d:ef:2a:dd:cf:c9:e2:
f8:ec:6f:40:8e:5e:23:a0:be:db:3b:dc:a7:35:3d:
2e:a4:19:ed:20:bb:97:bf:3f:dd:23:29:65:14:34:
e8:98:97:14:72:d9:22:83:b1:97:96:de:ed:9f:d4:
82:ee:c8:02:0c:3c:38:38:bf:8b:57:09:9b:b1:0d:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:D0:69:5A:5C:DF:4E:63:85:FF:4A:3C:60:A8:A7:45:3B:B4:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f211c495-6e46-39e4-9a36-e83f88edbef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:3e:14:39:a3:32:e0:fb:b8:fc:51:92:60:fc:c6:a5:aa:5f:
1d:a0:3f:3f:9e:af:46:d5:c8:f2:b0:df:5b:76:c4:9f:f7:a5:
27:e7:3a:d4:2d:0f:29:39:2c:c1:4d:d8:5e:db:44:96:59:0a:
a5:19:4e:9a:32:00:fc:7c:cf:56:75:10:8e:1d:c1:f2:ff:be:
11:67:e9:50:dc:d8:2e:e6:f0:fa:0d:07:2a:6c:51:e9:3f:e5:
72:07:f9:61:ca:99:7e:6e:fd:21:13:07:b0:18:11:bb:40:fc:
5c:72:bc:c8:f2:4c:92:79:0f:df:03:65:2a:50:8e:ec:ab:9a:
21:81:ff:d1:56:de:7d:6c:a1:86:40:31:0d:2c:0b:f5:1b:45:
d1:91:45:d9:18:99:93:d1:a5:6f:f2:e7:85:4a:7f:c5:0d:7a:
ec:76:3d:31:67:c6:ec:2e:f0:fb:a2:2c:57:ab:a4:2d:c0:d2:
45:58:b8:f4:61:62:8a:9e:68:74:85:df:9e:09:e6:24:56:92:
fc:4b:94:94:6f:c6:f2:d9:32:96:f5:f9:11:f1:6d:3f:59:6a:
47:60:32:b9:64:a8:24:1e:ba:33:28:74:ec:61:cb:f1:f4:05:
1a:14:0c:dd:32:ae:bc:ca:b9:50:9d:96:9f:ea:51:d0:1e:b9:
65:3d:ff:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsyFIyefMYc3DAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MzI2ZDI1NTctMjc2Mi00MTY3LTkwOTMtMDI2MWJjMGYzNTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Q9pnFaTm+6XCQlpZ3bfoF8wUu1rqq9kCTX
2uQMNL6Hrhc00uI0ZbxWq+AAcXXVzuzl49JZC32bm0h0n07yE6yH5/WAel+A6JcQ
Njt4Dh0qHM82IyXrwI4D0C6vdpPqdySk6xTW85n43v/taDOZE9IIjfF96xyaoyTD
8uPKlocB0r+VyLYBqokqBfoOmPOFAfvYcmTrrtWcI1qzTfanke0kCO6Z6ktAvg/G
moQjbmYRXS7dhtXYXAbsl13vKt3PyeL47G9Ajl4joL7bO9ynNT0upBntILuXvz/d
IyllFDTomJcUctkig7GXlt7tn9SC7sgCDDw4OL+LVwmbsQ2VAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHU10GlaXN9OY4X/SjxgqKdFO7SnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjIxMWM0OTUtNmU0Ni0z
OWU0LTlhMzYtZTgzZjg4ZWRiZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMU+FDmjMuD7uPxRkmD8xqWqXx2gPz+er0bVyPKw31t2xJ/3pSfnOtQt
Dyk5LMFN2F7bRJZZCqUZTpoyAPx8z1Z1EI4dwfL/vhFn6VDc2C7m8PoNBypsUek/
5XIH+WHKmX5u/SETB7AYEbtA/FxyvMjyTJJ5D98DZSpQjuyrmiGB/9FW3n1soYZA
MQ0sC/UbRdGRRdkYmZPRpW/y54VKf8UNeux2PTFnxuwu8PuiLFerpC3A0kVYuPRh
YoqeaHSF354J5iRWkvxLlJRvxvLZMpb1+RHxbT9ZakdgMrlkqCQeujModOxhy/H0
BRoUDN0yrrzKuVCdlp/qUdAeuWU9/yA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:35 2025 by rpki-client