Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4031df9-e13a-31ec-8404-137b32226390.roa
File: f4031df9-e13a-31ec-8404-137b32226390.roa (raw, json)
Hash identifier: KABKJAoYaPRfquCSgti50Yu1hWwW0b7h3o5NhUWtuB4=
Subject key identifier: 03:02:33:11:D7:91:81:72:DB:81:CE:65:13:7A:7F:BF:BD:4B:FF:CC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AE514F9D5026087816B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4031df9-e13a-31ec-8404-137b32226390.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 75.106.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:e5:14:f9:d5:02:60:87:81:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f27350d0-be75-42d6-8fda-6f06465a181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:0b:32:c2:27:ac:15:29:62:4c:00:ac:4b:
a9:fc:2c:de:c3:ee:11:e2:c3:5b:f4:43:bf:b5:9c:
17:ac:2f:0c:84:8e:93:3d:90:04:dd:dd:ad:11:0d:
d0:94:80:ec:64:3b:47:4e:1f:de:9a:6f:a7:26:3e:
0e:72:67:fa:c8:e4:94:75:14:6c:a6:b8:49:c3:15:
ef:71:99:7e:e7:fc:bc:fe:ce:17:e7:3f:07:50:ef:
81:79:94:70:31:1a:af:8a:85:79:23:05:de:1c:8b:
ce:68:fb:c6:39:a0:1a:bd:38:8b:75:5c:39:ac:fd:
5c:0a:96:9b:13:33:de:57:ba:16:7c:1f:ff:0b:9c:
65:6a:69:d8:fc:7a:e4:24:41:81:4d:4f:96:a2:f2:
49:0b:e8:7d:2e:be:6e:81:65:8a:d4:fd:e3:7d:d1:
53:81:49:35:69:5a:95:b2:8f:f5:76:c7:f4:d9:fd:
b0:33:48:ef:21:94:29:da:64:a1:2c:de:f4:87:65:
8c:a7:47:b7:f0:b2:6b:fb:5b:65:cf:55:05:da:1f:
14:38:05:d7:b8:0a:a6:a7:1d:9d:67:a3:1a:26:05:
3b:cf:4f:30:d9:41:c7:ac:eb:ca:5e:83:e8:91:59:
29:77:e3:be:59:76:b3:aa:c0:9b:28:ae:0f:a7:0f:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:33:11:D7:91:81:72:DB:81:CE:65:13:7A:7F:BF:BD:4B:FF:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4031df9-e13a-31ec-8404-137b32226390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.106.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:64:1c:65:87:40:b2:5c:b1:57:9a:a9:8d:a7:30:c8:3c:2a:
88:fd:be:49:eb:e6:3e:a8:22:83:2f:31:e9:4e:4b:8c:22:79:
aa:bb:f2:fa:a7:8e:c6:36:06:69:aa:99:ae:1b:5c:1f:14:5e:
e7:d4:63:78:ad:b3:82:70:59:99:8b:5e:0f:5c:49:1c:4d:1d:
07:4f:0d:cd:20:f4:e6:41:ec:64:5b:6f:1f:38:ae:85:b0:3c:
4c:58:1f:42:8c:1e:3d:0c:8b:0f:b2:49:22:2b:7b:3a:f7:20:
ab:0f:97:ec:aa:10:c8:3d:6a:c6:d8:15:b5:3f:12:3d:6c:2d:
61:cf:bc:5e:f6:dc:81:9f:92:a8:fb:62:c7:9e:fb:2e:4e:48:
32:af:74:a4:3b:48:d1:42:bd:27:a3:82:f5:05:9c:de:2b:43:
ec:33:87:73:c3:c5:fa:8f:94:4f:69:9d:75:4c:94:5a:de:57:
60:01:5c:48:62:a6:e4:71:c4:35:6d:7f:8f:10:ca:fc:0e:9a:
49:b1:97:d7:62:a8:12:e6:dd:89:80:fe:7f:90:54:75:3e:a8:
9e:50:66:4a:db:c3:5e:83:9f:94:46:ce:68:ff:5e:04:b6:17:
c2:cc:db:e5:60:63:02:c6:91:71:b9:32:66:94:b3:ed:61:4e:
5f:2f:79:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKuUU+dUCYIeBa0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjI3MzUwZDAtYmU3NS00MmQ2LThmZGEtNmYwNjQ2NWExODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cLMsInrBUpYkwArEup/Czew+4R4sNb9EO/
tZwXrC8MhI6TPZAE3d2tEQ3QlIDsZDtHTh/emm+nJj4Ocmf6yOSUdRRsprhJwxXv
cZl+5/y8/s4X5z8HUO+BeZRwMRqvioV5IwXeHIvOaPvGOaAavTiLdVw5rP1cCpab
EzPeV7oWfB//C5xlamnY/HrkJEGBTU+WovJJC+h9Lr5ugWWK1P3jfdFTgUk1aVqV
so/1dsf02f2wM0jvIZQp2mShLN70h2WMp0e38LJr+1tlz1UF2h8UOAXXuAqmpx2d
Z6MaJgU7z08w2UHHrOvKXoPokVkpd+O+WXazqsCbKK4Ppw9NkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMCMxHXkYFy24HOZRN6f7+9S//MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjQwMzFkZjktZTEzYS0z
MWVjLTg0MDQtMTM3YjMyMjI2MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2qlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElkHGWHQLJcsVeaqY2nMMg8Koj9vknr5j6oIoMvMelOS4wieaq78vqn
jsY2Bmmqma4bXB8UXufUY3its4JwWZmLXg9cSRxNHQdPDc0g9OZB7GRbbx84roWw
PExYH0KMHj0Miw+ySSIrezr3IKsPl+yqEMg9asbYFbU/Ej1sLWHPvF723IGfkqj7
Ysee+y5OSDKvdKQ7SNFCvSejgvUFnN4rQ+wzh3PDxfqPlE9pnXVMlFreV2ABXEhi
puRxxDVtf48QyvwOmkmxl9diqBLm3YmA/n+QVHU+qJ5QZkrbw16Dn5RGzmj/XgS2
F8LM2+VgYwLGkXG5MmaUs+1hTl8veTI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:58 2025 by rpki-client