Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa
File: da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json)
Hash identifier: 0OW9QI/fgU7yCOXm+oTGv5f7Ep9zK3RTG49NyRUXpxE=
Subject key identifier: E8:74:FF:1F:9C:DB:DF:E0:0B:19:3B:5D:8E:F3:D2:DB:88:1D:97:45
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F43285847FB1A3224B5FDAC9897722F00
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 27446
IP address blocks: 72.250.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:32:24:b5:fd:ac:98:97:72:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=ce5af864-ad5a-4f8b-a71b-4124d0d09529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:47:f9:b3:7f:87:c1:58:ec:bf:6c:79:59:
aa:f3:b9:d8:52:90:0e:54:d7:0d:fc:3e:4f:e5:49:
83:55:ff:cc:59:37:60:e3:5f:61:04:6c:d7:67:cc:
bd:0a:85:2d:c2:c5:bd:f1:12:50:c3:ed:eb:87:3b:
e0:93:32:59:83:67:3c:75:08:84:f8:34:11:82:78:
9a:6d:e2:8c:c5:98:1c:d7:65:0f:39:e6:8b:83:14:
2c:91:ba:ab:4f:3f:72:d5:42:5a:ca:45:a0:09:08:
c3:8a:87:32:2e:03:be:cc:0d:a8:94:7c:ec:99:9c:
ad:95:3f:64:c8:71:59:f5:63:dc:64:ae:95:2e:ac:
e4:68:6c:99:91:83:1b:eb:76:ea:a7:7f:e3:5e:4d:
df:cb:2d:29:db:d6:c4:ff:b7:01:36:47:47:81:65:
3a:cd:94:68:1f:31:4f:be:68:9e:d6:72:21:f3:65:
a9:a5:ed:d6:57:a3:ee:87:25:da:a6:32:53:e4:e3:
59:d7:a1:61:c8:fd:d5:1e:1c:e1:4b:33:8a:91:e7:
8a:72:a1:d7:9c:7c:16:e6:c2:0f:b4:b9:d3:b6:c5:
15:3a:d2:8e:0f:4b:56:7d:3e:5b:9d:5d:b8:36:54:
d3:1b:4f:6b:e2:e6:35:0b:44:e3:db:b4:fa:09:a2:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:FF:1F:9C:DB:DF:E0:0B:19:3B:5D:8E:F3:D2:DB:88:1D:97:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:9c:9e:61:ca:31:f1:cb:b6:99:ba:1f:5b:ab:80:87:99:e4:
1b:f5:72:74:e3:99:d0:73:c7:f5:d5:94:6c:d3:ea:02:05:4d:
b6:67:d4:23:02:4d:1f:67:dd:c0:8c:29:58:c0:bd:af:1c:07:
8b:5c:4e:34:e7:77:64:51:f2:5d:61:24:f1:85:36:f5:5c:28:
05:3f:a6:57:63:71:04:2c:82:61:23:2c:0e:9b:cc:d3:af:af:
33:d7:dd:c9:ca:27:c2:d6:d3:60:14:88:b6:46:bd:1f:3d:4a:
94:87:9d:2e:24:dc:18:c0:68:9d:06:e0:9d:46:f0:c7:31:f1:
cb:72:d3:7a:42:06:ee:f8:65:ed:e2:09:2b:17:d1:c7:35:34:
21:4b:de:21:eb:ac:58:42:f9:e5:f6:5a:e3:7c:45:58:e1:a1:
bd:15:54:75:b7:38:a8:19:3d:17:50:23:7f:fe:81:68:17:25:
07:fa:1c:cb:f7:6e:18:6f:62:88:bd:cd:21:ff:e4:43:37:88:
c8:ec:54:2d:61:66:d6:71:ab:44:12:ad:8a:ea:6f:39:9e:38:
8a:c0:ed:53:d5:fc:4c:8b:45:51:c2:b6:df:8b:5b:a5:67:00:
86:68:8c:fa:a0:e3:5d:ff:98:c0:df:8f:94:c0:43:0b:7e:83:
bb:25:cc:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GjIktf2smJdyLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz
ODdkMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
Y2U1YWY4NjQtYWQ1YS00ZjhiLWE3MWItNDEyNGQwZDA5NTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKdH+bN/h8FY7L9seVmq87nYUpAOVNcN/D5P
5UmDVf/MWTdg419hBGzXZ8y9CoUtwsW98RJQw+3rhzvgkzJZg2c8dQiE+DQRgnia
beKMxZgc12UPOeaLgxQskbqrTz9y1UJaykWgCQjDiocyLgO+zA2olHzsmZytlT9k
yHFZ9WPcZK6VLqzkaGyZkYMb63bqp3/jXk3fyy0p29bE/7cBNkdHgWU6zZRoHzFP
vmie1nIh82Wppe3WV6PuhyXapjJT5ONZ16FhyP3VHhzhSzOKkeeKcqHXnHwW5sIP
tLnTtsUVOtKOD0tWfT5bnV24NlTTG09r4uY1C0Tj27T6CaJ2IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOh0/x+c29/gCxk7XY7z0tuIHZdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw
N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z
OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi
MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh
Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4
OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMCcnmHKMfHLtpm6H1urgIeZ5Bv1cnTjmdBzx/XVlGzT6gIFTbZn1CMC
TR9n3cCMKVjAva8cB4tcTjTnd2RR8l1hJPGFNvVcKAU/pldjcQQsgmEjLA6bzNOv
rzPX3cnKJ8LW02AUiLZGvR89SpSHnS4k3BjAaJ0G4J1G8Mcx8cty03pCBu74Ze3i
CSsX0cc1NCFL3iHrrFhC+eX2WuN8RVjhob0VVHW3OKgZPRdQI3/+gWgXJQf6HMv3
bhhvYoi9zSH/5EM3iMjsVC1hZtZxq0QSrYrqbzmeOIrA7VPV/EyLRVHCtt+LW6Vn
AIZojPqg413/mMDfj5TAQwt+g7slzAY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:19 2025 by rpki-client