Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa
File: 090d7b9a-cfa4-38dc-90ad-396577649ccd.roa (raw, json)
Hash identifier: IBGFRjtwNLxTdsXinoaAKfqNG/9WGCI4NR/R5K3xNQs=
Subject key identifier: 83:93:3A:2E:89:02:8D:14:DA:42:C9:1F:AC:27:2A:12:6B:AA:0B:B8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810325B80ECA2A13F45980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:03:25:b8:0e:ca:2a:13:f4:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=164ea73a-e71c-43e2-ba28-5bb42671e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:dc:62:78:c0:12:65:a5:a8:74:19:87:00:
0f:f9:2a:b3:25:ca:a4:c4:e5:65:e5:0e:ae:ef:66:
ba:8f:b1:4b:5a:52:70:95:cb:eb:00:8d:43:14:ac:
3a:f1:f2:09:c2:e7:ca:a1:5a:8a:c7:c3:a9:4b:6d:
00:96:73:29:24:80:db:be:78:30:09:06:8e:3a:0c:
15:b4:a9:9a:27:13:60:6d:94:ab:8d:2e:cc:91:f3:
43:b9:bf:6a:70:3b:ba:0d:af:db:e0:1d:bf:ea:44:
2e:96:4a:67:50:43:eb:3f:57:2c:1d:04:b8:35:6b:
fc:2a:89:42:0c:15:ce:7e:21:b4:3e:a4:38:e5:d4:
6f:ad:01:73:96:6e:b7:f0:c1:54:19:a0:ff:9f:fd:
79:7e:f4:c5:ea:27:dc:e3:e0:d5:9f:ca:60:90:16:
fb:bd:47:bf:08:bf:00:42:15:d6:51:47:a3:c8:38:
63:18:85:c0:c0:fc:d2:43:fa:0b:3b:c9:a5:78:32:
dc:93:ef:df:a5:25:f7:68:db:e1:ed:94:2c:96:f0:
ae:2d:64:64:e2:d9:28:03:f7:99:9b:8c:75:24:ca:
ec:6a:a3:49:6c:21:a5:16:cc:78:50:e2:3f:19:a8:
bd:35:b7:72:48:36:3a:92:55:38:e7:94:54:fe:e5:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:3A:2E:89:02:8D:14:DA:42:C9:1F:AC:27:2A:12:6B:AA:0B:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:53:f0:94:91:e1:cb:49:b2:22:c7:e6:d4:3e:3e:c1:94:18:
56:a0:50:5e:66:77:fa:ef:32:37:ba:6f:8a:13:59:39:19:17:
db:ef:b9:dd:51:d7:f2:29:35:33:6a:d4:f7:f8:9c:1b:01:b8:
c7:31:75:4c:cf:89:4f:78:f5:9e:9a:ff:36:55:3e:55:96:91:
25:91:1a:1b:a1:53:67:23:cf:7e:94:e6:53:4f:2b:06:65:70:
07:18:be:d6:31:b7:b6:b7:91:33:53:5c:7c:3c:e5:e3:c4:a2:
3d:2b:43:ab:cb:33:53:44:1b:c8:d1:cc:ad:d8:5f:1c:c6:94:
11:b5:85:b9:db:8b:ee:2e:d3:e2:b2:4c:53:bb:c9:41:08:3c:
92:95:11:39:0e:c9:09:7e:0a:b1:f4:f4:69:29:a6:bb:92:6a:
df:2b:35:30:b5:b4:f4:c2:03:a8:fb:f8:96:ee:e6:b1:8c:0b:
cd:4a:c6:e7:4b:73:71:46:57:51:8f:b0:9c:97:4c:0a:7e:c3:
47:7c:1b:55:27:59:94:0c:91:f6:cd:76:4c:ca:e3:b1:56:ab:
ef:70:f2:12:c1:37:ac:4b:be:0c:ba:be:7b:45:e1:a8:2f:05:
ef:9f:ab:b8:0c:13:9d:a6:72:31:89:80:2a:26:a8:2b:7c:00:
7e:48:47:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQMluA7KKhP0WYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTY0ZWE3M2EtZTcxYy00M2UyLWJhMjgtNWJiNDI2NzFlODJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a7cYnjAEmWlqHQZhwAP+SqzJcqkxOVl5Q6u
72a6j7FLWlJwlcvrAI1DFKw68fIJwufKoVqKx8OpS20AlnMpJIDbvngwCQaOOgwV
tKmaJxNgbZSrjS7MkfNDub9qcDu6Da/b4B2/6kQulkpnUEPrP1csHQS4NWv8KolC
DBXOfiG0PqQ45dRvrQFzlm638MFUGaD/n/15fvTF6ifc4+DVn8pgkBb7vUe/CL8A
QhXWUUejyDhjGIXAwPzSQ/oLO8mleDLck+/fpSX3aNvh7ZQslvCuLWRk4tkoA/eZ
m4x1JMrsaqNJbCGlFsx4UOI/Gai9NbdySDY6klU455RU/uWF9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOTOi6JAo0U2kLJH6wnKhJrqgu4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDkwZDdiOWEtY2ZhNC0z
OGRjLTkwYWQtMzk2NTc3NjQ5Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiklMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRT8JSR4ctJsiLH5tQ+PsGUGFagUF5md/rvMje6b4oTWTkZF9vvud1R
1/IpNTNq1Pf4nBsBuMcxdUzPiU949Z6a/zZVPlWWkSWRGhuhU2cjz36U5lNPKwZl
cAcYvtYxt7a3kTNTXHw85ePEoj0rQ6vLM1NEG8jRzK3YXxzGlBG1hbnbi+4u0+Ky
TFO7yUEIPJKVETkOyQl+CrH09GkppruSat8rNTC1tPTCA6j7+Jbu5rGMC81KxudL
c3FGV1GPsJyXTAp+w0d8G1UnWZQMkfbNdkzK47FWq+9w8hLBN6xLvgy6vntF4agv
Be+fq7gME52mcjGJgComqCt8AH5IR5k=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:58 2025 by rpki-client