Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc3a410-851a-3a78-85c1-cc287a82717e.roa
File: 0bc3a410-851a-3a78-85c1-cc287a82717e.roa (raw, json)
Hash identifier: jO75r3XSLNxPPMIgNB4TQJVLFRDwjFQCwrQvHQBDz08=
Subject key identifier: EA:5A:3C:74:EC:A8:B8:BE:D4:7F:A8:5D:30:71:DE:36:04:E1:7F:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581F789073339ED0C2D0BE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc3a410-851a-3a78-85c1-cc287a82717e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.63.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:f7:89:07:33:39:ed:0c:2d:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=707f17be-d6bd-49de-be6c-1986e4b9781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:86:55:0e:8d:6b:67:16:ac:51:52:e6:e8:
70:d6:ad:cb:d9:21:53:93:f8:62:10:5d:73:00:51:
3b:c4:e2:a2:fa:16:96:98:16:81:13:33:f9:f2:2f:
b5:35:84:7c:e3:25:21:99:31:1c:a5:06:da:8a:67:
6d:63:60:cb:52:86:7b:9b:1e:d1:b0:ed:3d:d1:28:
5e:30:71:f8:fb:25:55:22:da:8b:5f:ca:f3:04:21:
04:d9:ef:ca:21:19:b1:25:5f:8e:d2:05:97:b3:37:
40:cf:1f:3b:6c:34:94:06:4d:c2:d6:b0:9f:65:4b:
26:40:fc:cd:4d:ef:6a:9a:07:51:70:cc:22:86:10:
12:49:9c:9b:65:8b:50:2e:6d:31:53:cf:55:81:48:
37:86:86:4a:5d:37:91:ae:d9:86:e2:21:43:6e:f3:
84:f7:94:14:12:9e:73:46:20:ef:73:cf:91:d7:ad:
f2:3b:1d:8a:b2:66:82:b1:de:ae:2e:9f:4e:e0:7c:
19:14:bf:32:23:dd:a1:54:03:19:29:ec:0f:77:6c:
99:6a:8c:a1:3f:5c:93:34:7f:77:59:cc:f6:24:cb:
3f:af:01:8f:19:bc:8c:8d:0c:79:30:f5:a6:94:a1:
25:be:ab:6c:7d:5c:0f:ff:fe:08:ee:d0:53:1a:90:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:3C:74:EC:A8:B8:BE:D4:7F:A8:5D:30:71:DE:36:04:E1:7F:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc3a410-851a-3a78-85c1-cc287a82717e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.63.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fe:4a:4c:46:39:88:94:e8:79:43:83:90:13:72:81:80:33:
9a:db:4f:2f:0a:d3:f2:07:c5:9b:ff:c3:83:0a:ed:2b:b0:be:
e1:bd:27:30:ee:7d:26:21:b9:28:f0:88:a8:8a:a5:11:1c:1f:
43:70:6a:85:55:6c:c0:a7:8f:b8:4c:23:62:46:b1:b1:de:0e:
80:e8:d7:9d:f4:ac:51:9a:c7:97:43:df:a4:dd:42:e1:57:9d:
27:42:2f:4c:ba:5d:17:e2:42:7b:43:92:3f:2f:3b:39:a4:f7:
db:a6:ca:74:38:e2:88:86:a6:ee:f8:69:d8:08:eb:aa:3f:0e:
69:54:86:43:8b:76:d9:60:e4:95:ac:9c:3c:ff:ec:47:12:4d:
d5:44:e8:e0:4f:99:a8:e0:7b:be:89:1d:f4:ad:db:e2:89:a2:
f8:72:93:0e:53:30:89:98:d6:8d:80:de:05:c7:3c:d1:74:ce:
7f:37:82:08:80:14:a0:cd:fb:1e:1a:df:82:eb:6b:1f:de:72:
8c:65:d0:0a:95:d0:82:53:64:36:15:5f:57:ab:c8:c8:67:28:
d4:42:b5:b8:ef:92:12:62:fb:e6:36:b0:f7:99:36:dd:a8:61:
50:9e:91:c6:6c:49:17:90:e2:71:2f:cf:da:a5:df:53:4d:60:
cf:a9:0d:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfeJBzM57QwtC+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzA3ZjE3YmUtZDZiZC00OWRlLWJlNmMtMTk4NmU0Yjk3ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOaGVQ6Na2cWrFFS5uhw1q3L2SFTk/hiEF1z
AFE7xOKi+haWmBaBEzP58i+1NYR84yUhmTEcpQbaimdtY2DLUoZ7mx7RsO090She
MHH4+yVVItqLX8rzBCEE2e/KIRmxJV+O0gWXszdAzx87bDSUBk3C1rCfZUsmQPzN
Te9qmgdRcMwihhASSZybZYtQLm0xU89VgUg3hoZKXTeRrtmG4iFDbvOE95QUEp5z
RiDvc8+R163yOx2KsmaCsd6uLp9O4HwZFL8yI92hVAMZKewPd2yZaoyhP1yTNH93
Wcz2JMs/rwGPGbyMjQx5MPWmlKElvqtsfVwP//4I7tBTGpBnJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOpaPHTsqLi+1H+oXTBx3jYE4X8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGJjM2E0MTAtODUxYS0z
YTc4LTg1YzEtY2MyODdhODI3MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD+eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGD+SkxGOYiU6HlDg5ATcoGAM5rbTy8K0/IHxZv/w4MK7SuwvuG9JzDu
fSYhuSjwiKiKpREcH0NwaoVVbMCnj7hMI2JGsbHeDoDo1530rFGax5dD36TdQuFX
nSdCL0y6XRfiQntDkj8vOzmk99umynQ44oiGpu74adgI66o/DmlUhkOLdtlg5JWs
nDz/7EcSTdVE6OBPmajge76JHfSt2+KJovhykw5TMImY1o2A3gXHPNF0zn83ggiA
FKDN+x4a34Lrax/ecoxl0AqV0IJTZDYVX1eryMhnKNRCtbjvkhJi++Y2sPeZNt2o
YVCekcZsSReQ4nEvz9ql31NNYM+pDac=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:40 2025 by rpki-client