Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa
File: 33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa (raw, json)
Hash identifier: ODPGsu25eg27wHZRwN9q8aVx//ZaADlUk4tB1FYJbVQ=
Subject key identifier: 03:33:17:46:1A:EF:71:1F:64:44:B5:EB:10:66:37:76:E4:C6:F5:46
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E62210EDACEF801CA200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.20.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e6:22:10:ed:ac:ef:80:1c:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=644ca221-ac7e-4ace-841f-d5e218637779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3f:d6:7c:e9:67:28:12:35:b6:62:4e:03:a8:
20:6b:3f:9e:0a:3c:58:3b:e3:1b:56:de:ec:09:6a:
41:45:cb:e5:f2:f6:0e:ad:dc:53:8e:29:1a:a7:58:
90:22:74:68:d2:76:5d:ec:00:4b:c7:6e:e4:e7:0c:
7c:6f:77:89:e1:24:15:ac:93:61:70:e4:77:e3:e3:
3e:7c:bb:b3:74:70:f1:c2:c6:58:97:e4:4f:e1:cf:
9d:0d:8a:a0:ed:50:9e:d7:4c:6b:15:69:a2:34:e9:
a8:95:3b:49:1f:fb:7d:ae:4f:32:65:2f:39:f9:2d:
19:5b:f1:98:b7:9e:87:8c:40:ca:d2:5c:f2:d0:d3:
de:cc:fb:c2:2b:4d:3b:ed:c4:46:02:59:f5:39:55:
49:ca:3e:5b:c5:52:be:6f:b6:4d:99:e3:3b:f7:5e:
bf:8f:83:5e:1c:4e:1d:45:97:4c:96:a0:b2:33:b6:
61:08:77:96:c3:54:01:11:d7:fa:3e:06:1a:73:60:
03:c0:93:18:3a:83:d3:0f:b9:5d:94:0a:cc:6c:71:
ce:21:83:fe:61:8f:59:4a:73:24:c8:56:21:6c:72:
2f:8d:af:db:c3:18:ca:08:ee:bd:8c:a2:e5:a3:7a:
b4:89:73:4d:19:e7:e1:69:73:09:d1:29:00:0a:38:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:17:46:1A:EF:71:1F:64:44:B5:EB:10:66:37:76:E4:C6:F5:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33de9bf9-81a1-3356-b476-7ddf45e46bf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:77:71:94:31:ed:78:1f:9b:93:0c:9c:a0:6b:c3:cf:7a:4c:
2b:dc:87:fc:5a:8e:df:81:94:9f:9b:be:a4:2d:29:a5:0e:92:
f8:12:66:0b:fd:d3:bc:ba:e8:14:fb:53:f0:ff:60:45:39:34:
46:3b:37:74:66:e0:96:07:99:4d:a5:fa:6f:35:95:82:09:8c:
1f:d6:cf:55:c6:d6:d3:06:31:60:66:12:f1:07:58:75:a8:56:
0f:79:61:0f:53:d2:d7:1c:2a:29:f5:c0:d1:9d:8a:d8:31:e7:
45:cb:b1:b8:03:7b:e5:d9:f9:02:6c:0c:92:af:98:8a:3c:6a:
b4:22:ee:7f:5b:eb:a4:ec:f8:04:37:35:bb:33:85:8d:2c:61:
e1:58:84:73:4f:66:f1:59:bf:24:bb:cd:ad:1a:aa:07:d4:e3:
26:76:90:40:24:68:05:50:2b:ba:54:32:d4:2c:6d:23:72:ed:
1f:9b:1b:f4:f3:f0:e3:57:66:fb:46:11:3b:c0:9a:ea:57:c0:
da:67:a5:8e:4e:39:b1:c2:67:d8:fb:c3:eb:77:25:44:c8:b1:
90:e6:9b:b9:ac:ea:56:8f:0a:42:99:91:96:76:9a:71:49:b5:
4b:fa:24:59:eb:63:0b:11:f0:18:bb:48:1b:29:fb:73:6f:8e:
72:06:ff:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeYiEO2s74AcogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjQ0Y2EyMjEtYWM3ZS00YWNlLTg0MWYtZDVlMjE4NjM3Nzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/WfOlnKBI1tmJOA6ggaz+eCjxYO+MbVt7s
CWpBRcvl8vYOrdxTjikap1iQInRo0nZd7ABLx27k5wx8b3eJ4SQVrJNhcOR34+M+
fLuzdHDxwsZYl+RP4c+dDYqg7VCe10xrFWmiNOmolTtJH/t9rk8yZS85+S0ZW/GY
t56HjEDK0lzy0NPezPvCK0077cRGAln1OVVJyj5bxVK+b7ZNmeM7916/j4NeHE4d
RZdMlqCyM7ZhCHeWw1QBEdf6PgYac2ADwJMYOoPTD7ldlArMbHHOIYP+YY9ZSnMk
yFYhbHIvja/bwxjKCO69jKLlo3q0iXNNGefhaXMJ0SkACjhJLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMzF0Ya73EfZES16xBmN3bkxvVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkZTliZjktODFhMS0z
MzU2LWI0NzYtN2RkZjQ1ZTQ2YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMd3cZQx7Xgfm5MMnKBrw896TCvch/xajt+BlJ+bvqQtKaUOkvgSZgv9
07y66BT7U/D/YEU5NEY7N3Rm4JYHmU2l+m81lYIJjB/Wz1XG1tMGMWBmEvEHWHWo
Vg95YQ9T0tccKin1wNGditgx50XLsbgDe+XZ+QJsDJKvmIo8arQi7n9b66Ts+AQ3
NbszhY0sYeFYhHNPZvFZvyS7za0aqgfU4yZ2kEAkaAVQK7pUMtQsbSNy7R+bG/Tz
8ONXZvtGETvAmupXwNpnpY5OObHCZ9j7w+t3JUTIsZDmm7ms6laPCkKZkZZ2mnFJ
tUv6JFnrYwsR8Bi7SBsp+3NvjnIG/9w=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:21 2025 by rpki-client