Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38a052fb-b70a-3433-b46b-3ea3e188ee02.roa
File: 38a052fb-b70a-3433-b46b-3ea3e188ee02.roa (raw, json)
Hash identifier: nwYEXbIZVgAXJWs4TEufE0k7V76c54yJXCJjFT1qyBI=
Subject key identifier: 9D:79:A0:5B:5F:C0:51:D8:B8:2E:57:F8:60:4B:AC:EE:EF:17:03:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58100612DAA8BAA0402B680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38a052fb-b70a-3433-b46b-3ea3e188ee02.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 67.54.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:00:61:2d:aa:8b:aa:04:02:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=7e5b80fb-4f31-47cd-8699-4bec1e8e91a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:1f:58:f3:c4:40:7b:c6:1b:d8:7d:dd:da:
f5:ab:8b:10:e0:20:ed:f8:d0:d9:95:1a:e4:4f:c4:
4e:db:f3:3d:c7:95:d6:d7:83:f6:27:7a:01:1e:b7:
20:d5:ce:12:de:b2:6e:aa:68:81:b1:6f:0c:e7:7b:
d0:df:2a:7f:b3:19:ea:45:cf:81:19:f3:16:40:11:
72:4d:74:5c:cf:9e:ef:c3:59:80:c0:30:fe:06:23:
d8:64:05:8e:62:cc:62:e3:d4:2b:91:1a:ad:f8:45:
52:85:52:f4:b9:ec:45:d0:17:61:18:b2:6c:67:ec:
b7:8f:09:0d:7f:da:28:1d:3a:de:43:a1:76:92:0a:
07:57:3e:2e:95:09:e8:80:c6:a6:e7:ef:0f:ec:8b:
7b:23:e6:b8:87:29:6a:fe:f3:bf:fd:0c:ce:38:43:
9e:a6:fb:94:5d:b4:f4:ce:3c:37:86:87:2f:d4:6c:
5d:f4:ae:98:00:c3:08:19:ca:79:cb:4d:2c:08:6f:
95:c5:30:61:82:44:c6:ea:09:55:3e:6f:74:48:a1:
9f:65:95:fb:5b:09:55:65:8f:4a:40:eb:21:6e:c8:
95:2f:c0:ac:a8:59:8f:4b:ae:9f:44:15:20:f5:a9:
fa:03:77:51:70:1f:7b:a4:e8:d4:a2:29:89:a2:a1:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:79:A0:5B:5F:C0:51:D8:B8:2E:57:F8:60:4B:AC:EE:EF:17:03:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38a052fb-b70a-3433-b46b-3ea3e188ee02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:af:35:6c:db:51:f2:a4:74:bd:61:92:5a:5b:48:0b:cf:fb:
88:39:4e:fc:bd:78:61:55:aa:d0:17:aa:9e:24:d5:9d:76:84:
18:c6:a3:bd:c8:5a:64:7e:1a:24:07:a9:a7:ad:10:87:4b:76:
64:0c:9a:ba:fd:dd:2f:eb:b9:c7:46:59:ba:d5:3c:e5:3f:f5:
99:8a:a6:a5:1e:3c:f5:e6:aa:0e:87:22:a5:bf:70:00:11:9e:
34:6d:df:2c:9d:e4:33:b9:3f:2e:f3:58:73:78:cf:95:9e:de:
09:ab:f5:73:b8:c6:8c:c7:57:69:b0:2e:db:8a:95:c9:7d:0b:
c3:77:43:ea:12:d0:b8:69:1c:dc:c4:22:21:45:dc:af:e9:fb:
ea:88:04:b5:2d:be:58:49:5f:9a:20:41:3a:4e:a0:e3:00:2c:
ec:7e:4a:4e:9c:73:f4:8f:35:ce:3d:59:42:be:f2:de:ab:9f:
48:53:84:bc:03:ca:72:25:7b:b2:b2:74:df:b0:cf:e6:4c:a2:
02:2c:1c:d1:7c:2a:57:b3:80:0a:63:b3:a1:64:81:37:f7:f2:
da:ab:3f:b3:69:60:d0:1d:29:e8:93:da:74:c4:33:62:d7:04:
1e:75:60:13:a7:77:7f:11:c8:a2:2f:f7:c4:82:10:85:22:45:
46:16:f8:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQBhLaqLqgQCtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2U1YjgwZmItNGYzMS00N2NkLTg2OTktNGJlYzFlOGU5MWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzQfWPPEQHvGG9h93dr1q4sQ4CDt+NDZlRrk
T8RO2/M9x5XW14P2J3oBHrcg1c4S3rJuqmiBsW8M53vQ3yp/sxnqRc+BGfMWQBFy
TXRcz57vw1mAwDD+BiPYZAWOYsxi49QrkRqt+EVShVL0uexF0BdhGLJsZ+y3jwkN
f9ooHTreQ6F2kgoHVz4ulQnogMam5+8P7It7I+a4hylq/vO//QzOOEOepvuUXbT0
zjw3hocv1Gxd9K6YAMMIGcp5y00sCG+VxTBhgkTG6glVPm90SKGfZZX7WwlVZY9K
QOshbsiVL8CsqFmPS66fRBUg9an6A3dRcB97pOjUoimJoqFvYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ15oFtfwFHYuC5X+GBLrO7vFwMPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzhhMDUyZmItYjcwYS0z
NDMzLWI0NmItM2VhM2UxODhlZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIevNWzbUfKkdL1hklpbSAvP+4g5Tvy9eGFVqtAXqp4k1Z12hBjGo73I
WmR+GiQHqaetEIdLdmQMmrr93S/rucdGWbrVPOU/9ZmKpqUePPXmqg6HIqW/cAAR
njRt3yyd5DO5Py7zWHN4z5We3gmr9XO4xozHV2mwLtuKlcl9C8N3Q+oS0LhpHNzE
IiFF3K/p++qIBLUtvlhJX5ogQTpOoOMALOx+Sk6cc/SPNc49WUK+8t6rn0hThLwD
ynIle7KydN+wz+ZMogIsHNF8KlezgApjs6FkgTf38tqrP7NpYNAdKeiT2nTEM2LX
BB51YBOnd38RyKIv98SCEIUiRUYW+KI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:06 2025 by rpki-client