Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62a1652f-13dd-39fe-90fb-48b32ef09e1a.roa
File: 62a1652f-13dd-39fe-90fb-48b32ef09e1a.roa (raw, json)
Hash identifier: Z3He1pM3I+asiGEuFtpKwLLS5XcYt0X/JJl6tMCwbLA=
Subject key identifier: 1E:8A:40:28:BB:B2:A3:7A:98:FD:4F:4C:50:0B:B5:73:F5:62:52:67
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FAB860AF85AB817A8A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62a1652f-13dd-39fe-90fb-48b32ef09e1a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fa:b8:60:af:85:ab:81:7a:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2b405a3f-5edf-42a5-b882-33ff0dcceda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:25:6a:09:f9:bd:c5:fe:7d:57:59:3b:f8:
f7:15:d6:6c:20:ca:0a:65:7c:43:78:ab:3d:6b:7d:
67:07:36:3c:fe:5d:0a:2e:0c:cc:38:c0:fa:71:53:
50:9a:ea:4e:d2:db:25:83:82:03:66:ea:91:69:08:
5a:e8:22:6e:aa:84:7c:30:2f:8d:cb:e0:87:15:90:
4d:2d:12:00:77:79:06:0c:7c:f4:34:da:60:e9:39:
83:d8:17:f1:3f:05:46:89:e1:ee:10:b3:d0:de:29:
68:11:91:e0:f3:52:f6:e5:c2:bb:35:31:50:b5:8e:
f5:8f:5c:74:da:6b:27:e8:11:d0:49:f6:08:b1:c6:
7e:2f:8f:b1:8b:4b:0b:33:c3:45:a2:d8:81:2a:cb:
c1:2a:23:85:3b:28:70:d9:c8:57:14:d9:39:76:f2:
16:63:e6:71:8a:0c:e7:76:5c:34:95:8e:93:53:ec:
f8:34:ef:bf:36:62:3f:64:04:e4:ae:c1:ed:3f:e6:
03:31:5b:73:bc:40:6e:b5:1c:53:67:f2:c0:e2:08:
e5:e1:cf:06:f8:2b:95:93:d9:38:19:c5:42:8c:05:
59:55:73:cf:d5:56:2c:bb:63:c3:51:47:ee:4c:83:
e0:e1:4f:c5:c2:fb:41:27:56:20:37:a1:df:0e:02:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8A:40:28:BB:B2:A3:7A:98:FD:4F:4C:50:0B:B5:73:F5:62:52:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62a1652f-13dd-39fe-90fb-48b32ef09e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:10:66:27:a5:11:07:7c:52:1a:50:63:82:11:77:52:46:d1:
6f:78:9d:d1:c3:e4:53:6a:c3:b1:6c:3e:7e:6a:b9:17:d4:ab:
7d:05:40:25:ae:11:de:fd:75:18:c0:fe:46:84:68:56:da:82:
8e:9f:99:bf:12:74:9e:f8:ec:77:26:2b:b4:bf:c8:31:9e:94:
e4:f9:8c:d6:7c:8d:70:47:7b:88:6d:76:df:af:ff:08:80:2a:
f7:a4:4c:f4:1e:41:61:3d:d3:41:5a:d1:71:3c:53:ec:67:a6:
f4:e8:96:97:63:0e:8b:25:64:11:0b:9c:45:23:bc:35:fb:8a:
49:80:52:5e:0b:31:8c:2b:d9:00:fe:6a:40:70:80:9d:b1:93:
0e:37:d1:6e:23:9a:22:f9:75:cd:df:e9:eb:31:99:e6:60:69:
66:06:1f:40:0f:83:80:e9:3c:35:a1:d8:0d:c2:df:07:89:e6:
89:f5:8e:75:7b:97:f3:64:bc:44:c2:8c:bf:a5:e8:85:c3:c4:
49:f2:d7:f5:65:a0:cd:23:aa:69:54:25:ec:66:56:4b:a3:a5:
fd:70:59:d3:4c:50:5b:18:1f:ad:16:59:52:0e:77:0c:61:a1:
77:c3:bf:a9:53:d3:f6:f3:fc:fb:9b:fb:48:a5:c7:a8:7c:2a:
06:d6:88:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgfq4YK+Fq4F6ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmI0MDVhM2YtNWVkZi00MmE1LWI4ODItMzNmZjBkY2NlZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q0lagn5vcX+fVdZO/j3FdZsIMoKZXxDeKs9
a31nBzY8/l0KLgzMOMD6cVNQmupO0tslg4IDZuqRaQha6CJuqoR8MC+Ny+CHFZBN
LRIAd3kGDHz0NNpg6TmD2BfxPwVGieHuELPQ3iloEZHg81L25cK7NTFQtY71j1x0
2msn6BHQSfYIscZ+L4+xi0sLM8NFotiBKsvBKiOFOyhw2chXFNk5dvIWY+Zxigzn
dlw0lY6TU+z4NO+/NmI/ZATkrsHtP+YDMVtzvEButRxTZ/LA4gjl4c8G+CuVk9k4
GcVCjAVZVXPP1VYsu2PDUUfuTIPg4U/FwvtBJ1YgN6HfDgIcQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6KQCi7sqN6mP1PTFALtXP1YlJnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjJhMTY1MmYtMTNkZC0z
OWZlLTkwZmItNDhiMzJlZjA5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIQZielEQd8UhpQY4IRd1JG0W94ndHD5FNqw7FsPn5quRfUq30FQCWu
Ed79dRjA/kaEaFbago6fmb8SdJ747HcmK7S/yDGelOT5jNZ8jXBHe4htdt+v/wiA
KvekTPQeQWE900Fa0XE8U+xnpvTolpdjDoslZBELnEUjvDX7ikmAUl4LMYwr2QD+
akBwgJ2xkw430W4jmiL5dc3f6esxmeZgaWYGH0APg4DpPDWh2A3C3weJ5on1jnV7
l/NkvETCjL+l6IXDxEny1/VloM0jqmlUJexmVkujpf1wWdNMUFsYH60WWVIOdwxh
oXfDv6lT0/bz/Pub+0ilx6h8KgbWiEk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:50 2025 by rpki-client