Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa
File: 6646a65a-deae-385f-b11d-7194742f2873.roa (raw, json)
Hash identifier: hwpHXvDcfTSRaEskGZ+UueDzzbMBs+Vdd4GKFZ6+2Yo=
Subject key identifier: D8:6E:F8:D4:AC:A4:86:9F:43:CF:26:00:B8:A4:E0:B3:7A:8B:05:AB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FD273B5C1F2ED20D7880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fd:27:3b:5c:1f:2e:d2:0d:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=25a02605-b371-49e2-88d8-04ed34848447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:84:23:2a:2a:47:fd:c1:6b:83:4d:5e:87:
dc:e0:4a:99:7e:cb:a4:f0:eb:18:32:db:27:7f:79:
5a:1a:79:7a:b5:33:b4:51:eb:f6:65:06:a0:8c:01:
89:a4:01:46:a9:6f:35:b5:0f:44:d7:d6:aa:9c:22:
5a:44:85:44:15:02:79:c5:fd:ab:d1:a2:7e:38:a8:
50:a0:c2:74:5a:df:3c:6a:ce:21:3f:41:73:99:c8:
7d:c1:78:5c:12:36:fe:e2:53:2b:e5:de:2a:ab:58:
94:30:9c:54:f6:10:d8:42:66:32:f4:f7:5a:6a:3f:
47:a3:c7:da:35:4e:db:c7:22:89:5b:17:c6:4e:2b:
59:f9:6b:10:f4:99:bf:8f:eb:ee:72:37:9a:fc:85:
76:6c:8e:d9:29:66:d1:2d:9b:80:cf:cb:1c:2d:50:
5e:d0:40:92:04:b0:fb:82:34:18:3e:a9:35:81:2c:
0d:f6:d1:d4:97:f7:91:05:13:0a:eb:2c:3d:6c:43:
14:fd:ab:29:64:b6:70:4b:e6:12:ba:97:16:34:0a:
08:12:48:65:a0:a0:d6:4e:c3:85:7b:88:5b:27:0f:
8e:bf:dc:b9:92:0a:89:7e:9f:09:d1:71:cd:d2:43:
f7:6c:55:bf:37:c7:6a:22:63:1f:dc:3d:e7:9f:90:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:F8:D4:AC:A4:86:9F:43:CF:26:00:B8:A4:E0:B3:7A:8B:05:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6646a65a-deae-385f-b11d-7194742f2873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:96:ec:01:d1:37:ae:c9:e4:c5:d8:9a:64:f2:ed:9d:a2:06:
06:53:36:9b:b1:49:15:3e:49:83:00:aa:7d:4e:45:3e:2a:e8:
d3:a1:4f:6b:fc:46:c5:c1:ef:eb:86:ab:14:4a:10:c8:32:aa:
4a:e1:9f:de:59:f5:db:64:a2:ac:91:1b:d8:c9:94:2e:be:39:
3d:19:06:43:d6:a3:15:93:49:8b:dd:31:be:2d:70:ba:ef:ec:
5f:c9:2a:46:25:e7:87:5d:a5:bc:74:b4:41:1e:0a:cf:4b:82:
65:2e:9b:70:69:3d:7e:1f:cd:b1:31:85:52:ce:ba:56:07:03:
63:98:cd:e5:8d:ed:48:33:5e:44:ee:98:ba:f9:57:8d:4a:43:
35:f0:31:85:a8:bf:e0:a9:4a:06:56:35:2b:bc:7d:fd:bc:4b:
5a:7d:4a:a6:99:14:08:71:bd:17:f0:8b:d6:4d:e9:93:48:61:
44:e3:3a:42:06:29:3c:55:fa:b7:28:5e:f6:0a:d3:e6:1a:b0:
8c:60:7a:7c:55:71:0e:85:2a:d4:ee:cd:e3:b6:6e:60:23:69:
4f:cc:0a:af:5b:aa:0b:0c:52:da:6e:96:4a:67:a2:4b:c7:67:
ff:d4:d4:92:93:a5:b1:3a:f6:40:e4:40:15:72:ca:19:a0:39:
b2:69:aa:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf0nO1wfLtINeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjVhMDI2MDUtYjM3MS00OWUyLTg4ZDgtMDRlZDM0ODQ4NDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqSEIyoqR/3Ba4NNXofc4EqZfsuk8OsYMtsn
f3laGnl6tTO0Uev2ZQagjAGJpAFGqW81tQ9E19aqnCJaRIVEFQJ5xf2r0aJ+OKhQ
oMJ0Wt88as4hP0Fzmch9wXhcEjb+4lMr5d4qq1iUMJxU9hDYQmYy9Pdaaj9Ho8fa
NU7bxyKJWxfGTitZ+WsQ9Jm/j+vucjea/IV2bI7ZKWbRLZuAz8scLVBe0ECSBLD7
gjQYPqk1gSwN9tHUl/eRBRMK6yw9bEMU/aspZLZwS+YSupcWNAoIEkhloKDWTsOF
e4hbJw+Ov9y5kgqJfp8J0XHN0kP3bFW/N8dqImMf3D3nn5AO3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhu+NSspIafQ88mALik4LN6iwWrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjY0NmE2NWEtZGVhZS0z
ODVmLWIxMWQtNzE5NDc0MmYyODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyW7AHRN67J5MXYmmTy7Z2iBgZTNpuxSRU+SYMAqn1ORT4q6NOhT2v8
RsXB7+uGqxRKEMgyqkrhn95Z9dtkoqyRG9jJlC6+OT0ZBkPWoxWTSYvdMb4tcLrv
7F/JKkYl54ddpbx0tEEeCs9LgmUum3BpPX4fzbExhVLOulYHA2OYzeWN7UgzXkTu
mLr5V41KQzXwMYWov+CpSgZWNSu8ff28S1p9SqaZFAhxvRfwi9ZN6ZNIYUTjOkIG
KTxV+rcoXvYK0+YasIxgenxVcQ6FKtTuzeO2bmAjaU/MCq9bqgsMUtpulkpnokvH
Z//U1JKTpbE69kDkQBVyyhmgObJpqis=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:12 2025 by rpki-client