Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
File: 7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa (raw, json)
Hash identifier: Cpue0z/b31nO2k6vBYkXJw1S/vWqI9i/2hjO1sBCyyw=
Subject key identifier: 61:5D:55:2F:2E:6D:C1:AF:8C:E0:09:90:46:BC:5D:F8:5A:6A:DE:9D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DE54EEE4E865698D19F8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:de:54:ee:e4:e8:65:69:8d:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2ca0bb45-c367-40a1-8de2-0ee9a704b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:f3:0f:e6:bf:52:a1:dc:10:d8:50:72:b2:
c0:f4:98:aa:6b:ae:6d:9c:d5:a7:f0:95:55:98:49:
3f:b9:48:5d:fe:c5:7d:d1:a3:67:a2:3a:c1:37:a1:
98:af:23:11:7c:35:e9:43:0e:57:d4:f1:e2:0f:d4:
1c:20:2c:10:53:f3:a9:1d:e0:13:3d:dc:f9:84:c8:
9e:6b:bc:cc:77:a8:7a:d5:d5:f3:9a:c3:f1:a9:2c:
b3:ce:48:16:1b:b1:97:c7:66:de:d2:c3:5b:57:57:
22:f2:70:40:62:32:98:ec:67:91:15:e1:ec:c3:a7:
2a:1a:7f:9a:ca:0b:79:b5:46:13:8d:5b:c8:de:4c:
b4:4b:5d:31:6b:19:9a:b2:0d:37:0b:20:40:ff:6c:
34:a3:29:28:ef:22:e3:d8:f2:3f:fe:5a:fa:05:2d:
af:46:f0:66:9b:23:35:2c:b2:2d:74:4f:a5:fd:f2:
b6:65:72:b6:9e:cb:32:83:8b:61:60:66:39:1a:bf:
6e:f6:3c:a7:3a:90:38:9a:15:d3:c1:38:00:99:78:
a7:13:f7:28:4d:e6:7f:0a:e1:e7:84:9d:86:8a:bc:
83:4e:89:93:0f:fc:68:25:dd:99:29:c5:5e:bd:3d:
c7:84:21:01:16:82:4d:c1:d6:8c:bc:2b:27:3b:32:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:55:2F:2E:6D:C1:AF:8C:E0:09:90:46:BC:5D:F8:5A:6A:DE:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:23:e9:3f:5b:f6:90:f9:e6:ba:0b:87:be:f6:69:02:e2:e0:
9c:fe:6e:41:15:fc:fe:80:28:56:c7:fd:37:86:0a:5a:f1:ae:
2c:19:40:d9:2a:cc:45:05:f5:41:94:fb:ed:df:1e:32:b9:1a:
46:8e:79:2c:55:28:4a:ff:8c:ae:d5:b3:a6:34:1b:87:34:fd:
e7:d9:9b:a4:49:93:98:ef:98:5e:17:2c:55:fe:16:49:45:1e:
c1:98:61:ea:c5:ae:cb:9d:fc:64:82:e2:cf:86:10:08:41:93:
20:6d:e1:0e:87:64:65:20:e3:7c:a7:b9:e1:a6:a7:d3:38:5d:
36:54:04:78:8b:71:91:a4:23:a0:a3:3e:d9:38:a8:e9:e7:fc:
38:18:d2:0b:f0:6e:5f:05:c6:eb:1f:f5:7b:13:65:17:7d:9a:
a4:9c:dc:a9:b1:79:d0:f1:01:1f:db:4c:5e:e7:2f:ee:bb:bc:
ea:cc:64:bd:a0:74:50:d6:d0:86:ce:da:af:8a:da:e5:c9:68:
fe:ab:ac:bb:4a:49:e7:19:19:66:e1:ba:6c:c9:8c:b2:98:6c:
99:95:8e:fe:e0:8b:ce:a2:50:0f:4f:8c:38:8f:8a:2a:65:cf:
f0:8e:1a:20:4f:e7:e4:81:3b:07:88:80:0d:e8:7b:88:b8:23:
33:d4:2d:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd5U7uToZWmNGfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmNhMGJiNDUtYzM2Ny00MGExLThkZTItMGVlOWE3MDRiNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzzD+a/UqHcENhQcrLA9Jiqa65tnNWn8JVV
mEk/uUhd/sV90aNnojrBN6GYryMRfDXpQw5X1PHiD9QcICwQU/OpHeATPdz5hMie
a7zMd6h61dXzmsPxqSyzzkgWG7GXx2be0sNbV1ci8nBAYjKY7GeRFeHsw6cqGn+a
ygt5tUYTjVvI3ky0S10xaxmasg03CyBA/2w0oyko7yLj2PI//lr6BS2vRvBmmyM1
LLItdE+l/fK2ZXK2nssyg4thYGY5Gr9u9jynOpA4mhXTwTgAmXinE/coTeZ/CuHn
hJ2GiryDTomTD/xoJd2ZKcVevT3HhCEBFoJNwdaMvCsnOzKHWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFdVS8ubcGvjOAJkEa8Xfhaat6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzIzMmE2NmMtZjNkMC0z
YWEwLWFhZDItYzU5NGJmNzRiZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUj6T9b9pD55roLh772aQLi4Jz+bkEV/P6AKFbH/TeGClrxriwZQNkq
zEUF9UGU++3fHjK5GkaOeSxVKEr/jK7Vs6Y0G4c0/efZm6RJk5jvmF4XLFX+FklF
HsGYYerFrsud/GSC4s+GEAhBkyBt4Q6HZGUg43ynueGmp9M4XTZUBHiLcZGkI6Cj
Ptk4qOnn/DgY0gvwbl8Fxusf9XsTZRd9mqSc3KmxedDxAR/bTF7nL+67vOrMZL2g
dFDW0IbO2q+K2uXJaP6rrLtKSecZGWbhumzJjLKYbJmVjv7gi86iUA9PjDiPiipl
z/COGiBP5+SBOweIgA3oe4i4IzPULU0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:56 2025 by rpki-client