Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74253cf6-1f20-3e7f-8b66-0ba02a9e0e2b.roa
File: 74253cf6-1f20-3e7f-8b66-0ba02a9e0e2b.roa (raw, json)
Hash identifier: 2b1hIqzsiwi0XL0JWKVkxYMIgPlcraO311rjlcYER18=
Subject key identifier: 1F:58:9E:EC:00:99:D3:37:F8:61:E1:27:ED:91:E2:E3:A3:24:75:B3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581558C7BD67DF960B16300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74253cf6-1f20-3e7f-8b66-0ba02a9e0e2b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.20.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:55:8c:7b:d6:7d:f9:60:b1:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2ccbc4b5-1b68-458d-9162-5ddd4c79e0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a0:51:38:74:c7:96:20:c8:96:94:15:3d:
00:8d:22:00:3e:4d:ce:45:c1:49:b4:bb:4e:8c:f9:
aa:ba:07:6e:0c:46:82:84:bd:0f:c9:3b:1d:80:e3:
e9:26:af:4a:39:4e:4e:67:f9:c8:53:05:d6:76:8d:
f8:f8:c4:2b:fd:09:33:b0:fd:75:42:ce:13:d5:04:
ff:0d:73:b0:bc:99:ee:02:f7:f0:c9:8e:47:4a:0c:
95:7d:bb:23:38:b7:40:d2:d8:5a:2a:82:c0:95:d5:
cd:fd:80:e3:6b:d6:39:44:1b:50:41:94:a3:cf:33:
6a:b1:30:95:8f:9b:8e:5b:04:46:60:c3:5c:b7:ac:
b2:a4:7f:89:d4:8d:25:92:47:4d:06:cc:8d:59:7a:
03:c2:a2:21:b7:1b:a5:19:f9:02:d9:92:ea:a9:02:
2e:99:b6:07:29:7a:f7:a5:cf:c1:89:fc:74:02:5f:
9b:04:a1:a3:63:0f:ed:48:c8:21:92:fc:18:a4:85:
e3:3a:94:c7:55:f1:94:ec:0e:25:81:bc:9f:96:15:
d3:69:be:27:ba:71:33:be:1c:0a:92:da:63:ac:83:
75:57:be:ae:4e:ae:06:f4:52:e8:a0:ff:6f:f1:03:
b6:68:27:7e:3d:83:0c:97:d7:12:dc:2a:ee:99:30:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:9E:EC:00:99:D3:37:F8:61:E1:27:ED:91:E2:E3:A3:24:75:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74253cf6-1f20-3e7f-8b66-0ba02a9e0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.20.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:95:22:4a:d2:b5:28:75:e8:46:72:45:2c:63:5c:50:5d:57:
71:12:d9:fa:d8:f9:75:88:94:3e:8f:d8:89:8a:04:47:93:4b:
ad:2b:a2:16:e1:47:85:6a:67:af:20:b9:70:65:4e:83:42:b0:
02:6a:3a:ba:81:87:53:db:32:f8:14:97:6b:54:c9:1e:df:31:
2e:0c:75:d1:94:98:3a:17:10:51:bf:cc:ed:30:db:bd:d9:25:
9d:78:69:f4:67:b0:b3:40:ab:74:ac:df:1d:55:e9:c0:a9:f1:
47:e4:e3:45:34:a1:2f:78:d7:70:2b:ec:e5:d2:34:98:e6:0f:
d9:92:f6:6c:b1:bf:13:83:f5:05:a6:7c:a9:27:2f:75:1e:71:
96:50:1f:2c:ec:56:f8:7a:06:e4:f8:c2:3b:5b:de:dd:98:01:
1e:7a:0c:53:39:b6:a2:11:7c:46:7f:c9:0f:ba:7f:e1:f0:4e:
2d:64:38:53:d9:6b:21:09:24:9a:d6:2b:cb:98:fd:f8:63:ec:
46:3b:a1:68:1f:a3:f5:c6:2d:b5:78:47:bb:ff:6b:1f:b5:e1:
08:f1:12:ec:e4:25:2b:ed:a0:d0:b2:c9:9a:87:a5:1f:75:1d:
6d:67:48:10:84:0e:48:2a:a2:9d:60:82:7b:29:f4:92:69:4e:
c0:a7:30:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVWMe9Z9+WCxYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmNjYmM0YjUtMWI2OC00NThkLTkxNjItNWRkZDRjNzllMGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAugUTh0x5YgyJaUFT0AjSIAPk3ORcFJtLtO
jPmqugduDEaChL0PyTsdgOPpJq9KOU5OZ/nIUwXWdo34+MQr/QkzsP11Qs4T1QT/
DXOwvJnuAvfwyY5HSgyVfbsjOLdA0thaKoLAldXN/YDja9Y5RBtQQZSjzzNqsTCV
j5uOWwRGYMNct6yypH+J1I0lkkdNBsyNWXoDwqIhtxulGfkC2ZLqqQIumbYHKXr3
pc/Bifx0Al+bBKGjYw/tSMghkvwYpIXjOpTHVfGU7A4lgbyflhXTab4nunEzvhwK
ktpjrIN1V76uTq4G9FLooP9v8QO2aCd+PYMMl9cS3CrumTDZ0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9YnuwAmdM3+GHhJ+2R4uOjJHWzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzQyNTNjZjYtMWYyMC0z
ZTdmLThiNjYtMGJhMDJhOWUwZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOVIkrStSh16EZyRSxjXFBdV3ES2frY+XWIlD6P2ImKBEeTS60rohbh
R4VqZ68guXBlToNCsAJqOrqBh1PbMvgUl2tUyR7fMS4MddGUmDoXEFG/zO0w273Z
JZ14afRnsLNAq3Ss3x1V6cCp8Ufk40U0oS9413Ar7OXSNJjmD9mS9myxvxOD9QWm
fKknL3UecZZQHyzsVvh6BuT4wjtb3t2YAR56DFM5tqIRfEZ/yQ+6f+HwTi1kOFPZ
ayEJJJrWK8uY/fhj7EY7oWgfo/XGLbV4R7v/ax+14QjxEuzkJSvtoNCyyZqHpR91
HW1nSBCEDkgqop1ggnsp9JJpTsCnMDs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:25 2025 by rpki-client