Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d4cc361-599f-3da4-aad5-4d60e1d7781a.roa
File: 7d4cc361-599f-3da4-aad5-4d60e1d7781a.roa (raw, json)
Hash identifier: cJsOTFfYThqjkXtTbE5CXVYmx8s8K4csH47f/3Mqld8=
Subject key identifier: FE:F6:B3:7C:1D:DF:6C:2A:24:8B:6C:C2:BE:00:84:9C:53:EB:02:BB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D83CC6DB86055B8A3940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d4cc361-599f-3da4-aad5-4d60e1d7781a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d8:3c:c6:db:86:05:5b:8a:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=7904db01-9f54-499d-8a7a-ebd111c9eaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:36:c3:51:c9:86:99:a9:35:28:41:91:87:
a0:c0:ff:77:76:f2:e1:dc:dc:23:73:7c:10:d8:16:
88:cf:53:7e:8e:b7:a7:c9:17:83:bd:69:68:3b:4b:
27:31:da:ba:78:dc:ed:2e:5a:49:f1:ec:41:d1:58:
5c:9b:97:86:f5:08:f3:4f:44:68:1f:73:83:43:39:
02:31:ee:dd:aa:aa:2f:30:9b:d3:79:57:3e:26:ac:
04:a7:dd:86:af:98:9d:e4:00:5c:fb:89:34:78:03:
44:84:dc:e3:01:4f:30:c9:a6:83:0f:4d:25:32:e5:
9b:b7:55:17:31:44:ad:7e:f0:23:a9:f1:e2:23:a3:
75:19:c8:2f:23:d2:2d:1f:03:b4:b6:c4:cd:91:c1:
81:f8:c0:4f:cc:33:c8:41:14:f2:61:6a:8e:51:f7:
23:20:96:8f:ff:e6:c5:6f:bd:76:a6:39:86:5f:79:
bb:38:36:f5:c6:2a:8e:81:2d:1c:a1:b0:ce:2d:3f:
7c:87:b9:3d:ad:3f:d3:0f:a8:3d:4c:e9:2b:9b:fe:
a5:9e:9f:e1:27:6d:3c:e6:a9:9d:cf:c5:6e:b4:31:
b5:4f:5d:80:ab:8e:38:bb:47:70:17:82:e3:4d:30:
20:7f:dc:8e:36:d4:dd:24:cb:0a:b8:ff:fe:ad:84:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:B3:7C:1D:DF:6C:2A:24:8B:6C:C2:BE:00:84:9C:53:EB:02:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d4cc361-599f-3da4-aad5-4d60e1d7781a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:12:28:fb:fc:71:90:38:1a:c5:41:71:d7:fa:8a:0c:fa:70:
ec:71:df:57:ec:df:08:70:16:53:48:d5:a3:df:70:42:57:1c:
b5:79:65:73:18:a8:d4:d4:06:29:26:83:89:47:08:c5:51:6d:
c0:83:98:e5:d7:60:2d:a9:54:d7:a8:d0:6a:3c:36:4e:57:de:
27:96:bf:f9:1c:45:b0:64:cb:4f:85:9f:74:6e:71:02:95:02:
af:9b:93:27:87:f9:13:98:db:f5:1a:cd:ed:57:21:34:b4:0b:
80:03:60:25:37:ea:2d:69:64:fc:42:5c:12:a3:f1:0d:f7:b0:
6c:fe:b1:78:5f:ad:e5:2e:9b:7e:58:d7:fd:ef:40:0b:40:a9:
67:d1:88:c3:8c:90:8b:51:15:a2:0e:80:cc:50:1c:d8:07:8b:
1f:12:bd:ee:73:0e:41:96:32:5d:6d:30:5a:a9:16:e4:9f:3b:
ac:c4:30:1e:1f:c7:8b:57:a4:f9:d7:ff:1b:78:b2:a3:db:cf:
a3:09:f2:bf:b9:06:fa:c7:ca:15:96:b4:a1:04:64:9c:1f:07:
11:52:6b:3a:53:72:34:ae:55:37:ba:05:d2:b9:56:0a:b9:d7:
36:e7:e7:8b:49:db:e4:df:52:19:ab:19:0a:a5:f5:43:82:8e:
f5:4d:be:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdg8xtuGBVuKOUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzkwNGRiMDEtOWY1NC00OTlkLThhN2EtZWJkMTExYzllYWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcI2w1HJhpmpNShBkYegwP93dvLh3Nwjc3wQ
2BaIz1N+jrenyReDvWloO0snMdq6eNztLlpJ8exB0Vhcm5eG9QjzT0RoH3ODQzkC
Me7dqqovMJvTeVc+JqwEp92Gr5id5ABc+4k0eANEhNzjAU8wyaaDD00lMuWbt1UX
MUStfvAjqfHiI6N1GcgvI9ItHwO0tsTNkcGB+MBPzDPIQRTyYWqOUfcjIJaP/+bF
b712pjmGX3m7ODb1xiqOgS0cobDOLT98h7k9rT/TD6g9TOkrm/6lnp/hJ2085qmd
z8VutDG1T12Aq444u0dwF4LjTTAgf9yONtTdJMsKuP/+rYSc+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP72s3wd32wqJItswr4AhJxT6wK7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Q0Y2MzNjEtNTk5Zi0z
ZGE0LWFhZDUtNGQ2MGUxZDc3ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoSKPv8cZA4GsVBcdf6igz6cOxx31fs3whwFlNI1aPfcEJXHLV5ZXMY
qNTUBikmg4lHCMVRbcCDmOXXYC2pVNeo0Go8Nk5X3ieWv/kcRbBky0+Fn3RucQKV
Aq+bkyeH+ROY2/Uaze1XITS0C4ADYCU36i1pZPxCXBKj8Q33sGz+sXhfreUum35Y
1/3vQAtAqWfRiMOMkItRFaIOgMxQHNgHix8Sve5zDkGWMl1tMFqpFuSfO6zEMB4f
x4tXpPnX/xt4sqPbz6MJ8r+5BvrHyhWWtKEEZJwfBxFSazpTcjSuVTe6BdK5Vgq5
1zbn54tJ2+TfUhmrGQql9UOCjvVNvmU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:28 2025 by rpki-client