Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa
File: 846b0b0b-c388-3725-b36d-3bd42a6286b6.roa (raw, json)
Hash identifier: rrQEdWDTjIGEYWOPJ9jUXFqTHZ4JIqPYWd7RhpyJvq8=
Subject key identifier: E9:BC:97:2B:C3:56:F1:C2:D8:0C:6A:75:36:C7:74:DB:86:C4:BD:06
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DB15EE57D97F593B5A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:db:15:ee:57:d9:7f:59:3b:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0ca4acc8-d5c9-41f9-ace3-29ea6519209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:b7:1d:b1:c4:0c:64:e0:c7:4f:1f:ce:cb:
e8:76:d5:25:d8:81:0d:7b:2f:03:bf:b6:2a:0c:c8:
95:a6:0f:0a:a9:24:b5:5e:36:f5:94:27:8f:2f:b9:
7e:f8:a7:bb:f1:04:fc:18:4a:4b:7c:d5:32:d1:3c:
2d:f7:b3:df:41:6f:67:e0:f3:2a:45:1d:92:77:b1:
5a:15:bf:b5:36:c2:25:4b:13:5b:e2:df:c8:20:d6:
ec:58:f3:50:d6:f0:50:31:d5:53:ba:11:3a:a7:cc:
13:ab:40:21:3e:20:f2:6d:de:44:c5:1c:b2:06:e3:
29:1a:ef:26:07:40:0f:9b:4b:10:1b:d4:f1:8e:ee:
79:d1:78:03:20:5f:6f:a1:80:e6:20:8a:a7:c1:1b:
a6:93:e9:9f:00:d7:69:14:e8:1b:e5:6e:49:79:a3:
2e:41:b4:d3:73:ef:8f:65:b4:5d:54:e8:51:7d:52:
18:24:4e:8a:51:51:0c:23:06:5e:1c:90:45:3d:c9:
e6:f8:47:29:d3:cb:40:04:7b:19:0f:23:12:03:a6:
4e:b3:4a:4b:1d:c4:35:c1:60:1a:8f:e7:bc:f4:de:
85:17:3e:4e:79:b5:33:f3:ff:d0:b7:12:01:bf:74:
6c:1a:74:e2:5e:fe:25:37:88:82:c0:2d:1b:80:76:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:97:2B:C3:56:F1:C2:D8:0C:6A:75:36:C7:74:DB:86:C4:BD:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b0:0f:8f:7c:0e:f7:a6:e4:be:c5:5a:fa:e2:33:a3:0d:8f:
4a:ae:88:c2:3b:07:8b:60:86:6e:db:df:8e:b5:ad:2d:9f:7b:
19:72:c6:13:32:8d:31:31:ca:68:6d:e3:a8:d8:91:c7:72:fd:
9a:f6:19:0c:98:0c:d6:0e:8c:c3:95:34:aa:74:e0:5f:75:2b:
44:39:81:44:03:cf:0a:0e:de:16:65:8f:ad:b0:47:cc:38:54:
33:cb:71:47:e0:e1:1c:46:54:71:93:97:51:41:cf:b0:1f:81:
0a:8f:da:9a:b6:88:36:b0:e0:ae:c7:68:da:e2:29:6c:b2:c7:
53:18:07:94:db:e3:a3:a6:20:f9:6c:ed:11:20:7b:28:7e:c7:
58:ad:5e:24:67:53:db:d8:73:b8:45:5a:38:e7:07:bd:9d:13:
35:fb:6b:75:28:9a:c1:d7:f3:f2:40:37:42:67:82:88:0c:dd:
80:2c:00:59:28:d0:c0:2d:4e:03:e3:48:6a:9e:23:6a:c7:f6:
c8:dc:aa:fd:52:74:77:fc:d3:df:ad:e7:0f:4c:79:7f:8d:9a:
d4:7f:3f:52:3f:30:d2:a5:39:eb:4e:8f:fa:ae:1b:71:51:5a:
c6:90:31:60:51:ce:6b:c3:f0:26:76:7e:ee:d0:a7:c5:9b:7e:
ba:84:d6:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdsV7lfZf1k7WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MGNhNGFjYzgtZDVjOS00MWY5LWFjZTMtMjllYTY1MTkyMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKK3HbHEDGTgx08fzsvodtUl2IENey8Dv7Yq
DMiVpg8KqSS1Xjb1lCePL7l++Ke78QT8GEpLfNUy0Twt97PfQW9n4PMqRR2Sd7Fa
Fb+1NsIlSxNb4t/IINbsWPNQ1vBQMdVTuhE6p8wTq0AhPiDybd5ExRyyBuMpGu8m
B0APm0sQG9Txju550XgDIF9voYDmIIqnwRumk+mfANdpFOgb5W5JeaMuQbTTc++P
ZbRdVOhRfVIYJE6KUVEMIwZeHJBFPcnm+Ecp08tABHsZDyMSA6ZOs0pLHcQ1wWAa
j+e89N6FFz5OebUz8//QtxIBv3RsGnTiXv4lN4iCwC0bgHa1JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOm8lyvDVvHC2AxqdTbHdNuGxL0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ2YjBiMGItYzM4OC0z
NzI1LWIzNmQtM2JkNDJhNjI4NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKwD498Dvem5L7FWvriM6MNj0quiMI7B4tghm7b3461rS2fexlyxhMy
jTExymht46jYkcdy/Zr2GQyYDNYOjMOVNKp04F91K0Q5gUQDzwoO3hZlj62wR8w4
VDPLcUfg4RxGVHGTl1FBz7AfgQqP2pq2iDaw4K7HaNriKWyyx1MYB5Tb46OmIPls
7REgeyh+x1itXiRnU9vYc7hFWjjnB72dEzX7a3UomsHX8/JAN0JngogM3YAsAFko
0MAtTgPjSGqeI2rH9sjcqv1SdHf809+t5w9MeX+NmtR/P1I/MNKlOetOj/quG3FR
WsaQMWBRzmvD8CZ2fu7Qp8WbfrqE1o8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:08 2025 by rpki-client