Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa
File: ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa (raw, json)
Hash identifier: 3N9t1IGOMBPzXcxr6l11wlfgrM/UsgF1PRk2dfkStm8=
Subject key identifier: E1:73:65:94:E2:52:21:CC:7A:DF:0C:E7:30:1E:38:5A:81:E1:73:58
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814C1CE4FD01B522359D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:4c:1c:e4:fd:01:b5:22:35:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=64925f98-6216-4e89-88c0-83ae8325499a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:cd:3f:01:b5:e0:14:44:b2:ff:bf:ac:80:
c6:41:82:e6:f4:17:cd:2e:ac:1e:1c:b9:cf:d3:e1:
37:c4:de:f2:b4:8d:3f:4c:9f:82:c6:25:cd:cb:d4:
cf:88:6c:ea:36:09:9d:fa:0b:40:64:9c:93:33:ec:
62:9a:5c:bb:df:9e:cf:1c:3b:dc:05:94:c3:6d:c3:
61:69:fd:de:c0:d5:d3:3f:47:e6:f1:cc:59:b9:9e:
dc:6b:24:f9:a1:b8:8e:4f:d5:9f:60:de:f3:78:29:
0c:40:df:3b:1d:50:46:2f:72:a7:37:79:3e:9a:b8:
14:fb:bd:3b:8f:d4:97:4e:f6:fa:fe:32:0e:b0:88:
97:fa:72:e4:bb:92:0d:65:10:2c:27:c2:5b:3d:61:
9b:89:f0:b5:cb:9e:e9:c5:1f:4c:66:3c:71:88:f4:
9a:51:ac:80:e1:1d:a9:94:20:c0:fe:72:74:e2:c5:
31:29:d8:87:75:2b:e3:2c:ec:5c:bd:23:71:e0:44:
90:04:c8:5f:c2:89:67:71:10:a2:b0:bc:32:74:49:
48:27:31:0b:99:ae:91:67:b0:6b:47:9c:47:0f:84:
fe:4a:df:8f:fc:17:b3:f3:0d:93:dd:e5:b4:e2:c7:
73:08:9c:37:7f:1f:82:78:85:f4:33:e0:b3:f1:28:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:65:94:E2:52:21:CC:7A:DF:0C:E7:30:1E:38:5A:81:E1:73:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:62:98:31:2b:de:94:65:65:e5:91:58:17:6e:e8:8b:4a:36:
58:9d:8e:e1:2a:7d:d6:43:df:0d:c6:b8:40:05:18:cb:bd:71:
a4:61:d2:19:61:66:85:a0:87:37:e4:91:10:4c:03:38:d8:5f:
46:6d:bd:31:e5:17:e2:1b:bf:67:9c:9f:e4:46:81:03:43:38:
f6:38:f8:76:06:00:54:6e:69:3c:59:34:98:44:f3:d1:fe:fd:
1a:55:69:96:a9:f5:18:d1:dd:49:2f:f0:d9:9f:0e:5b:68:50:
bb:a5:4f:c7:9c:3b:25:fd:37:87:e7:59:9b:40:c7:34:73:c5:
d6:65:4b:aa:1f:5b:bd:90:f4:f9:72:46:45:cb:8d:74:ed:b8:
ff:e3:2e:e4:02:fe:cc:d5:38:51:28:2b:b2:a6:b6:e8:2e:26:
d2:81:4c:7c:a5:49:e9:96:b7:32:03:b3:5e:49:82:1c:6f:42:
86:3e:2d:fe:50:4c:e6:7f:ac:a9:dc:2e:87:a0:18:6b:1c:35:
4b:2e:18:f7:2a:ba:b0:d4:af:a0:5d:67:c1:19:f3:ea:05:5c:
39:bc:dd:7a:26:6a:40:f4:ad:0f:a6:fc:b9:15:e6:1e:25:ed:
51:70:6f:a2:57:ac:68:41:a4:a7:7f:22:93:ff:bd:0a:6d:79:
df:ea:5d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUwc5P0BtSI1nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjQ5MjVmOTgtNjIxNi00ZTg5LTg4YzAtODNhZTgzMjU0OTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAzNPwG14BREsv+/rIDGQYLm9BfNLqweHLnP
0+E3xN7ytI0/TJ+CxiXNy9TPiGzqNgmd+gtAZJyTM+ximly7357PHDvcBZTDbcNh
af3ewNXTP0fm8cxZuZ7cayT5obiOT9WfYN7zeCkMQN87HVBGL3KnN3k+mrgU+707
j9SXTvb6/jIOsIiX+nLku5INZRAsJ8JbPWGbifC1y57pxR9MZjxxiPSaUayA4R2p
lCDA/nJ04sUxKdiHdSvjLOxcvSNx4ESQBMhfwolncRCisLwydElIJzELma6RZ7Br
R5xHD4T+St+P/Bez8w2T3eW04sdzCJw3fx+CeIX0M+Cz8Sg8WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFzZZTiUiHMet8M5zAeOFqB4XNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWUxZmNjNTEtYzk0NS0z
YTkxLTgyN2UtZjFmNDcxZDhmZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRimDEr3pRlZeWRWBdu6ItKNlidjuEqfdZD3w3GuEAFGMu9caRh0hlh
ZoWghzfkkRBMAzjYX0ZtvTHlF+Ibv2ecn+RGgQNDOPY4+HYGAFRuaTxZNJhE89H+
/RpVaZap9RjR3Ukv8NmfDltoULulT8ecOyX9N4fnWZtAxzRzxdZlS6ofW72Q9Ply
RkXLjXTtuP/jLuQC/szVOFEoK7KmtuguJtKBTHylSemWtzIDs15JghxvQoY+Lf5Q
TOZ/rKncLoegGGscNUsuGPcqurDUr6BdZ8EZ8+oFXDm83XomakD0rQ+m/LkV5h4l
7VFwb6JXrGhBpKd/IpP/vQpted/qXTc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:23 2025 by rpki-client