Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b94463eb-2304-30c7-bb86-ceaa0daceb7f.roa
File: b94463eb-2304-30c7-bb86-ceaa0daceb7f.roa (raw, json)
Hash identifier: OqvOIcQoJ6n58Ef0u9uGFWNGnXBqUqKeoojyQpESxmU=
Subject key identifier: E5:88:69:23:D9:99:06:DB:E9:86:A3:55:6D:8B:06:CD:31:18:00:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5815A87873F695784D6E180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b94463eb-2304-30c7-bb86-ceaa0daceb7f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.21.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:5a:87:87:3f:69:57:84:d6:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=bb1f4c9f-71a2-42e6-9503-bbb3cfaf2c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:04:8c:43:21:8c:df:25:54:90:69:ca:54:
f4:33:89:a3:67:b9:b3:9b:2e:69:a7:8d:c9:0f:f4:
1d:8f:4c:6c:d3:48:dd:ab:64:d8:61:f2:83:50:16:
a4:60:23:71:e8:ca:95:43:01:27:73:3a:cb:90:37:
72:2d:89:4b:66:df:1f:07:7e:98:43:5a:35:d1:0b:
e7:80:df:a2:d1:9b:45:98:54:b0:61:74:d8:8d:49:
82:a8:7c:ab:26:4f:fa:bc:15:ab:cc:97:74:29:6f:
2d:53:5e:29:f4:02:a6:ec:2c:a9:38:0b:e1:0d:18:
f4:8b:3c:c7:fe:d9:37:f6:24:c4:3b:ef:78:2c:4b:
7f:2a:16:45:93:ee:ae:73:d4:b4:fc:1c:58:2e:46:
0d:21:37:c6:31:43:1f:80:3a:c6:9a:07:4a:55:1e:
5f:d8:30:48:fe:4f:a0:f9:fb:bf:b7:08:24:25:6a:
50:1e:6d:9a:9c:1d:87:70:56:ab:4b:8f:8f:a7:0b:
5e:80:46:8c:b5:e4:43:57:d8:97:e3:03:e0:14:49:
ee:21:dc:95:15:fb:2e:54:ed:da:28:95:f7:c8:d2:
68:53:f5:7d:3e:77:98:89:d3:0f:a4:90:c6:43:4c:
62:d4:8f:a4:3b:b7:1b:f4:f4:86:b6:0f:39:86:f5:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:88:69:23:D9:99:06:DB:E9:86:A3:55:6D:8B:06:CD:31:18:00:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b94463eb-2304-30c7-bb86-ceaa0daceb7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.21.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:bf:b5:23:3d:05:24:46:5c:68:9a:cf:15:f0:f4:19:72:61:
86:65:c3:a6:41:8b:8f:b4:37:52:4e:d5:32:39:db:27:42:90:
11:8b:de:20:7d:1f:5c:b0:6b:81:3d:29:9d:5a:aa:fe:05:ee:
ee:52:7f:f0:9b:6d:f9:c9:dc:52:56:61:52:02:c0:f6:ae:61:
fd:18:48:b1:4e:10:ce:ec:44:ce:fc:81:b4:5d:c7:7b:19:c0:
05:1e:ce:63:ce:e4:b9:af:46:d2:a7:e8:2c:7a:ec:de:4a:77:
f9:4e:e6:29:14:3a:a7:cf:2e:ff:a7:2e:85:f7:6d:c8:45:f9:
e6:ce:2f:77:64:bf:72:ef:1d:7b:75:2a:28:45:5c:b2:4a:66:
5e:cc:c2:2e:b0:cf:f4:a7:21:b8:07:a8:df:1a:02:eb:4c:78:
fc:ce:2f:d3:aa:8e:c2:8b:0d:8a:17:ab:b1:66:3a:9a:43:eb:
22:2f:b4:f9:57:84:d8:8c:72:d9:f9:46:43:40:5a:e0:f1:2c:
44:cc:9e:65:12:c7:c9:bf:52:13:54:d2:85:01:04:e2:b8:5d:
05:b4:51:06:46:a4:89:b5:3c:39:10:b1:c2:7e:37:98:7d:6b:
e9:04:2a:50:73:d6:50:58:d7:f2:95:38:70:0b:12:32:3f:7c:
ad:0a:b3:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgVqHhz9pV4TW4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmIxZjRjOWYtNzFhMi00MmU2LTk1MDMtYmJiM2NmYWYyYzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7cEjEMhjN8lVJBpylT0M4mjZ7mzmy5pp43J
D/Qdj0xs00jdq2TYYfKDUBakYCNx6MqVQwEnczrLkDdyLYlLZt8fB36YQ1o10Qvn
gN+i0ZtFmFSwYXTYjUmCqHyrJk/6vBWrzJd0KW8tU14p9AKm7CypOAvhDRj0izzH
/tk39iTEO+94LEt/KhZFk+6uc9S0/BxYLkYNITfGMUMfgDrGmgdKVR5f2DBI/k+g
+fu/twgkJWpQHm2anB2HcFarS4+PpwtegEaMteRDV9iX4wPgFEnuIdyVFfsuVO3a
KJX3yNJoU/V9PneYidMPpJDGQ0xi1I+kO7cb9PSGtg85hvUtaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWIaSPZmQbb6YajVW2LBs0xGAAPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk0NDYzZWItMjMwNC0z
MGM3LWJiODYtY2VhYTBkYWNlYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO/tSM9BSRGXGiazxXw9BlyYYZlw6ZBi4+0N1JO1TI52ydCkBGL3iB9
H1ywa4E9KZ1aqv4F7u5Sf/CbbfnJ3FJWYVICwPauYf0YSLFOEM7sRM78gbRdx3sZ
wAUezmPO5LmvRtKn6Cx67N5Kd/lO5ikUOqfPLv+nLoX3bchF+ebOL3dkv3LvHXt1
KihFXLJKZl7Mwi6wz/SnIbgHqN8aAutMePzOL9OqjsKLDYoXq7FmOppD6yIvtPlX
hNiMctn5RkNAWuDxLETMnmUSx8m/UhNU0oUBBOK4XQW0UQZGpIm1PDkQscJ+N5h9
a+kEKlBz1lBY1/KVOHALEjI/fK0Ks1s=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:41 2025 by rpki-client