Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa
File: b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa (raw, json)
Hash identifier: vVrICu5vsqLsAkl4FgcMY6u7N9xP0cbEAJWQ0yHuE3I=
Subject key identifier: CE:B8:32:5F:E0:EA:54:38:4D:2B:75:3F:B6:11:29:7B:9E:A3:14:C6
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581A287752D7B9A9EE295C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:a2:87:75:2d:7b:9a:9e:e2:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a8b35b53-3be3-4836-bcf4-aef595444667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:ce:06:25:44:4d:e1:d5:f5:66:75:72:02:
8f:da:0c:6f:1b:87:6b:50:5d:71:aa:20:bb:b5:53:
a7:e6:e1:0a:5b:72:b0:00:be:3c:3e:88:96:fb:ea:
02:7d:48:49:64:b6:6a:08:04:7c:ab:2b:84:1f:fb:
77:3a:9d:0b:bb:28:ac:c0:37:4d:34:5c:1e:a0:84:
ee:d0:39:de:b9:df:cc:78:b1:31:fb:a9:86:94:b9:
ac:d0:58:76:26:96:56:fc:65:34:1a:d4:89:6f:fc:
62:5d:f3:79:39:c2:34:30:95:66:4e:58:73:31:7e:
ea:b3:a7:71:e1:00:a8:00:8b:c3:59:bc:13:db:3d:
a9:97:63:b0:c3:a1:15:92:10:33:39:56:fc:2b:f3:
ac:7c:7a:f2:00:ad:2c:7f:86:87:20:f1:1c:74:1c:
f2:07:59:a6:26:34:37:19:f7:97:18:a2:2a:37:6b:
99:ce:11:ea:14:03:87:ef:ac:9a:1f:70:fe:08:ff:
11:a6:f9:c1:21:02:1f:cb:1c:75:7a:d7:24:66:94:
f9:bc:e7:61:75:8d:57:4b:92:5f:28:73:3f:29:93:
c1:e6:f6:f8:12:91:d8:e0:20:64:8a:ea:d2:f4:81:
d0:9c:c6:25:ce:5d:ac:2c:cf:f1:c4:78:64:21:1f:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:32:5F:E0:EA:54:38:4D:2B:75:3F:B6:11:29:7B:9E:A3:14:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:28:32:59:ca:a3:7d:54:eb:70:cd:b8:54:33:26:c7:38:c1:
cd:d1:3d:98:4f:0c:a0:92:d7:bf:3a:67:ad:3e:b9:50:be:11:
50:5e:ae:98:c0:df:cf:3e:a7:0f:a1:eb:f3:0b:fe:2a:48:3c:
58:a3:d6:a2:35:31:8b:af:a5:fc:f9:70:e4:6f:d6:8c:9e:07:
d1:93:34:02:96:69:3c:2e:1e:da:e3:3a:c7:89:70:e6:12:e2:
ab:ad:57:8d:bd:74:5c:dd:c1:f3:a1:bb:e5:95:66:8e:24:6e:
ab:6a:2d:2c:88:55:bc:33:4f:c1:0d:ad:38:a4:6c:9c:f3:02:
b5:c9:9a:b2:5c:4d:1b:ea:51:3b:a8:18:3a:f7:32:fe:27:8b:
a7:14:35:f9:1b:4a:41:4c:60:4b:12:61:40:18:d7:b8:14:75:
50:23:84:b6:28:e9:6c:7a:f9:a0:54:7b:48:b3:a0:aa:a6:7e:
68:6a:f4:b5:1b:59:5d:d6:ed:1b:10:c3:cf:47:8d:2a:75:69:
ab:0a:85:41:5e:a8:83:e1:a3:bc:a5:e1:c9:39:53:8b:17:75:
21:85:ea:30:59:44:16:6d:40:7b:9a:ac:e1:69:6a:da:fe:f8:
9b:0e:94:82:75:ff:c7:3a:06:d2:fb:7c:a3:1b:30:7e:43:8f:
0e:ca:06:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaKHdS17mp7ilcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YThiMzViNTMtM2JlMy00ODM2LWJjZjQtYWVmNTk1NDQ0NjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc3OBiVETeHV9WZ1cgKP2gxvG4drUF1xqiC7
tVOn5uEKW3KwAL48PoiW++oCfUhJZLZqCAR8qyuEH/t3Op0LuyiswDdNNFweoITu
0Dneud/MeLEx+6mGlLms0Fh2JpZW/GU0GtSJb/xiXfN5OcI0MJVmTlhzMX7qs6dx
4QCoAIvDWbwT2z2pl2Oww6EVkhAzOVb8K/OsfHryAK0sf4aHIPEcdBzyB1mmJjQ3
GfeXGKIqN2uZzhHqFAOH76yaH3D+CP8RpvnBIQIfyxx1etckZpT5vOdhdY1XS5Jf
KHM/KZPB5vb4EpHY4CBkiurS9IHQnMYlzl2sLM/xxHhkIR/z9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM64Ml/g6lQ4TSt1P7YRKXueoxTGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk1ZTIyZDktMDZiMC0z
NWE3LWIxNTItN2I0ZjY3NGM4Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK35MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAoMlnKo31U63DNuFQzJsc4wc3RPZhPDKCS1786Z60+uVC+EVBerpjA
388+pw+h6/ML/ipIPFij1qI1MYuvpfz5cORv1oyeB9GTNAKWaTwuHtrjOseJcOYS
4qutV429dFzdwfOhu+WVZo4kbqtqLSyIVbwzT8ENrTikbJzzArXJmrJcTRvqUTuo
GDr3Mv4ni6cUNfkbSkFMYEsSYUAY17gUdVAjhLYo6Wx6+aBUe0izoKqmfmhq9LUb
WV3W7RsQw89HjSp1aasKhUFeqIPho7yl4ck5U4sXdSGF6jBZRBZtQHuarOFpatr+
+JsOlIJ1/8c6BtL7fKMbMH5Djw7KBo4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:06 2025 by rpki-client