Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0ebb832-c31a-37e7-abd3-eb346d71dd25.roa
File: c0ebb832-c31a-37e7-abd3-eb346d71dd25.roa (raw, json)
Hash identifier: hkOQdFwrThOEsJXwpmV+kWhvTgoY7kqvXW0HA88QyOg=
Subject key identifier: 5E:EF:8B:44:1E:6C:85:FB:2B:E2:01:0C:43:CA:1B:01:24:76:8D:7B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D45D4EAC99002876FD80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0ebb832-c31a-37e7-abd3-eb346d71dd25.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 162.72.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d4:5d:4e:ac:99:00:28:76:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=315dcebd-eb4d-415c-b0cb-244ef0753542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:a5:39:6e:77:ca:b7:ac:ac:bf:d8:d6:8c:
d6:e1:4f:e7:03:48:31:07:54:87:50:d9:39:22:a6:
3f:ba:f4:ee:b0:60:83:0b:6b:19:ae:90:04:0f:84:
70:4a:9b:65:29:ab:9d:d6:65:43:80:53:3f:cc:23:
6a:cf:e2:e6:28:5b:c3:a7:0a:b3:5f:2e:16:5c:7a:
74:f9:a5:78:76:65:bc:0a:c0:4c:44:26:cd:3e:ec:
5a:66:cd:05:53:a0:62:f9:06:fe:89:c6:f0:3c:ed:
94:fc:dd:09:c4:ef:79:77:10:90:52:9a:8e:5f:aa:
e5:b4:e4:8b:1e:d7:94:ef:02:e2:9e:cc:46:f1:7b:
38:73:fe:d6:a7:d0:74:26:bd:57:5d:e1:c9:11:94:
83:73:c9:0a:89:af:3a:26:65:e8:0c:4d:e4:3a:71:
b4:c9:19:c0:4b:37:59:24:fe:88:43:30:06:6e:cf:
4c:f7:cd:c0:ed:3e:2d:53:cc:d6:ee:e2:8b:7b:8d:
08:0e:76:6f:6a:7d:5e:41:c6:96:a4:10:65:ab:f6:
ba:39:d4:a3:06:2c:e0:16:fa:0e:58:3d:95:a4:c1:
a8:bb:22:ef:55:1f:c3:4a:ed:1b:11:05:bd:cc:fc:
37:9d:89:ef:4a:d1:ae:80:01:96:6b:9f:2b:a7:58:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:8B:44:1E:6C:85:FB:2B:E2:01:0C:43:CA:1B:01:24:76:8D:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0ebb832-c31a-37e7-abd3-eb346d71dd25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7a:57:f8:e0:dd:97:81:e1:c7:84:b2:a9:94:a4:69:2c:c3:
60:6f:5a:4c:62:10:8a:e4:3d:09:09:7b:94:a9:07:53:0b:23:
6b:d5:bd:02:90:d5:2f:93:d6:6b:dc:49:d6:f8:77:7c:dc:7b:
97:03:56:64:fc:c1:bb:eb:82:59:94:76:2c:fa:72:73:7e:38:
f9:af:c9:0a:bd:68:6a:6b:77:83:5e:e4:4d:ec:4b:92:14:ba:
9a:d8:be:60:e0:f5:ae:6f:9a:ab:b6:13:d9:f3:5e:f9:ea:4f:
a3:e9:20:7e:06:05:b7:d1:75:d2:49:e6:24:e7:ad:35:16:58:
b1:cd:07:23:62:05:45:4b:7b:93:b5:b4:69:0f:f7:4b:99:45:
db:04:00:e3:21:45:a4:42:06:a6:1c:11:d2:55:f4:2e:81:5f:
96:9c:e8:7d:06:e5:85:ef:59:4e:e2:94:3f:a5:93:24:18:1c:
4a:bc:15:f1:f7:4c:d3:bc:fe:d8:81:c6:ec:60:b0:28:8b:ea:
30:31:d5:de:11:51:50:48:25:95:c8:1f:f3:52:ce:6e:e3:67:
10:68:8e:67:f4:3a:dd:61:d9:d3:07:f7:9e:80:19:bc:9d:2e:
fe:23:fb:d7:8e:d5:27:8c:09:b8:28:3c:ac:88:31:7b:84:b0:
4e:ad:1f:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdRdTqyZACh2/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzE1ZGNlYmQtZWI0ZC00MTVjLWIwY2ItMjQ0ZWYwNzUzNTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMqlOW53yresrL/Y1ozW4U/nA0gxB1SHUNk5
IqY/uvTusGCDC2sZrpAED4RwSptlKaud1mVDgFM/zCNqz+LmKFvDpwqzXy4WXHp0
+aV4dmW8CsBMRCbNPuxaZs0FU6Bi+Qb+icbwPO2U/N0JxO95dxCQUpqOX6rltOSL
HteU7wLinsxG8Xs4c/7Wp9B0Jr1XXeHJEZSDc8kKia86JmXoDE3kOnG0yRnASzdZ
JP6IQzAGbs9M983A7T4tU8zW7uKLe40IDnZvan1eQcaWpBBlq/a6OdSjBizgFvoO
WD2VpMGouyLvVR/DSu0bEQW9zPw3nYnvStGugAGWa58rp1jVswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7vi0QebIX7K+IBDEPKGwEkdo17MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzBlYmI4MzItYzMxYS0z
N2U3LWFiZDMtZWIzNDZkNzFkZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh6V/jg3ZeB4ceEsqmUpGksw2BvWkxiEIrkPQkJe5SpB1MLI2vVvQKQ
1S+T1mvcSdb4d3zce5cDVmT8wbvrglmUdiz6cnN+OPmvyQq9aGprd4Ne5E3sS5IU
uprYvmDg9a5vmqu2E9nzXvnqT6PpIH4GBbfRddJJ5iTnrTUWWLHNByNiBUVLe5O1
tGkP90uZRdsEAOMhRaRCBqYcEdJV9C6BX5ac6H0G5YXvWU7ilD+lkyQYHEq8FfH3
TNO8/tiBxuxgsCiL6jAx1d4RUVBIJZXIH/NSzm7jZxBojmf0Ot1h2dMH956AGbyd
Lv4j+9eO1SeMCbgoPKyIMXuEsE6tH/w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:25 2025 by rpki-client