Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa
File: c82b9149-06c9-311a-ad6d-f180e960971d.roa (raw, json)
Hash identifier: 9P3hbFeVOuUPCRzahNovV382/UQumEgvb5YggXQv3RY=
Subject key identifier: 0E:44:10:32:0D:0C:D0:47:AE:62:C7:EF:E1:C7:8D:F3:3D:D1:EB:43
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810EFD25B94A4B9AE94800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0e:fd:25:b9:4a:4b:9a:e9:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=61ef6863-1141-45a2-9a28-fbe13870cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:5a:41:d5:47:e5:9c:fc:74:4b:de:26:f5:
2d:83:b7:fd:7a:95:b0:ff:14:70:d8:e9:1c:cc:7e:
b6:e3:77:49:39:e5:1d:ed:b1:66:2f:d4:1d:42:87:
13:8a:75:ff:72:07:cd:e5:ac:4a:9a:c6:5f:dc:33:
f9:03:47:a0:3b:6c:0f:fa:4c:55:02:50:20:de:8d:
1e:ce:0e:8f:14:11:11:46:ec:64:b9:c8:58:b6:f7:
df:f6:4a:3c:5d:dc:61:3e:88:6e:09:c6:e1:a1:c1:
f9:63:00:3c:ee:1b:e2:ec:9f:29:9d:ca:7f:fe:14:
d2:c7:55:ad:bd:86:2a:93:01:b3:3b:97:e5:25:b6:
5a:52:38:a4:8f:92:00:dc:79:f8:e2:3e:4a:af:eb:
f9:65:9a:59:b8:76:ef:2b:c1:8f:f1:d8:fc:9f:b4:
c3:fd:a0:d0:6e:8d:e7:b7:28:a5:70:a4:d9:c4:42:
fd:78:54:61:fa:06:9c:05:f5:72:b3:dc:98:29:74:
53:ac:8e:83:a6:7c:7f:74:8e:f3:c3:47:9b:bc:fe:
b2:59:00:75:f6:44:0f:4d:f1:6e:51:1c:1a:bc:1b:
ea:2d:58:8c:c6:36:a7:83:41:30:c7:27:39:bb:c0:
9f:0e:aa:95:d1:39:c0:82:c7:18:27:93:e1:0c:21:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:10:32:0D:0C:D0:47:AE:62:C7:EF:E1:C7:8D:F3:3D:D1:EB:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:32:8c:79:d9:37:78:22:52:0c:20:55:97:71:b4:bb:40:57:
35:46:1f:4a:de:3e:30:1a:3d:54:9b:a8:e8:a9:ef:21:ca:aa:
69:27:49:7d:90:a9:04:d3:38:9d:48:2a:b3:55:83:12:14:0d:
86:c9:93:5a:2b:84:c3:84:35:e3:2a:92:91:6d:54:e2:45:80:
cc:18:95:d1:6f:25:4d:fe:cd:f2:a6:a7:5e:a5:9c:c7:6d:f6:
27:63:79:43:9f:91:d6:f9:38:97:5c:c3:de:ed:94:69:20:62:
fc:76:bd:b9:c0:c1:d1:f2:ac:a7:47:5e:c2:d2:58:97:22:96:
53:9b:20:86:6f:45:0c:02:74:47:55:5a:66:dc:cb:b2:f2:6c:
75:21:a7:62:a3:f6:14:40:b9:bc:49:90:30:b3:d2:51:b5:08:
a4:c8:41:6e:84:56:55:d1:7f:c9:40:40:e2:36:a4:80:33:9f:
0e:fa:50:19:0e:35:fa:6b:bb:16:36:87:1f:6e:f4:fa:1c:36:
f3:a7:d2:24:a3:b7:e8:53:38:e8:99:a4:9d:df:4a:48:14:ab:
b0:60:81:61:9c:54:55:8b:84:aa:7c:c0:af:ee:83:af:1b:86:
fa:8e:52:ca:b5:3b:a4:92:21:f4:d4:9d:07:7a:24:1a:c3:a0:
5d:c6:8c:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ79JblKS5rpSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjFlZjY4NjMtMTE0MS00NWEyLTlhMjgtZmJlMTM4NzBjYjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn61aQdVH5Zz8dEveJvUtg7f9epWw/xRw2Okc
zH6243dJOeUd7bFmL9QdQocTinX/cgfN5axKmsZf3DP5A0egO2wP+kxVAlAg3o0e
zg6PFBERRuxkuchYtvff9ko8XdxhPohuCcbhocH5YwA87hvi7J8pncp//hTSx1Wt
vYYqkwGzO5flJbZaUjikj5IA3Hn44j5Kr+v5ZZpZuHbvK8GP8dj8n7TD/aDQbo3n
tyilcKTZxEL9eFRh+gacBfVys9yYKXRTrI6Dpnx/dI7zw0ebvP6yWQB19kQPTfFu
URwavBvqLViMxjang0Ewxyc5u8CfDqqV0TnAgscYJ5PhDCHsnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5EEDINDNBHrmLH7+HHjfM90etDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzgyYjkxNDktMDZjOS0z
MTFhLWFkNmQtZjE4MGU5NjA5NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwyjHnZN3giUgwgVZdxtLtAVzVGH0rePjAaPVSbqOip7yHKqmknSX2Q
qQTTOJ1IKrNVgxIUDYbJk1orhMOENeMqkpFtVOJFgMwYldFvJU3+zfKmp16lnMdt
9idjeUOfkdb5OJdcw97tlGkgYvx2vbnAwdHyrKdHXsLSWJcillObIIZvRQwCdEdV
Wmbcy7LybHUhp2Kj9hRAubxJkDCz0lG1CKTIQW6EVlXRf8lAQOI2pIAznw76UBkO
NfpruxY2hx9u9PocNvOn0iSjt+hTOOiZpJ3fSkgUq7BggWGcVFWLhKp8wK/ug68b
hvqOUsq1O6SSIfTUnQd6JBrDoF3GjP8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:56 2025 by rpki-client