Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa
File: d1200a48-cfbf-39b0-b158-c387ffcc576e.roa (raw, json)
Hash identifier: 7EVORAHZlPnBWp5CBZTlW5KetNe96OyCa+xX5Dqlfyo=
Subject key identifier: 5C:14:77:0B:87:7F:2B:5D:37:73:2D:A5:EF:84:17:7F:37:FC:AF:57
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581A4CA7362EC5CBE21E500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 75.104.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:a4:ca:73:62:ec:5c:be:21:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6b432136-547f-4587-8c91-49fdd510340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:d8:b8:cf:8e:13:f1:f7:0b:bf:1f:f2:7a:
c2:30:e6:3c:62:28:46:6a:11:80:40:6d:7a:20:3f:
06:9b:23:df:ec:34:59:7b:91:40:a6:63:72:04:5d:
26:fd:03:37:a6:0a:c9:14:5a:a8:a7:4e:35:ad:d1:
1c:0a:23:75:33:f2:93:e0:28:fb:31:3b:ac:e9:09:
b4:ae:f6:cf:7b:5e:47:93:c5:68:7b:ae:f2:20:8c:
5f:51:44:2e:f0:96:7a:65:13:81:6b:cf:45:b2:bd:
74:80:41:9b:72:d0:af:92:93:37:19:03:84:ec:45:
d0:8f:dc:6e:d3:bc:8e:74:80:61:45:a1:3b:b1:eb:
0c:1f:1c:3d:94:5f:3d:4b:cc:0a:68:25:e4:ba:c2:
00:34:29:dd:16:b9:94:4f:ff:85:c9:cd:cd:cf:b7:
28:0f:3c:85:50:fe:cb:dd:86:ff:c8:37:ba:6e:51:
5c:83:ab:23:f7:64:22:0f:1a:4d:b0:d4:1c:f6:1a:
aa:a8:41:0c:f4:c7:1d:ad:a9:ae:cc:ca:3e:2a:b8:
25:2a:83:b8:0a:d7:7a:f2:91:7e:4f:32:47:80:7c:
99:55:42:ea:15:95:16:1d:10:91:33:2f:1a:57:d1:
56:8f:ee:03:47:85:d8:18:45:b7:90:bc:0a:af:5f:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:77:0B:87:7F:2B:5D:37:73:2D:A5:EF:84:17:7F:37:FC:AF:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1c:75:e2:7e:b9:11:fd:f5:84:80:94:a9:3e:b7:de:9a:ce:
94:be:a2:fa:92:1e:8c:45:82:e4:c8:23:0e:e5:20:c8:f0:f7:
d3:46:62:4e:bc:b7:24:d5:5c:df:c3:5d:df:fd:51:18:45:c8:
ca:88:1f:35:21:bc:22:54:cd:e9:22:68:e6:0e:43:5e:c5:6a:
f7:00:73:f9:6b:58:f0:96:03:f0:c2:3a:b5:01:35:98:09:a9:
1a:67:00:0c:df:ec:be:69:17:35:cc:ed:b7:e3:fd:9e:4d:c0:
00:3d:4e:59:b6:31:5c:41:39:21:e7:2f:09:5e:22:64:f4:aa:
9c:87:a8:c9:b0:ca:51:56:95:32:fa:17:6a:7a:32:ea:df:7e:
cf:66:1f:4e:71:c6:e6:77:9e:47:62:e9:e9:c8:bb:11:45:98:
5f:f8:09:e3:46:22:5e:dd:7f:e8:79:7f:24:1b:d6:e8:c9:4e:
93:8e:85:eb:29:f3:cd:13:ea:f1:45:bc:6d:74:6d:70:c7:d2:
2d:3a:e0:1a:d7:21:28:fc:99:33:c3:f5:3d:62:6a:82:67:bb:
7d:9e:6c:10:6d:60:67:af:fd:65:3e:f5:81:b6:66:00:73:75:
9c:d2:f3:5b:9c:8f:11:aa:d1:2f:5e:8a:8f:6a:62:3b:1d:30:
41:ec:e8:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaTKc2LsXL4h5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmI0MzIxMzYtNTQ3Zi00NTg3LThjOTEtNDlmZGQ1MTAzNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYDYuM+OE/H3C78f8nrCMOY8YihGahGAQG16
ID8GmyPf7DRZe5FApmNyBF0m/QM3pgrJFFqop041rdEcCiN1M/KT4Cj7MTus6Qm0
rvbPe15Hk8Voe67yIIxfUUQu8JZ6ZROBa89Fsr10gEGbctCvkpM3GQOE7EXQj9xu
07yOdIBhRaE7sesMHxw9lF89S8wKaCXkusIANCndFrmUT/+Fyc3Nz7coDzyFUP7L
3Yb/yDe6blFcg6sj92QiDxpNsNQc9hqqqEEM9McdramuzMo+KrglKoO4Ctd68pF+
TzJHgHyZVULqFZUWHRCRMy8aV9FWj+4DR4XYGEW3kLwKr18jfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwUdwuHfytdN3Mtpe+EF383/K9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyMDBhNDgtY2ZiZi0z
OWIwLWIxNTgtYzM4N2ZmY2M1NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2hCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHccdeJ+uRH99YSAlKk+t96azpS+ovqSHoxFguTIIw7lIMjw99NGYk68
tyTVXN/DXd/9URhFyMqIHzUhvCJUzekiaOYOQ17FavcAc/lrWPCWA/DCOrUBNZgJ
qRpnAAzf7L5pFzXM7bfj/Z5NwAA9Tlm2MVxBOSHnLwleImT0qpyHqMmwylFWlTL6
F2p6Murffs9mH05xxuZ3nkdi6enIuxFFmF/4CeNGIl7df+h5fyQb1ujJTpOOhesp
880T6vFFvG10bXDH0i064BrXISj8mTPD9T1iaoJnu32ebBBtYGev/WU+9YG2ZgBz
dZzS81ucjxGq0S9eio9qYjsdMEHs6L8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:04 2025 by rpki-client