Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa
File: daa4718a-cadd-377c-bf7d-53127a0f9c01.roa (raw, json)
Hash identifier: TrsVuiyTfLjTG7BG9mFeriDIGlg3wdiThGw/NOxBRsw=
Subject key identifier: A1:5B:A6:1F:87:BC:38:0B:59:53:6E:B7:87:EF:C6:4D:AB:A0:B5:6C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5813BF41691C0DB162D8780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 99.197.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:3b:f4:16:91:c0:db:16:2d:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4eac9e73-df6a-40fd-8dc3-0b8fd243b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:35:e0:11:33:fd:f3:a7:fb:58:6e:ed:9e:
e2:7e:24:55:e7:54:bb:f2:38:a2:65:6a:60:4d:00:
4a:e6:78:3c:68:d3:05:91:44:09:5c:f0:40:0e:a5:
7e:dc:9c:b8:29:ed:71:0b:4e:0e:66:4d:f5:e2:7c:
f8:09:97:da:91:56:ee:c2:e9:83:e0:9f:4f:fb:5c:
50:47:e7:15:7c:c5:5e:e0:e9:f2:ab:2d:86:86:3a:
51:d7:5c:8b:ea:94:ca:5e:41:86:4e:5a:40:40:d9:
3e:9c:de:63:bc:f5:2d:03:2d:7a:bd:44:12:5c:f2:
a7:e6:5e:f5:4f:dd:af:db:15:4d:ef:bc:1c:5b:04:
d3:bb:b2:3a:6e:77:34:4a:21:80:41:5d:25:00:57:
01:f0:20:0e:20:76:d9:f3:ff:5b:5a:9d:bc:ef:de:
be:fa:31:8b:e9:48:d4:a3:c2:40:ff:eb:bd:90:48:
fa:a9:8c:18:3c:16:7f:cd:98:37:67:91:09:97:58:
3e:85:65:63:be:69:5d:e2:7d:04:39:be:15:fc:97:
e3:f6:1e:3a:77:06:64:4b:15:2c:4e:97:d1:4a:ca:
2f:6d:1e:49:df:e6:70:86:90:ac:77:a4:c5:c4:3a:
eb:7f:cb:be:f2:21:3c:43:f9:01:d9:23:57:44:7d:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5B:A6:1F:87:BC:38:0B:59:53:6E:B7:87:EF:C6:4D:AB:A0:B5:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa4718a-cadd-377c-bf7d-53127a0f9c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.197.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:64:f9:e5:88:47:a8:7f:09:4b:ef:8d:bb:00:81:80:58:a3:
23:1f:41:2e:2d:98:61:2e:63:a6:8f:b9:55:dd:d9:f0:b6:b7:
88:c7:90:50:22:51:32:b9:e8:2e:56:ed:09:00:54:c1:1c:91:
8c:e0:2c:46:17:36:22:2a:f5:83:54:68:f9:79:2d:ca:2b:04:
f2:43:00:c8:03:37:43:4e:e7:bd:01:23:34:26:82:bd:aa:e0:
3d:f2:48:f6:7e:84:8e:d2:b9:4b:a1:4c:e6:0b:21:92:65:f2:
43:8e:7a:7b:36:4e:4f:3d:4c:ee:21:05:d0:38:53:11:4b:ca:
f6:66:b8:31:ae:c2:8e:35:c0:7d:10:88:6d:b5:89:79:db:40:
51:92:80:2b:98:16:82:16:ed:6b:1f:fb:1f:4d:d1:a0:63:82:
29:65:32:9a:5f:9c:72:54:8c:f9:19:81:fe:ae:d1:de:4c:14:
91:77:be:b2:ff:3c:72:12:fd:f7:eb:79:24:f4:9b:9d:5a:82:
b3:1d:44:ce:c9:ab:0f:7d:b1:d1:9c:a2:4e:bd:e2:a7:ff:1c:
35:2b:01:22:94:ca:38:0b:04:a0:26:5f:99:6b:96:be:9f:73:
c1:be:9e:95:23:25:22:26:63:37:8f:e5:be:ea:4a:67:45:dd:
cb:98:d4:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgTv0FpHA2xYth4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGVhYzllNzMtZGY2YS00MGZkLThkYzMtMGI4ZmQyNDNiM2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5c14BEz/fOn+1hu7Z7ifiRV51S78jiiZWpg
TQBK5ng8aNMFkUQJXPBADqV+3Jy4Ke1xC04OZk314nz4CZfakVbuwumD4J9P+1xQ
R+cVfMVe4Onyqy2GhjpR11yL6pTKXkGGTlpAQNk+nN5jvPUtAy16vUQSXPKn5l71
T92v2xVN77wcWwTTu7I6bnc0SiGAQV0lAFcB8CAOIHbZ8/9bWp28796++jGL6UjU
o8JA/+u9kEj6qYwYPBZ/zZg3Z5EJl1g+hWVjvmld4n0EOb4V/Jfj9h46dwZkSxUs
TpfRSsovbR5J3+ZwhpCsd6TFxDrrf8u+8iE8Q/kB2SNXRH14wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFbph+HvDgLWVNut4fvxk2roLVsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGFhNDcxOGEtY2FkZC0z
NzdjLWJmN2QtNTMxMjdhMGY5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdk+eWIR6h/CUvvjbsAgYBYoyMfQS4tmGEuY6aPuVXd2fC2t4jHkFAi
UTK56C5W7QkAVMEckYzgLEYXNiIq9YNUaPl5LcorBPJDAMgDN0NO570BIzQmgr2q
4D3ySPZ+hI7SuUuhTOYLIZJl8kOOens2Tk89TO4hBdA4UxFLyvZmuDGuwo41wH0Q
iG21iXnbQFGSgCuYFoIW7Wsf+x9N0aBjgillMppfnHJUjPkZgf6u0d5MFJF3vrL/
PHIS/ffreST0m51agrMdRM7Jqw99sdGcok694qf/HDUrASKUyjgLBKAmX5lrlr6f
c8G+npUjJSImYzeP5b7qSmdF3cuY1C8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:49 2025 by rpki-client