
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa
File: e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa (raw, json)
Hash identifier: Sn5wLvRbU2ykfjyMScIEmbvYBUooBXXCUKTzHZVbiY0=
Subject key identifier: DA:92:B2:62:23:5D:5C:48:00:9B:1E:4D:22:84:78:79:CF:BF:22:93
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E18195885D5712DEB680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e1:81:95:88:5d:57:12:de:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6690d39f-cdf2-4d7a-9ae7-4e1cc3a569a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:7e:d2:43:0e:bb:b6:a3:4c:ba:72:5d:e9:
bb:a9:6f:ba:10:e6:0d:da:63:9b:98:5f:9a:64:f8:
71:53:22:89:e6:6f:b8:05:ff:85:5f:71:6d:fb:1f:
af:87:63:81:e5:7b:17:09:f0:1d:27:5a:c1:08:55:
1d:7c:87:ba:2c:68:61:ce:22:db:8f:5f:a6:00:d1:
e8:d4:8d:7d:98:ba:e1:fb:e9:f6:11:36:0e:ec:e1:
70:e5:00:5e:de:1c:d3:f8:db:04:35:72:aa:9d:85:
4a:77:7e:86:85:2a:27:30:99:db:30:6e:1b:37:0c:
dc:56:23:53:25:92:f7:f8:5b:dc:66:62:ca:97:13:
4a:81:07:b1:3a:c9:01:7e:2f:4c:b6:ef:ae:6d:07:
95:fa:b0:6f:e5:89:ae:70:a1:27:bf:74:c8:b4:e5:
05:35:5e:b4:62:da:4c:19:e5:0f:a2:db:ca:ae:a7:
e2:4b:9d:9d:82:5e:18:67:64:bb:bc:88:91:be:d7:
57:b6:6b:e2:33:e6:2f:0c:0d:c3:44:11:cb:25:0d:
c5:a4:e3:0d:87:76:67:4c:1c:45:0e:63:a5:ba:cb:
0a:07:26:bf:88:24:7f:47:c4:3f:e0:91:67:85:8f:
44:3d:88:41:c6:23:f2:79:98:9f:d6:37:8b:00:0b:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:B2:62:23:5D:5C:48:00:9B:1E:4D:22:84:78:79:CF:BF:22:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:27:f6:fd:04:85:0b:9f:43:89:59:7d:21:ab:17:2b:46:b7:
50:c0:86:06:97:92:98:99:62:d2:9d:aa:0f:8c:d1:dd:5e:ea:
60:3b:17:1f:69:5f:7d:8d:79:93:b1:6e:4b:2a:e3:75:b4:8b:
27:0a:e7:41:27:cf:45:d0:64:6d:e3:58:4c:12:57:89:d9:90:
67:8f:28:b9:c8:32:8f:31:dc:56:31:e3:8f:8d:41:32:b5:13:
c4:37:f0:59:14:27:37:02:bc:2a:bc:58:ef:9a:04:8e:bd:ef:
b7:30:f4:e7:b6:12:22:a4:5f:68:13:49:c2:82:d2:b9:49:c5:
8e:cc:ae:3f:91:75:53:a4:de:13:df:2f:17:32:ea:74:28:be:
0b:ce:4d:58:eb:42:58:97:de:ef:fe:26:83:9e:87:49:bc:70:
7e:93:83:0c:0e:3b:11:47:37:16:ce:6a:91:c9:28:a9:db:b1:
4c:5e:a4:70:9e:64:5e:2d:97:b1:81:55:8c:72:88:cf:ed:b7:
39:7f:be:eb:b0:43:7f:29:f5:86:57:f4:2e:2d:1d:71:72:82:
5b:d9:ce:bc:11:7e:77:57:0b:e0:0e:ee:7d:9a:b9:29:7e:02:
49:10:22:57:09:88:9b:c2:8e:26:5e:7b:81:17:f6:c3:b2:5c:
2d:59:81:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeGBlYhdVxLetoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjY5MGQzOWYtY2RmMi00ZDdhLTlhZTctNGUxY2MzYTU2OWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTF+0kMOu7ajTLpyXem7qW+6EOYN2mObmF+a
ZPhxUyKJ5m+4Bf+FX3Ft+x+vh2OB5XsXCfAdJ1rBCFUdfIe6LGhhziLbj1+mANHo
1I19mLrh++n2ETYO7OFw5QBe3hzT+NsENXKqnYVKd36GhSonMJnbMG4bNwzcViNT
JZL3+FvcZmLKlxNKgQexOskBfi9Mtu+ubQeV+rBv5YmucKEnv3TItOUFNV60YtpM
GeUPotvKrqfiS52dgl4YZ2S7vIiRvtdXtmviM+YvDA3DRBHLJQ3FpOMNh3ZnTBxF
DmOlussKBya/iCR/R8Q/4JFnhY9EPYhBxiPyeZif1jeLAAuScQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqSsmIjXVxIAJseTSKEeHnPvyKTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTQ1NzZhYWEtZjJiMy0z
MjRhLWEwZWQtZWIwYjk2OTEwNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwn9v0EhQufQ4lZfSGrFytGt1DAhgaXkpiZYtKdqg+M0d1e6mA7Fx9p
X32NeZOxbksq43W0iycK50Enz0XQZG3jWEwSV4nZkGePKLnIMo8x3FYx44+NQTK1
E8Q38FkUJzcCvCq8WO+aBI6977cw9Oe2EiKkX2gTScKC0rlJxY7Mrj+RdVOk3hPf
Lxcy6nQovgvOTVjrQliX3u/+JoOeh0m8cH6TgwwOOxFHNxbOapHJKKnbsUxepHCe
ZF4tl7GBVYxyiM/ttzl/vuuwQ38p9YZX9C4tHXFyglvZzrwRfndXC+AO7n2auSl+
AkkQIlcJiJvCjiZee4EX9sOyXC1ZgVs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:16 2025 by rpki-client