Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8194f4b-7ff9-3bd1-8826-52df913ddcfa.roa
File: f8194f4b-7ff9-3bd1-8826-52df913ddcfa.roa (raw, json)
Hash identifier: hcYe27fKUURhNS30khhN30Oq2Wwg9WFU5JriexIJNqo=
Subject key identifier: 64:21:CE:61:EE:AF:C5:BD:65:E8:3E:87:6E:DF:A6:A6:A8:EE:EC:83
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58161DBB1B91B1A71AEF260
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8194f4b-7ff9-3bd1-8826-52df913ddcfa.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 184.62.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:61:db:b1:b9:1b:1a:71:ae:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4b5767f9-ba54-4459-98b5-b683e36693c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:cf:2a:4a:4d:0c:5c:dc:07:cf:59:a8:21:
78:81:45:15:7f:a9:0c:1e:03:1b:ee:d6:5e:28:e9:
0b:e5:98:8f:0a:ec:c1:f5:c5:48:23:28:6b:d5:5f:
b5:e7:cb:95:24:c9:35:ce:c9:d6:b0:27:5e:1e:a2:
ae:dd:b2:21:cd:56:dc:78:3b:77:e1:11:37:82:ea:
ac:5d:ca:c9:1e:d9:78:a1:3a:de:06:12:92:a7:e3:
7f:5d:a6:4a:06:da:01:88:1b:ae:1e:c1:10:49:52:
6e:f7:b8:64:2c:16:a3:c9:b9:d5:ac:19:78:b4:63:
81:94:13:d2:ec:1d:c7:ac:1b:e0:6c:4b:4d:41:09:
e6:d9:ac:c7:96:35:1e:70:38:58:89:2f:fc:6c:d1:
c9:ed:06:5d:80:1d:b2:e8:80:68:d3:56:6e:ee:5a:
23:a5:2d:6f:a9:c8:49:dd:95:1c:43:29:af:13:01:
22:8f:a1:8e:ea:de:9b:e3:d4:b1:f7:f1:25:3e:90:
14:79:de:2f:7a:43:52:c6:c8:b5:75:cc:7a:8d:01:
86:aa:2c:c1:f6:0f:ea:03:af:c5:19:b1:71:08:c9:
f6:63:32:b9:b0:70:61:4f:4a:60:fb:21:5d:b7:87:
25:d3:f2:56:ff:40:0a:49:76:29:85:f7:be:03:3a:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:CE:61:EE:AF:C5:BD:65:E8:3E:87:6E:DF:A6:A6:A8:EE:EC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8194f4b-7ff9-3bd1-8826-52df913ddcfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
184.62.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:f0:b2:a8:fd:2f:9f:12:ed:cc:1f:14:f8:bd:90:f9:5c:39:
48:13:a2:40:3e:db:77:81:79:1d:ed:df:e7:49:30:63:90:cd:
59:9a:2b:0a:eb:d6:ff:84:fc:fa:26:79:eb:1e:da:b4:d9:8f:
12:81:bb:f0:16:21:f8:c7:e6:8f:bd:ac:e1:c8:d6:d6:6b:da:
51:f8:5f:9d:03:6a:fa:7d:04:21:43:94:9e:30:a3:33:de:07:
e7:91:3f:3c:23:32:94:4a:3e:df:84:98:3a:8c:30:d9:a8:3f:
22:4c:bb:19:20:d0:ae:d6:4e:fc:c3:b4:a0:6c:09:05:2a:d4:
4c:17:6a:7b:44:de:fa:36:03:9c:d0:a3:2e:6e:dd:71:e5:2f:
c5:7f:e6:f5:db:08:f7:39:3e:a5:24:f2:ea:3d:e4:ac:b4:60:
80:92:6e:30:11:08:f4:80:51:e8:57:93:cb:03:e6:dd:b9:23:
7b:1d:c9:d4:c1:7f:51:09:61:eb:09:0f:84:55:bd:5b:15:b0:
2b:d4:9b:59:02:49:c3:35:53:6e:79:32:9c:77:b7:89:04:dc:
8a:75:ba:f2:c0:81:d3:48:34:76:aa:fc:f9:c9:a5:17:a3:db:
9d:43:a1:d8:ae:76:ed:f9:db:db:fa:e4:ba:53:f5:6a:fd:e3:
7a:13:ba:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWHbsbkbGnGu8mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGI1NzY3ZjktYmE1NC00NDU5LTk4YjUtYjY4M2UzNjY5M2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7PKkpNDFzcB89ZqCF4gUUVf6kMHgMb7tZe
KOkL5ZiPCuzB9cVIIyhr1V+158uVJMk1zsnWsCdeHqKu3bIhzVbceDt34RE3guqs
XcrJHtl4oTreBhKSp+N/XaZKBtoBiBuuHsEQSVJu97hkLBajybnVrBl4tGOBlBPS
7B3HrBvgbEtNQQnm2azHljUecDhYiS/8bNHJ7QZdgB2y6IBo01Zu7lojpS1vqchJ
3ZUcQymvEwEij6GO6t6b49Sx9/ElPpAUed4vekNSxsi1dcx6jQGGqizB9g/qA6/F
GbFxCMn2YzK5sHBhT0pg+yFdt4cl0/JW/0AKSXYphfe+AzpK3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQhzmHur8W9Zeg+h27fpqao7uyDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjgxOTRmNGItN2ZmOS0z
YmQxLTg4MjYtNTJkZjkxM2RkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPwsqj9L58S7cwfFPi9kPlcOUgTokA+23eBeR3t3+dJMGOQzVmaKwrr
1v+E/Pomeese2rTZjxKBu/AWIfjH5o+9rOHI1tZr2lH4X50Davp9BCFDlJ4wozPe
B+eRPzwjMpRKPt+EmDqMMNmoPyJMuxkg0K7WTvzDtKBsCQUq1EwXantE3vo2A5zQ
oy5u3XHlL8V/5vXbCPc5PqUk8uo95Ky0YICSbjARCPSAUehXk8sD5t25I3sdydTB
f1EJYesJD4RVvVsVsCvUm1kCScM1U255Mpx3t4kE3Ip1uvLAgdNINHaq/PnJpRej
251Dodiudu3529v65LpT9Wr943oTuoM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:29 2025 by rpki-client