Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
File: f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa (raw, json)
Hash identifier: TzHmfcVjusMU9IjkG98cF62G22kQnLPM3FUaCIhvYRI=
Subject key identifier: 52:7B:A2:F1:82:2B:7C:81:17:96:33:77:E0:3A:2D:CD:7D:59:5B:F5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810DDCBFC4FD3A30E67A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0d:dc:bf:c4:fd:3a:30:e6:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=be20f34b-662e-41bc-a036-ee9159b84b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:44:cd:13:4b:62:bf:5e:66:f4:b9:2d:9a:
56:a5:fb:37:e9:d3:a1:e5:c7:34:98:dd:4d:8d:06:
f4:de:08:c5:77:de:e8:23:69:5b:d8:75:2a:d9:29:
b5:85:4c:99:a5:2f:c1:e4:55:3c:31:36:42:a0:9e:
e1:e7:6f:2e:95:bb:c3:ff:2b:cf:43:b0:4f:8a:25:
ea:13:18:d2:ac:33:3f:d8:30:5d:df:43:8d:38:35:
9b:54:98:53:76:59:1c:cd:f6:16:11:6e:c2:42:7d:
47:b9:db:e7:53:04:7f:a2:df:08:0a:ca:9f:ee:69:
d2:50:1f:69:62:fc:d4:b9:94:3c:5a:45:1f:b3:6e:
8e:0f:0b:0a:71:a7:da:d1:c4:3f:50:c4:1f:bd:5e:
9c:f2:01:dd:f4:48:b3:a8:67:57:d4:1b:74:ca:6f:
78:29:e9:b4:70:41:ce:89:d1:b5:5b:ce:29:9d:e2:
6a:5e:57:6a:12:f7:b7:f6:f9:2b:63:66:0a:cb:17:
cf:cd:a8:ae:f6:38:60:80:c6:5a:66:28:d3:78:4b:
52:38:02:e9:a0:8d:c4:df:13:1f:44:10:28:a5:c1:
85:93:8e:23:a1:01:9c:df:a5:47:1a:db:5b:d8:a5:
58:cf:db:76:c1:e3:e8:a0:a2:2d:75:57:b4:5f:6f:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7B:A2:F1:82:2B:7C:81:17:96:33:77:E0:3A:2D:CD:7D:59:5B:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9be7533-16e5-3578-8e4c-bd8237ce20e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:66:b7:7a:54:cc:2d:ca:18:29:ac:e7:7f:68:4a:7b:9f:3c:
20:0a:29:23:1a:89:12:19:5d:f8:30:c3:30:71:15:ce:d7:73:
4e:9c:f5:6b:2e:08:68:c8:41:b1:c6:d9:56:1e:9c:87:6e:8f:
2f:11:fa:46:33:b7:f4:de:f1:48:95:6e:49:3a:bd:94:5e:68:
fc:67:a1:ac:85:c4:87:96:08:84:60:75:28:c0:b0:f2:93:bf:
20:99:73:29:ee:44:fd:6c:c2:ae:a5:0a:79:51:5e:65:c4:cf:
38:75:e7:71:e1:28:a8:50:e9:e8:67:c2:6e:7e:10:59:6e:6e:
51:32:fb:53:da:bb:73:c4:81:06:48:ee:2b:15:ee:c4:1b:a6:
18:08:50:d6:18:0c:2d:2a:6b:d3:40:64:39:6a:eb:e3:2a:b4:
a5:0f:36:b7:23:25:a9:7f:61:1a:b2:fc:2d:df:68:e3:cb:6e:
6b:92:c4:e6:9f:e5:39:4b:50:ac:93:b8:1f:c0:84:d3:1a:9f:
ff:2f:f6:33:d1:02:bd:78:68:bf:90:c6:ee:db:48:b2:37:96:
3a:4d:d8:ea:db:3b:7b:5d:fd:22:ea:35:4f:69:8e:41:e1:83:
27:8e:f3:b1:30:05:62:8d:72:c2:82:dc:39:31:19:2a:69:95:
4f:6f:c1:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ3cv8T9OjDmeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YmUyMGYzNGItNjYyZS00MWJjLWEwMzYtZWU5MTU5Yjg0YjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1FEzRNLYr9eZvS5LZpWpfs36dOh5cc0mN1N
jQb03gjFd97oI2lb2HUq2Sm1hUyZpS/B5FU8MTZCoJ7h528ulbvD/yvPQ7BPiiXq
ExjSrDM/2DBd30ONODWbVJhTdlkczfYWEW7CQn1HudvnUwR/ot8ICsqf7mnSUB9p
YvzUuZQ8WkUfs26ODwsKcafa0cQ/UMQfvV6c8gHd9EizqGdX1Bt0ym94Kem0cEHO
idG1W84pneJqXldqEve39vkrY2YKyxfPzaiu9jhggMZaZijTeEtSOALpoI3E3xMf
RBAopcGFk44joQGc36VHGttb2KVYz9t2wePooKItdVe0X2/gvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJ7ovGCK3yBF5Yzd+A6Lc19WVv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjliZTc1MzMtMTZlNS0z
NTc4LThlNGMtYmQ4MjM3Y2UyMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVmt3pUzC3KGCms539oSnufPCAKKSMaiRIZXfgwwzBxFc7Xc06c9Wsu
CGjIQbHG2VYenIdujy8R+kYzt/Te8UiVbkk6vZReaPxnoayFxIeWCIRgdSjAsPKT
vyCZcynuRP1swq6lCnlRXmXEzzh153HhKKhQ6ehnwm5+EFlublEy+1Pau3PEgQZI
7isV7sQbphgIUNYYDC0qa9NAZDlq6+MqtKUPNrcjJal/YRqy/C3faOPLbmuSxOaf
5TlLUKyTuB/AhNMan/8v9jPRAr14aL+Qxu7bSLI3ljpN2OrbO3td/SLqNU9pjkHh
gyeO87EwBWKNcsKC3DkxGSpplU9vwZ0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:30 2025 by rpki-client