Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/2b17a4a9-7612-32c8-a533-204138dd1b2d.roa
File: 2b17a4a9-7612-32c8-a533-204138dd1b2d.roa (raw, json)
Hash identifier: vpERCsZ5j55lCqcEai/yqVkTvPGhvWDKL6zFMOXaeFw=
Subject key identifier: 55:03:D0:3D:24:28:94:A2:BA:C3:A5:61:69:3D:4A:4C:6F:F2:65:73
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F43285848C84B9B04ED63680CA0ECCB80
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/2b17a4a9-7612-32c8-a533-204138dd1b2d.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 40244
IP address blocks: 147.124.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9b:04:ed:63:68:0c:a0:ec:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1e3f826e-37ac-4c17-a3ec-2ed7c171f004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:ba:63:78:47:58:37:51:99:62:2e:67:25:
4c:2b:2d:b4:c0:a4:3c:f2:f4:be:38:2b:24:2f:2c:
33:29:08:35:d7:0e:09:2c:29:5a:87:80:c4:4b:26:
fd:82:af:0c:c4:39:dc:da:ff:37:00:75:8a:a9:ea:
33:0b:f7:69:96:e0:5b:a6:fc:01:99:4d:1a:76:e1:
bd:e7:0f:f4:17:71:92:af:af:87:68:0b:9d:d0:45:
5f:6d:f8:30:0e:5d:28:73:44:a4:8f:fd:2b:e7:8e:
b8:25:14:51:e1:1b:c2:b5:48:c0:9e:03:94:45:e6:
80:39:cc:80:78:24:70:f4:fb:ff:79:4c:79:8b:05:
f1:e8:17:39:bf:39:22:af:b4:a6:32:23:3e:28:34:
a7:03:e3:ad:7d:9e:84:09:53:e1:17:d0:72:4c:d8:
5e:95:6c:81:21:9e:8a:6a:cc:b9:2d:6f:b2:78:18:
c6:d7:2b:6c:5a:78:fa:0d:da:35:81:47:e2:a6:12:
58:e7:f4:33:08:cc:bd:ee:47:1d:1c:0c:9f:1c:26:
b6:71:6d:8b:bf:da:08:54:12:0a:ae:8a:de:39:9b:
e4:bb:22:65:4a:94:51:90:c5:cb:38:67:83:32:75:
1b:50:6a:c0:2e:14:77:eb:f2:90:2d:7b:2b:c0:14:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:D0:3D:24:28:94:A2:BA:C3:A5:61:69:3D:4A:4C:6F:F2:65:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/2b17a4a9-7612-32c8-a533-204138dd1b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:27:4d:06:f0:96:a6:b4:a0:94:39:42:e9:23:c1:a1:dd:eb:
f2:0f:44:f2:07:e5:42:02:2b:6d:99:81:1f:bf:f0:a6:8f:26:
44:63:3b:35:c1:2e:58:4d:5b:9a:65:cc:55:54:fb:d4:83:ea:
94:83:83:42:5a:fd:8e:32:0d:86:42:4f:88:84:b6:b2:b8:8f:
ec:2b:a8:88:a4:6b:e7:c8:b9:41:84:e1:d8:26:95:41:55:d9:
87:1a:5b:c2:4f:dc:bd:26:82:c3:cd:1b:ba:ff:bb:38:90:cd:
2a:db:e7:92:70:8f:df:b4:b6:97:40:43:dd:da:1f:65:b2:70:
d7:07:d1:6e:be:19:5f:ff:e4:a3:96:b2:14:0e:8e:e1:81:13:
f4:b5:e9:38:2f:23:4b:bd:03:ac:7c:10:70:61:9b:ee:22:a9:
d3:04:ac:d1:f4:c8:d6:57:e6:0a:60:e4:1b:7f:b2:0a:6e:54:
e4:36:86:cf:74:14:98:de:b6:07:1c:9d:a5:f0:f2:6b:2d:83:
37:93:d3:70:cc:99:ae:0b:9b:5e:fb:ed:38:32:23:c1:c2:ea:
a0:80:15:ce:d8:1d:57:70:57:7b:5d:30:fd:14:74:93:61:6b:
03:f7:99:2f:d3:a6:09:27:f7:9f:aa:e1:ad:6c:fb:a0:e2:39:
d2:11:95:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS5sE7WNoDKDsy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2
MzhiMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MWUzZjgyNmUtMzdhYy00YzE3LWEzZWMtMmVkN2MxNzFmMDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusG6Y3hHWDdRmWIuZyVMKy20wKQ88vS+OCsk
LywzKQg11w4JLClah4DESyb9gq8MxDnc2v83AHWKqeozC/dpluBbpvwBmU0aduG9
5w/0F3GSr6+HaAud0EVfbfgwDl0oc0Skj/0r5464JRRR4RvCtUjAngOUReaAOcyA
eCRw9Pv/eUx5iwXx6Bc5vzkir7SmMiM+KDSnA+OtfZ6ECVPhF9ByTNhelWyBIZ6K
asy5LW+yeBjG1ytsWnj6Ddo1gUfiphJY5/QzCMy97kcdHAyfHCa2cW2Lv9oIVBIK
roreOZvkuyJlSpRRkMXLOGeDMnUbUGrALhR36/KQLXsrwBTsKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUD0D0kKJSiusOlYWk9Skxv8mVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj
MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMmIxN2E0YTktNzYxMi0z
MmM4LWE1MzMtMjA0MTM4ZGQxYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx
NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1
NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk
NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFknTQbwlqa0oJQ5QukjwaHd6/IPRPIH5UICK22ZgR+/8KaPJkRjOzXB
LlhNW5plzFVU+9SD6pSDg0Ja/Y4yDYZCT4iEtrK4j+wrqIika+fIuUGE4dgmlUFV
2YcaW8JP3L0mgsPNG7r/uziQzSrb55Jwj9+0tpdAQ93aH2WycNcH0W6+GV//5KOW
shQOjuGBE/S16TgvI0u9A6x8EHBhm+4iqdMErNH0yNZX5gpg5Bt/sgpuVOQ2hs90
FJjetgccnaXw8mstgzeT03DMma4Lm1777TgyI8HC6qCAFc7YHVdwV3tdMP0UdJNh
awP3mS/Tpgkn95+q4a1s+6DiOdIRlVQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:52 2025 by rpki-client