Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
File: 0272f9e1-576e-3684-8d67-64211f32881e.roa (raw, json)
Hash identifier: srd2ggTO0puhz1e2PxRpA5aeKmgHZWPK9c7bXpGeDmM=
Subject key identifier: 80:DB:23:E9:62:16:24:40:83:A0:22:85:05:CA:D7:18:71:19:FD:60
Certificate issuer: /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial: 010D0C9F43285848A29B5628377DD18E20158000
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 398324
IP address blocks: 66.132.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:56:28:37:7d:d1:8e:20:15:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=e626c711-2cda-4dee-9504-8d4c47fa2adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:da:43:9d:f1:11:16:98:bb:8c:d8:94:c2:
1a:62:89:26:b1:c2:7d:00:06:f0:75:04:0e:7e:84:
c7:b5:61:e3:bd:91:4a:57:c0:3e:3e:b8:85:c1:72:
e4:09:ce:ad:c3:e8:45:d4:f5:7f:f9:ce:e6:d0:5e:
ea:b0:54:f9:1f:4e:a8:ba:fd:c0:23:ce:ae:5f:a7:
8a:ae:18:44:45:c4:5d:a5:30:4c:b5:dd:58:61:94:
ce:8c:15:6d:4b:e3:72:ac:38:bf:45:47:2e:bd:b8:
8e:1c:3e:71:40:2e:16:04:c9:34:a0:eb:bc:56:14:
5d:ba:fa:14:05:2b:66:41:1c:d6:6c:28:83:42:89:
6e:58:3c:6b:2d:f3:ad:3d:b6:fb:02:76:70:8a:5d:
2f:cf:6d:43:0b:9a:e9:fd:73:7c:ae:16:3d:d2:75:
6a:89:4b:93:7b:20:4b:dc:6f:b5:28:70:97:38:eb:
61:bc:af:4e:fb:ea:c0:c9:8a:63:39:59:9c:cd:ae:
6f:e9:02:29:a7:07:54:f8:48:61:01:78:a5:cc:88:
82:9d:b5:c5:77:09:0f:f2:d5:17:4b:97:91:4e:94:
f4:b4:24:6b:a5:ad:81:b6:3f:f7:d6:00:89:70:b3:
b6:c6:96:4c:17:b2:af:73:cb:70:a3:b6:fa:f3:d1:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:23:E9:62:16:24:40:83:A0:22:85:05:CA:D7:18:71:19:FD:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/0272f9e1-576e-3684-8d67-64211f32881e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
X509v3 Authority Key Identifier:
keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:2a:2e:a6:33:e9:8d:d4:dd:7a:6d:bf:73:77:f9:80:5d:f4:
e7:19:ee:c7:fe:4f:15:53:af:a8:fb:ec:66:cc:9d:4c:43:ca:
bc:62:ca:d1:81:37:c9:37:6b:f1:be:6f:8c:e5:82:d3:cb:93:
ae:4a:50:d3:b6:b5:8c:91:22:0d:72:6e:92:88:fb:af:a3:5d:
1d:96:03:83:39:c3:77:60:0d:42:5b:bf:a3:82:e3:b3:6b:c4:
31:5e:aa:d6:b8:d1:65:fb:13:28:65:9c:b6:bd:b0:87:72:89:
23:36:eb:85:44:4b:d7:4d:bc:40:0f:05:a1:27:22:71:9a:f9:
a2:f0:7c:8a:32:43:c1:c9:fe:11:07:69:c0:19:b8:c7:bf:16:
04:de:12:ee:a8:a9:ca:b5:d9:73:fb:45:d3:9f:45:d8:78:55:
6d:90:5d:f3:55:4c:ed:d9:9d:02:65:4b:60:6c:6d:b8:8c:e2:
a3:ad:35:79:4b:f8:30:2c:55:5a:47:b5:f6:56:da:50:a3:5a:
d7:e7:6c:37:9e:bc:05:a6:e1:c6:83:1a:bf:b6:16:c3:7b:45:
ae:81:a5:68:cd:91:a8:53:94:fc:17:a1:11:c9:10:f5:a4:ad:
bd:47:d8:55:f6:d3:39:0f:b2:74:cb:a6:06:0d:f9:2d:f8:6d:
40:ab:6a:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1YoN33RjiAVgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTYyNmM3MTEtMmNkYS00ZGVlLTk1MDQtOGQ0YzQ3ZmEyYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt/aQ53xERaYu4zYlMIaYokmscJ9AAbwdQQO
foTHtWHjvZFKV8A+PriFwXLkCc6tw+hF1PV/+c7m0F7qsFT5H06ouv3AI86uX6eK
rhhERcRdpTBMtd1YYZTOjBVtS+NyrDi/RUcuvbiOHD5xQC4WBMk0oOu8VhRduvoU
BStmQRzWbCiDQoluWDxrLfOtPbb7AnZwil0vz21DC5rp/XN8rhY90nVqiUuTeyBL
3G+1KHCXOOthvK9O++rAyYpjOVmcza5v6QIppwdU+EhhAXilzIiCnbXFdwkP8tUX
S5eRTpT0tCRrpa2Btj/31gCJcLO2xpZMF7Kvc8two7b689GwWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDbI+liFiRAg6AihQXK1xhxGf1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvMDI3MmY5ZTEtNTc2ZS0z
Njg0LThkNjctNjQyMTFmMzI4ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoSZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4qLqYz6Y3U3Xptv3N3+YBd9OcZ7sf+TxVTr6j77GbMnUxDyrxiytGB
N8k3a/G+b4zlgtPLk65KUNO2tYyRIg1ybpKI+6+jXR2WA4M5w3dgDUJbv6OC47Nr
xDFeqta40WX7EyhlnLa9sIdyiSM264VES9dNvEAPBaEnInGa+aLwfIoyQ8HJ/hEH
acAZuMe/FgTeEu6oqcq12XP7RdOfRdh4VW2QXfNVTO3ZnQJlS2BsbbiM4qOtNXlL
+DAsVVpHtfZW2lCjWtfnbDeevAWm4caDGr+2FsN7Ra6BpWjNkahTlPwXoRHJEPWk
rb1H2FX20zkPsnTLpgYN+S34bUCraqI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:09 2025 by rpki-client