Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa
File: 01e7d16f-57a2-3f71-971c-f65c585d1093.roa (raw, json)
Hash identifier: cdfMRWACBzLE64I70IbZmNNCuIXH+7ZAKj9sK/+Ufzg=
Subject key identifier: 26:A8:52:0C:17:76:A7:30:3A:31:B0:30:B6:E7:AB:00:0D:9B:FC:18
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D532E4B63EE584E18580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d5:32:e4:b6:3e:e5:84:e1:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a0301962-8077-4247-9630-207b633b4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:6d:13:09:ec:cf:fe:54:b1:a1:6a:fc:78:
80:15:ab:ee:1b:e3:14:21:17:38:f8:02:c3:b3:86:
e8:fa:f8:f0:76:e7:7d:68:13:0c:c7:f2:c7:d6:93:
99:7c:d3:9c:61:65:33:01:6c:5f:c1:9c:b9:8c:c5:
93:e7:9e:9b:ea:7d:1a:79:dd:5e:22:c7:88:b9:3b:
de:3c:64:8c:28:5a:0c:57:55:44:79:59:6a:60:d2:
34:b0:52:43:fe:8a:67:9c:d6:52:33:15:b0:bb:3d:
ac:c8:d0:ff:c2:48:49:14:6c:89:d8:0b:2e:94:7a:
6a:23:c0:e2:73:5b:6b:e3:24:1a:4e:90:cf:9f:9e:
8d:e0:8a:14:a1:88:08:12:52:f5:6e:d6:79:b7:a8:
17:73:97:a1:87:41:ca:65:8e:5d:80:05:7a:c9:20:
16:f3:50:71:e3:93:33:56:08:df:13:e6:01:4e:5d:
14:ff:e7:8d:be:e3:35:e3:6c:12:6d:dc:1f:97:d1:
8d:56:6e:e8:2a:dc:28:3d:7c:a1:bb:75:15:5c:29:
ab:f6:66:c8:12:ed:a6:63:77:42:a7:6a:b6:fc:9f:
7b:a0:5c:c6:03:a8:a0:10:62:99:67:f4:d4:c6:28:
a4:3e:31:82:4e:cc:1e:90:81:b9:fe:50:5e:23:1a:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A8:52:0C:17:76:A7:30:3A:31:B0:30:B6:E7:AB:00:0D:9B:FC:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:11:8c:8d:f5:ff:c3:af:b1:c9:69:ef:5b:ee:b0:33:9d:ad:
1f:a5:fe:99:a5:71:57:6c:1a:bb:49:eb:ab:85:c5:3a:4a:80:
ae:af:6b:3f:9a:32:f4:ac:8b:b9:49:57:ca:57:d6:9d:9c:55:
1e:97:16:ef:26:d0:8f:0f:79:7d:b4:fb:03:9e:de:7f:51:7c:
f4:33:ef:d5:a8:cc:eb:65:1f:bd:17:fe:94:8e:d1:7f:50:df:
f5:1a:28:ab:4f:75:46:1c:52:57:d4:07:bf:96:91:4b:7c:8f:
23:7b:ef:80:f4:f7:97:f6:92:97:b7:32:10:19:8e:f0:d3:51:
29:93:40:8c:0d:90:c5:76:87:22:35:d9:38:f4:09:22:85:7e:
01:89:a1:be:08:30:01:58:50:42:08:a2:06:4d:85:c7:eb:30:
37:7b:d1:1c:28:a1:04:3b:3b:54:44:a0:a2:34:73:13:bf:3f:
0b:b2:3e:e4:aa:47:1c:f3:cf:aa:e0:1a:1c:4a:05:57:bc:59:
88:06:1a:85:a3:3d:ad:51:0b:cd:73:10:ea:44:b4:1e:70:ce:
bb:34:11:5b:07:54:03:44:cd:37:66:49:06:86:b9:ce:f9:ea:
98:e1:1e:09:3b:78:f7:d7:c7:25:96:61:27:d6:0b:e5:99:2a:
a9:9c:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:37 2025 by rpki-client