Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0580b570-50c8-385c-b21b-a85bbf657294.roa
File: 0580b570-50c8-385c-b21b-a85bbf657294.roa (raw, json)
Hash identifier: fL7ZKDkhtKjRtnY94TOQDcKxM+2NrRmFCwPNVvfXA1Y=
Subject key identifier: CA:16:56:C7:B5:84:FC:2A:37:ED:28:B9:0D:56:F6:65:27:B8:12:D4
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819CDB30D2E33BF1616A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0580b570-50c8-385c-b21b-a85bbf657294.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9c:db:30:d2:e3:3b:f1:61:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f8e576d0-47a1-4c2d-8e68-a36eea4960c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8a:ee:dd:bd:55:34:3b:b8:d3:2d:31:70:1f:
bb:4c:ca:00:97:6a:ff:c0:5e:f4:40:e3:59:9d:3c:
55:d4:bb:4c:0d:64:80:d8:f5:19:f0:77:ea:da:62:
82:5f:9e:ac:0e:6f:76:c5:25:ef:85:20:b1:e0:3c:
e5:da:fd:10:54:79:1b:e7:3a:1f:92:b6:e3:89:39:
87:9a:9a:73:01:2d:5a:20:ac:e7:bf:29:bb:d7:aa:
a3:cd:08:14:3b:99:20:65:d1:ec:fe:fd:6a:94:1f:
08:6b:4e:16:25:d3:30:82:33:4f:bc:e6:ab:7b:53:
df:dc:b9:1a:b4:6f:04:5f:71:3d:a4:44:19:4e:85:
ef:bd:08:c4:10:7e:e6:94:bc:e5:a3:4e:51:46:51:
64:f8:22:72:38:9e:07:94:0c:0a:c8:62:4c:ad:d8:
28:8b:c8:f4:2b:0b:88:41:a2:42:45:9b:b5:60:81:
ac:07:a4:f0:c2:91:a9:46:2d:71:ef:ed:66:c7:33:
7b:84:8a:2d:a1:89:96:5a:d2:3c:84:c1:c3:72:2f:
5e:98:38:e2:c5:91:a3:47:d6:db:cb:f2:5e:b8:a4:
d2:f9:f9:28:c8:b1:cd:ce:fa:8c:f0:de:42:a7:ab:
99:26:2b:07:f3:28:ce:7a:4c:1a:54:da:9a:84:38:
1b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:56:C7:B5:84:FC:2A:37:ED:28:B9:0D:56:F6:65:27:B8:12:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0580b570-50c8-385c-b21b-a85bbf657294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5a:3a:73:94:41:de:b6:0e:f5:81:25:8c:f6:81:78:e1:4e:
b4:7d:1b:e7:3c:15:0b:2f:f1:e6:6a:1d:9a:ce:39:c1:2a:c0:
f5:96:40:ad:6a:92:49:c4:0c:1c:86:96:5e:0f:12:93:a4:2d:
2a:18:79:fb:07:69:68:df:e3:1a:91:6a:49:03:83:10:05:a8:
45:66:cf:bd:ca:3c:4e:c9:89:74:e9:b2:d5:e4:bf:d1:3a:62:
bd:04:ae:5a:76:25:44:ec:4b:1e:da:ed:b4:7d:99:93:74:99:
7a:22:b7:51:0f:b9:c0:8d:82:68:6c:90:ea:9e:54:59:48:c8:
6b:2c:d2:20:cd:10:04:7e:8f:f9:2f:96:25:60:a8:13:52:b9:
a5:38:90:ee:ad:e9:17:81:9d:56:12:0d:4d:b7:67:a2:f6:c0:
32:89:94:b7:cb:63:ab:0a:18:31:48:9a:bc:02:f8:3a:d9:02:
88:65:fd:37:6b:bd:c7:d1:b8:67:f1:f1:bc:d8:26:e3:6b:e3:
44:09:1c:57:9d:08:e3:bd:c8:e2:f3:8f:12:ac:7c:80:60:94:
6b:99:f0:66:e0:3d:21:c6:31:eb:c1:28:79:fc:64:20:67:c6:
b2:38:91:4e:48:5f:df:39:02:2d:77:de:ae:a3:d7:ba:fd:99:
e3:00:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:44 2025 by rpki-client