Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa
File: 0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa (raw, json)
Hash identifier: QFJAZn6lMPH6klQShsFffZbbC20DNufyTm+gV+Oh66M=
Subject key identifier: 4F:44:EE:E7:5F:61:26:38:83:C0:6F:83:54:F3:66:81:6C:96:08:AC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D989A3430A7C0AEC7AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d9:89:a3:43:0a:7c:0a:ec:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9b9b63aa-43c6-4bd3-a681-29638c46ffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:3d:e3:ce:b7:34:86:84:41:25:8d:86:a6:
52:01:9e:68:6d:10:47:64:42:dc:fd:d1:9a:87:c8:
8f:33:09:5c:b4:3c:d0:6c:f3:0f:41:e8:8f:1a:52:
b5:b7:8f:5e:9b:8c:11:fe:4b:92:5b:d2:61:ed:79:
73:33:8d:83:43:0f:06:88:83:9c:f2:cb:66:af:01:
bf:07:e9:f9:e4:ea:39:a0:5e:39:cb:dc:ed:5d:9c:
8a:e3:ba:1f:20:c7:c4:11:50:b2:38:8e:bf:c3:2f:
5b:f7:f4:85:60:f2:a7:9f:80:ed:35:28:66:6f:b5:
c1:19:54:22:ad:f2:6a:5e:97:ac:df:36:d4:5b:0b:
44:f3:83:92:24:ee:ac:34:ba:c0:a2:92:2a:b7:51:
7a:c9:e8:a1:53:2b:ab:d5:da:e7:91:d3:e5:f5:f8:
9a:e7:6f:90:05:18:a0:ed:68:97:bc:04:99:e3:60:
0b:66:6a:d0:cc:2c:73:32:53:f6:a9:f2:a5:85:b1:
b8:18:a4:c0:29:54:34:6d:fa:7b:69:13:ad:18:70:
ab:cc:dc:6e:93:ff:99:7c:25:85:ae:4e:e7:e7:a1:
14:8d:e6:8f:95:e6:11:5d:fa:c8:10:0c:04:0a:ce:
fd:0f:f4:94:65:60:67:53:05:93:a4:90:4d:48:11:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:EE:E7:5F:61:26:38:83:C0:6F:83:54:F3:66:81:6C:96:08:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a8d551c-9b4e-3021-9c28-fa272cac9ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:4f:8e:8e:05:cb:f8:a5:5c:7a:14:55:42:b1:e0:b7:64:23:
a4:b8:c6:23:16:3c:41:ca:bd:4f:66:c2:64:82:28:ac:04:93:
5d:fd:64:f7:a7:23:d2:4e:7a:eb:72:b7:ed:37:cb:32:5d:85:
c1:06:ef:7e:3a:13:b3:33:3e:b4:41:92:95:96:32:c1:35:7f:
18:dc:ff:06:2e:bd:82:ce:80:db:07:97:59:6f:ac:ac:a8:4c:
a2:62:61:22:5c:55:42:e5:28:56:f6:14:9b:c7:e2:24:ee:6a:
fd:79:2d:3a:fd:d3:ca:6e:5a:ed:27:2d:d3:22:e2:0d:e3:a6:
bd:39:e6:80:f1:19:62:27:db:c4:71:98:39:ab:e3:42:03:1f:
08:ab:33:a7:7f:ea:8b:48:40:ca:91:8c:0b:d7:57:28:c5:d3:
1b:79:22:b4:64:21:28:7b:e7:62:68:46:07:ea:a9:c6:2f:51:
55:00:5b:6a:b9:ce:cc:2a:71:ee:5e:0a:21:51:17:98:bb:ac:
56:16:4a:5b:94:85:6b:80:52:dd:18:5d:85:68:7d:aa:d0:d7:
55:f3:d9:5d:eb:6f:69:4a:a6:8b:a8:3a:32:91:e4:02:1d:02:
f8:b6:59:58:c2:7a:56:dc:c2:52:e3:29:6e:06:ff:7d:11:d9:
fb:9a:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:57 2025 by rpki-client