Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa
File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json)
Hash identifier: /uJTp1UeMU8M0AcgJzpkBzBq+DG5CXoSa2Gjl7DGYN8=
Subject key identifier: 52:44:6A:76:A2:C0:67:6F:B0:48:20:F5:32:A1:59:D8:CB:5C:70:9A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810B99C2C3F225D9605A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0b:99:c2:c3:f2:25:d9:60:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=23db715d-4df0-4b3d-8c23-80e19a965db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:80:da:76:e9:f0:ad:b5:ea:3b:75:de:c7:
21:c4:09:4c:24:06:8a:0f:79:ec:df:6a:48:56:32:
c6:a9:22:a1:ea:cc:30:80:d7:37:9e:ca:17:f8:ca:
be:aa:98:a2:9c:b5:e8:4d:18:d2:03:a0:de:ba:81:
88:83:a7:eb:b7:ac:c9:ad:0a:cb:e4:83:f7:6a:06:
6e:21:ce:2a:1d:c2:0c:67:f1:0f:59:23:30:e6:a3:
97:66:c3:a9:84:a5:aa:9f:bb:42:90:d1:b6:7c:25:
5a:67:c3:f2:c6:2b:28:d0:51:3d:fe:e3:1f:97:60:
64:95:04:14:51:79:97:97:4e:5d:9f:91:50:24:ff:
03:db:24:45:6b:d7:e8:c3:f9:c9:78:8b:76:cb:40:
1d:d6:30:79:03:ca:4a:44:a9:0a:99:b7:85:a4:db:
8b:1c:99:d1:58:97:58:88:2e:de:64:b9:3a:a7:a1:
7a:9f:08:ce:3b:13:bb:bb:ed:33:6b:00:96:64:51:
68:44:ed:78:91:77:f5:53:26:ba:59:27:a4:85:3d:
63:36:a8:83:bb:a5:21:ac:35:64:fd:11:f7:ef:d4:
8b:f5:46:aa:62:a8:04:a8:d0:96:ce:6f:5b:1a:a2:
4c:43:04:e0:1f:31:9a:63:7d:06:af:9c:27:5e:b3:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:6A:76:A2:C0:67:6F:B0:48:20:F5:32:A1:59:D8:CB:5C:70:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:bc:9e:1a:be:d5:f7:4e:b5:f2:09:32:53:79:81:b6:a4:eb:
c9:fd:d8:0b:ef:9f:4e:9d:f3:b9:67:35:74:5d:90:0c:51:19:
4c:b9:55:2f:74:21:8f:10:10:56:59:5e:5c:a4:12:be:c0:54:
29:8b:de:56:35:c5:30:db:8a:03:d5:5e:06:71:d1:80:a8:e0:
5f:5d:f2:24:51:03:f0:b9:5a:10:89:e8:79:24:e1:65:3f:ea:
51:4f:92:94:c6:a7:60:1a:e9:f6:d5:2a:f1:a4:84:a3:a1:75:
5d:91:fa:2e:11:73:2f:fd:7d:a8:5b:e6:55:4d:60:d4:c6:a7:
62:56:fc:9e:f7:6b:9f:d1:25:f9:10:24:79:67:99:93:92:01:
db:3e:fb:ec:40:1e:da:df:68:a2:db:b6:f6:a3:12:22:3c:06:
cf:43:67:69:0b:08:b3:a1:f5:d9:2b:f1:28:2d:97:49:88:cf:
4f:9c:83:2b:44:c8:4e:b8:d4:7f:a5:82:5e:10:4c:e3:a2:cd:
4f:47:d7:ef:5d:00:05:2c:01:a3:eb:47:60:5d:91:ec:69:5d:
c2:90:2a:7c:ca:b3:85:02:55:0e:ca:a9:e1:7f:ad:3c:2a:3f:
33:b2:b7:10:58:9d:6d:06:ca:d5:b6:f7:1a:cf:06:a9:94:d5:
9a:4f:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:30 2025 by rpki-client