Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa
File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json)
Hash identifier: pvj44O3vzwjiWb/OvV8U7b1k2qHAvia772VGPP7pEOQ=
Subject key identifier: E5:5D:82:86:4C:02:53:50:8B:B7:14:F1:F3:AB:49:C3:37:B1:6E:D8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581486FC56FDEA8E27C7CE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:48:6f:c5:6f:de:a8:e2:7c:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=df893b77-f1d6-46cd-ba71-4dcb8c21467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:0b:69:51:3f:00:a1:ab:cf:3c:11:6f:c7:
89:dc:a8:61:96:bb:55:00:2e:1b:09:e0:52:56:de:
3c:09:81:de:03:63:7f:e3:99:10:fe:22:68:a8:19:
45:02:bd:34:ae:18:41:a1:7b:01:eb:e1:d4:81:72:
39:38:5e:53:69:cc:f9:14:42:97:ff:26:4f:03:1f:
c0:bb:87:5a:bc:18:05:b9:33:2b:ac:46:67:97:1f:
e5:67:3b:34:c8:d9:de:78:ac:e5:de:1f:f1:ed:3f:
fc:12:eb:c6:34:7d:82:c3:19:71:93:f1:29:bd:f1:
7e:59:62:fb:4a:30:07:9b:5b:0f:d3:85:de:4a:2c:
9d:df:8f:42:ff:ba:bb:1f:d2:c2:63:6e:27:52:a2:
07:97:02:b0:a3:08:f5:5a:65:c2:88:d4:ab:99:35:
6d:81:40:99:46:9e:b2:7f:1b:b3:87:1d:54:91:03:
2c:37:7e:0a:88:eb:18:c6:97:fe:1c:86:cb:36:f3:
44:fd:66:ec:31:6f:2a:ba:63:24:aa:b2:ba:7b:01:
de:4b:a6:ba:fc:53:28:a0:40:3a:81:e7:27:3a:71:
12:a8:03:bf:3e:58:80:d9:9f:ed:e7:13:11:c4:95:
e8:6c:cb:4d:9d:c0:9e:71:35:70:f1:e1:3b:09:d4:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:82:86:4C:02:53:50:8B:B7:14:F1:F3:AB:49:C3:37:B1:6E:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:eb:ed:9e:05:b2:ca:02:e7:48:96:ed:c2:df:03:e8:47:d6:
7c:a8:0c:4a:7c:43:4a:17:cd:dc:6f:b8:84:fb:0f:57:34:a6:
aa:1d:e9:c6:dc:56:37:37:db:b4:70:cb:5f:db:7a:ab:ca:72:
70:2c:e3:79:5c:0b:8e:b3:9e:ab:6d:45:57:d8:c3:45:64:58:
16:a4:27:9f:20:91:73:62:08:87:54:df:2f:d7:0b:51:8c:2d:
76:32:af:0b:c5:40:d9:7c:de:04:c7:db:c4:13:ca:8b:9e:bc:
34:7f:d9:cc:f6:7b:2a:f3:ca:a6:44:bf:cb:41:56:8c:35:68:
11:09:d9:1f:01:36:10:cf:1a:cc:ec:e1:e1:5a:61:8e:c9:61:
b1:04:91:8c:e6:41:c7:98:8a:f3:01:dc:cf:a2:60:21:25:50:
64:01:da:d2:57:bf:51:58:81:60:34:b0:f5:52:bc:d2:77:25:
7a:a4:c7:d3:80:b1:18:be:56:19:82:a9:2b:4e:20:33:39:71:
1b:b9:9a:89:d2:b3:6d:a0:6b:6b:a9:77:11:93:1a:6b:1d:3a:
b3:c3:ce:e1:20:18:5a:d6:3e:b1:59:24:ad:b6:2a:44:cd:12:
19:47:ad:7f:5a:8a:19:20:06:00:4c:1b:58:44:22:4d:bf:41:
02:aa:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:27 2025 by rpki-client