Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa
File: 138e208c-b64d-35dc-82cf-e05f0cba2043.roa (raw, json)
Hash identifier: lkfUafkg5gk0+JCTgT8kIN1CZE21otIvUqyHtRRZ7Jg=
Subject key identifier: 51:7D:B1:D5:9B:2D:1B:E3:7E:0E:94:7F:56:2C:D0:F2:B1:FA:48:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814C8E319CAC02A4C7CA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:4c:8e:31:9c:ac:02:a4:c7:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=cc3aa339-e7c6-4423-b994-8e419979a692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:29:9a:0c:83:6a:d6:6a:21:b0:57:c4:6d:
bd:41:d9:7a:27:32:99:ed:d0:eb:d6:41:10:db:c6:
47:ca:d2:a7:2a:3b:94:d2:60:ba:9a:e8:12:51:b9:
89:95:d1:d6:40:8e:d7:41:a2:7c:ee:b8:90:eb:fe:
55:1f:d8:ab:e1:5d:97:ad:3d:ab:95:67:21:a9:91:
3b:de:9d:2a:a8:5b:ab:1c:13:49:c2:cd:f9:bc:93:
40:95:6c:82:b6:09:f0:17:4b:a7:ed:f8:84:ec:3e:
2d:56:62:5e:97:e4:87:09:f7:2d:39:83:26:11:93:
d3:a5:10:3e:94:d9:83:48:8f:c0:14:48:25:e6:8a:
10:27:a2:b6:0f:05:9a:70:de:99:fe:43:33:2c:28:
05:ce:56:fa:d8:7f:2e:bd:3b:ab:c5:ba:7f:fe:81:
db:9a:af:4d:c0:cf:f2:11:60:64:24:e5:2c:c6:88:
32:18:8e:85:8f:fa:6e:18:25:66:72:9b:8f:64:02:
a6:bf:a0:bf:17:a6:34:c1:41:82:15:3f:64:42:90:
8e:8b:37:b6:f8:f7:32:f7:69:77:26:2c:d8:db:75:
ce:f0:e6:dc:06:89:b6:b8:8f:c3:4f:92:c0:bf:39:
2b:e9:ee:a0:f6:ab:8f:44:39:38:66:b4:82:82:a7:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:B1:D5:9B:2D:1B:E3:7E:0E:94:7F:56:2C:D0:F2:B1:FA:48:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:94:c6:a1:af:87:83:34:e0:08:7c:9c:37:fb:95:de:9c:c2:
61:b0:eb:56:66:5c:cb:5b:16:32:2a:cf:4c:57:82:38:02:70:
9a:a6:c8:6d:b6:ca:52:ea:cb:d2:85:18:fc:15:be:df:4f:f7:
4c:86:92:9b:1f:a9:ad:ff:cf:05:4c:a2:9d:97:03:4d:be:32:
5c:09:af:95:65:41:e6:7f:e3:d8:fe:95:74:c9:6e:b4:b4:98:
c4:51:ee:e9:0d:e6:2f:8a:2b:9e:d3:4e:a6:23:e5:76:99:bc:
2d:dc:09:a1:e4:bb:fc:01:34:53:ef:a2:af:51:7c:54:c3:57:
1d:47:08:c2:b9:f3:f4:92:46:9b:b4:54:3e:cf:90:21:86:ac:
a4:c8:d4:84:f7:49:aa:bb:4e:99:19:f6:3a:d3:29:29:f2:fa:
51:3c:e4:39:84:fe:71:82:92:ab:52:13:b5:38:6a:75:7f:23:
03:f2:fc:01:43:34:23:c2:fa:32:12:a8:12:ac:f3:9a:71:88:
2e:36:fa:e7:04:e7:1a:49:f5:10:c4:48:97:bc:d4:85:a4:12:
01:aa:ec:93:ff:58:8b:41:27:d1:70:73:db:ea:1d:0f:1b:9b:
80:4f:8a:ec:26:3d:72:af:dc:0e:f2:24:b8:07:4f:78:49:07:
ab:a8:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:31 2025 by rpki-client