Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18e8f7d7-db53-305b-851a-464701dfeb26.roa
File: 18e8f7d7-db53-305b-851a-464701dfeb26.roa (raw, json)
Hash identifier: tpmXztYC2PS0lz7WkL0WiAMorh36RjGAD5ON2kxrukc=
Subject key identifier: 72:2C:A9:D5:BE:04:37:EB:CE:07:B2:92:6D:2E:9D:3D:7F:5C:25:77
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58143A83E1DB735DA615E90
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18e8f7d7-db53-305b-851a-464701dfeb26.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:43:a8:3e:1d:b7:35:da:61:5e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=761488e1-7837-4ded-8a75-85ea2bea4364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:fd:8c:cc:a7:4a:7a:49:ef:77:85:5a:49:
94:e7:c8:db:32:8c:e6:a0:de:f5:f6:30:52:67:8b:
ed:0d:78:bf:47:3a:4d:43:40:86:f0:81:69:b8:40:
21:3f:bb:40:26:d4:6b:39:60:a1:12:d2:19:f4:6c:
c4:81:a5:77:fd:b3:8d:ae:ff:f1:5d:ba:ab:de:45:
77:e9:81:ed:47:ed:3e:7a:3a:51:86:53:1c:5a:4f:
56:c9:e7:a7:2f:a7:f5:74:cd:f1:3d:c4:6f:13:56:
ef:c9:91:10:d6:c1:f3:85:55:84:60:dd:51:5d:1b:
1f:a5:db:82:62:4f:08:3f:ea:e5:60:b5:b5:13:af:
a9:ac:d5:24:fc:ae:fe:e6:85:0a:d2:24:7a:3f:36:
82:e9:74:5a:57:04:33:15:4a:e6:5a:d0:41:fc:31:
eb:7d:8c:ca:d7:e0:26:7e:fc:3c:23:39:a2:30:38:
a3:4c:fa:32:9c:b3:da:2a:0e:7e:ac:c9:b8:0d:fa:
e9:4a:1d:52:f4:08:8c:55:f4:d6:e8:3a:68:56:7b:
88:93:c6:91:95:f6:f2:85:fc:6f:ea:94:d6:3d:38:
8e:11:4b:32:71:33:c2:61:d8:02:e9:cc:55:54:bb:
5e:c7:f5:3b:02:3c:79:cf:7c:f2:b7:e4:bc:50:d5:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:A9:D5:BE:04:37:EB:CE:07:B2:92:6D:2E:9D:3D:7F:5C:25:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18e8f7d7-db53-305b-851a-464701dfeb26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3a:80:a9:16:fd:03:83:31:fb:49:23:80:08:5a:7f:11:ef:
7f:04:33:d7:ca:9b:c2:2d:0f:ba:0f:ff:ae:7c:d9:9b:65:f6:
41:2e:e4:0f:26:23:c4:2b:2b:ef:c5:2a:df:fa:d6:d4:d6:c6:
83:59:a3:55:ff:61:d3:0d:a9:89:f9:e1:dc:6a:18:0d:94:a8:
f6:62:4d:13:ff:0e:38:b1:38:ac:e2:78:28:bc:d5:46:e3:29:
82:8f:11:08:96:6f:91:3f:3f:66:6b:e2:8d:34:01:58:d5:7e:
04:04:f5:09:55:e3:93:e6:fb:6a:1e:c6:ee:f7:5d:67:3c:7c:
19:e9:9d:bf:62:28:0d:96:ad:27:89:97:44:1c:04:cc:59:05:
21:64:8c:07:5b:0b:fa:94:67:6b:31:38:69:79:a3:5a:4f:b3:
d7:a0:eb:9d:9a:59:0e:5d:20:8f:39:ea:1d:90:5d:2a:9e:a9:
e4:8a:8e:51:8d:a5:03:8f:cf:5a:f6:36:4b:fd:d4:ca:1a:01:
13:c7:f9:88:0d:8f:78:cb:b8:86:62:9b:e9:04:14:fc:4c:8c:
35:ec:75:e4:0f:00:55:34:c6:37:d4:d0:4a:54:c2:93:31:39:
2b:8d:64:1a:6c:9f:f1:3c:3a:79:48:8b:02:d7:a5:b9:4b:b0:
99:0f:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:48 2025 by rpki-client