Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2094a100-2c41-3def-ac68-fefe21ddf026.roa
File: 2094a100-2c41-3def-ac68-fefe21ddf026.roa (raw, json)
Hash identifier: RAJlOTf6B0rySKSpnuP4Zh73l4B6qix3o/SRvO4cZ8o=
Subject key identifier: 37:1D:79:36:8E:B0:9E:A8:CF:E1:B4:59:4C:FC:FC:99:BC:21:73:BD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810A19FC8120326F92C080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2094a100-2c41-3def-ac68-fefe21ddf026.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0a:19:fc:81:20:32:6f:92:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=345d3251-638f-4458-a256-3c6d7f02b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:07:bb:60:90:94:08:08:f6:64:b6:df:4f:aa:
12:1b:ea:53:6d:8e:44:30:a5:a4:0a:32:ab:e0:85:
ad:1a:52:f1:ef:78:d4:d0:31:71:46:a5:ed:25:3f:
a6:39:d9:d5:e9:c9:eb:63:74:76:c8:87:21:ec:33:
de:8a:a0:bc:fc:c9:54:1b:fc:2c:13:79:c6:8f:2d:
f1:4d:08:26:eb:fd:37:88:c4:7c:6c:8a:e6:c1:94:
f5:0e:34:17:a4:3d:6f:14:97:f3:f9:60:eb:b8:22:
07:33:5f:eb:59:ff:d2:46:2f:29:3b:10:51:a8:aa:
9d:c9:50:dc:bb:8e:3e:25:23:19:02:c6:5c:38:13:
bd:14:65:5b:96:e4:24:44:15:94:ef:f7:07:58:5f:
99:ad:62:a5:7e:a7:5c:28:e7:68:87:56:c1:59:ac:
6a:b7:98:61:95:f7:aa:32:a0:9e:95:59:f9:85:28:
c8:ff:ae:ad:12:34:36:df:10:22:8d:7a:27:82:46:
ba:21:80:7a:a1:0e:47:e0:82:fb:95:00:79:be:b0:
1a:3a:ae:08:09:5d:b2:f4:df:65:0b:c5:6d:ab:fd:
47:75:74:bd:32:b0:02:9b:7a:a1:4c:3e:6f:d0:7f:
90:04:12:a2:93:ee:74:c6:eb:1c:a8:99:4f:a2:9a:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1D:79:36:8E:B0:9E:A8:CF:E1:B4:59:4C:FC:FC:99:BC:21:73:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2094a100-2c41-3def-ac68-fefe21ddf026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ff:ba:2a:f5:02:8c:46:36:f2:17:01:d9:67:64:26:a8:f4:
40:e8:d7:d8:d7:b8:f9:7f:bf:b3:4a:bf:0f:9f:26:b7:ce:dd:
d9:a6:12:c3:98:5e:5b:a3:79:de:37:c9:6a:20:4f:a0:27:44:
61:b1:a1:32:08:84:41:71:28:fd:2d:57:e9:3f:34:ac:5b:bd:
98:bb:e9:9e:47:2b:cd:88:57:9d:21:90:5c:f2:50:60:31:da:
ea:52:d7:e9:5a:8d:4c:b3:7f:45:93:c2:e9:c1:f4:8b:4b:19:
71:83:9f:fd:a4:a5:de:48:9d:eb:88:0b:1a:42:d0:58:30:97:
54:e7:c5:c3:6b:78:5f:95:16:0f:75:60:05:32:a0:11:17:e7:
4b:dd:7e:e7:6f:4c:ef:9c:4f:20:f6:15:18:58:5a:62:f3:da:
f3:0e:b1:d7:b6:ec:67:a6:89:0d:27:d4:6e:16:09:71:e4:b5:
9d:5f:e6:35:dd:ed:94:4f:38:e2:a8:42:af:35:49:ed:a1:60:
47:42:b8:74:94:14:55:29:7f:02:48:2a:1d:50:d5:9b:18:bc:
d7:e8:82:2c:06:0f:3b:7d:62:41:aa:93:3f:ff:e0:64:6e:0a:
a6:62:fc:73:bf:cc:15:5a:94:45:04:e3:c0:49:3d:c2:59:b4:
89:8e:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:30 2025 by rpki-client