Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa
File: 245c4e93-80b2-3747-ba45-f754ff2f763b.roa (raw, json)
Hash identifier: WhYUd3zI6kdVS+TL8x9YhKULXt9CqFEHvxGbgHc9jOk=
Subject key identifier: E7:FA:8E:68:65:56:79:17:CF:84:1B:A2:8C:D9:FA:E0:8B:6C:64:4A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819C6E344E1A0EF6EC3890
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9c:6e:34:4e:1a:0e:f6:ec:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f120ed69-a317-46c1-975c-96310c2b7cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:73:f1:fa:07:ae:c1:3e:10:b3:2f:97:4e:
17:21:55:83:ac:f1:c0:fc:6d:2f:c2:58:e7:3f:0d:
fc:96:8b:8c:f6:34:76:c9:e5:a6:d5:0a:20:8d:64:
68:1b:0a:8f:82:ff:2a:49:fd:db:8f:de:36:c0:26:
d3:25:0f:ad:cc:64:8d:80:ed:6d:c1:10:24:7e:5e:
f1:9a:21:90:3e:9f:34:58:f3:06:b4:49:f3:aa:d5:
f0:dc:b0:12:70:a7:17:60:41:97:d6:ea:44:07:cc:
73:bc:28:0e:da:c8:9f:c6:dd:e3:4b:7b:54:28:53:
19:a3:58:10:23:7a:5b:6f:51:c7:a4:a2:a7:3c:a8:
ed:c5:6f:70:49:d4:b1:0d:d3:16:6c:5d:71:97:09:
3a:da:d3:7b:63:75:23:32:12:6f:2c:95:a8:a1:7d:
51:69:47:e2:ec:2a:47:83:70:7a:dc:98:53:42:b6:
f0:42:3d:bc:56:a2:bb:e1:90:81:12:d0:97:4e:6f:
62:07:ec:ae:c2:f5:e9:e0:04:c8:57:97:9c:8e:46:
1e:48:a6:27:f7:e3:83:1f:98:b2:13:ca:dd:28:df:
c4:b5:99:6e:ff:87:d1:3d:e2:5c:cb:99:fb:cb:52:
d2:d1:73:a4:55:cf:d6:c9:9f:eb:6c:ca:ee:39:b8:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:8E:68:65:56:79:17:CF:84:1B:A2:8C:D9:FA:E0:8B:6C:64:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:37:b9:b8:91:ed:39:f0:8f:1c:b3:c6:7d:5c:2d:fe:ce:10:
b9:8b:b6:bf:1f:7d:ae:8d:cd:20:61:9e:3f:71:7a:24:bb:28:
60:d6:d8:04:6e:e7:52:9e:fb:3e:e0:77:74:7e:37:7a:41:d4:
c9:79:48:41:13:6a:1b:23:84:87:17:5f:92:ed:71:65:e1:62:
93:59:e9:77:9b:a8:fb:ed:0d:13:46:d0:83:75:86:ed:bf:6b:
d0:d1:0c:fa:c5:e0:84:68:62:7a:6e:64:bc:df:4e:7e:77:f2:
5a:1f:d8:b1:68:15:37:91:e0:82:d4:ef:cc:73:8e:2a:6c:38:
5c:db:a5:fe:5d:58:0e:a5:a5:1c:49:57:f1:4b:20:8c:bb:35:
17:93:65:ae:cf:bd:a2:f3:b4:a6:8c:4d:a8:1c:68:33:61:d0:
39:f7:37:f0:f1:0e:42:48:e9:c1:cf:9f:2c:cc:fc:bc:b2:1f:
0f:37:f3:6a:20:44:ff:ad:c8:f5:63:10:cf:2c:d4:4b:6d:a2:
28:6e:d9:8c:3a:11:31:5a:2d:39:2a:e6:4f:76:e8:84:d4:98:
88:38:ee:e8:f0:ca:83:50:01:4f:12:ff:68:b3:17:77:fa:eb:
bb:c6:81:12:44:02:d4:89:f0:10:81:54:63:9d:ed:26:cb:8c:
84:57:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:47 2025 by rpki-client