Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
File: 25ffd5c2-35f4-3ecb-9557-6964354a7797.roa (raw, json)
Hash identifier: 46OPaYOvBLtuzTHy9QtXzfWO2+rcH0T4gJfJxGreH6E=
Subject key identifier: 0B:9D:62:AE:77:CA:D2:BE:5E:70:AD:E9:49:11:19:52:AB:0F:86:84
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58112093B3628C2C389FB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:12:09:3b:36:28:c2:c3:89:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c69cecfc-ab90-4875-9ee4-697f9cc0860b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:04:0f:50:3c:fb:59:81:0c:95:0c:69:4d:
6c:bb:3f:50:89:86:76:5a:ac:8a:38:0a:5e:2c:4c:
e0:53:48:de:f8:ce:6e:4d:b3:e2:6e:bd:5c:d3:de:
a8:ee:32:fa:81:2f:21:0b:fe:af:e1:23:37:0b:11:
a8:7f:fa:86:09:d1:d0:69:1b:2b:0b:93:7a:1e:07:
53:36:e5:74:43:95:ef:bc:d9:ef:1d:cd:83:87:34:
66:27:de:1d:03:d2:11:d8:d7:a6:6a:3c:e1:a4:2e:
0c:41:cb:e9:b9:ea:d5:ba:18:00:b0:36:dc:e7:a8:
0b:bb:22:28:e3:b6:e8:39:d8:09:15:b6:cc:aa:2b:
e1:24:95:cd:7e:94:7f:45:43:11:1e:96:ec:a8:ee:
bb:e9:c9:24:b2:a9:6e:51:73:e4:d8:eb:8c:16:a2:
0a:74:0b:c3:0e:cf:9d:a4:03:a6:70:a9:92:e5:7a:
46:cb:b9:24:0a:94:fc:d9:13:14:cd:67:93:59:4a:
30:01:0d:76:51:0c:06:77:cf:99:bb:ad:c2:9f:1d:
68:17:5d:14:69:a1:14:46:2c:db:74:c4:21:3c:95:
8f:2c:22:f4:aa:ff:a5:1e:13:6a:a0:0f:63:78:d7:
77:ab:53:39:95:17:88:c8:cd:9c:50:9e:2f:78:07:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:62:AE:77:CA:D2:BE:5E:70:AD:E9:49:11:19:52:AB:0F:86:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:65:a6:a2:e5:08:c7:5f:19:3c:36:77:52:93:fe:10:14:db:
b9:b9:41:4d:72:00:51:1b:27:65:b4:b4:77:69:83:9b:26:e1:
1a:0a:b5:e5:cf:d5:a4:41:a0:b2:61:25:5a:8c:7a:cf:7b:03:
9e:97:9b:f8:9e:18:01:49:62:45:fd:1d:f8:5e:75:ac:d2:ea:
1a:fb:ce:25:43:73:99:ee:07:22:2d:af:6e:25:0e:83:cb:fa:
1c:57:16:82:f6:6d:75:c2:0b:bc:24:d0:f9:eb:32:47:e0:b7:
d5:41:69:6a:63:3a:52:72:dc:61:04:d7:b9:22:7d:28:a3:9f:
f6:ee:ff:6f:ea:e4:f0:c4:b8:37:58:8c:dc:03:d0:11:55:57:
a4:ee:5f:00:2c:9b:00:6c:43:27:82:a2:f1:96:fe:8a:8c:80:
5a:62:64:90:8f:e0:ae:b6:a2:61:8d:5f:17:65:bf:8f:07:c1:
99:57:64:0d:de:74:70:9e:80:7b:3d:78:1c:81:7d:2f:b5:50:
2f:17:86:81:92:7e:b9:3a:58:49:7b:6e:fc:f8:83:9b:cc:9d:
1c:d8:fe:c1:60:ea:58:f0:6a:34:6b:51:37:43:59:50:12:c2:
25:f4:e1:71:68:0f:9d:33:e8:7d:ac:e8:c8:0b:ac:36:62:54:
e3:78:cf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:58 2025 by rpki-client