Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26241ebc-0030-3339-8623-18cb1470b4a2.roa
File: 26241ebc-0030-3339-8623-18cb1470b4a2.roa (raw, json)
Hash identifier: AxtFiuKJy+zpEAIZTEXlBG+WOpUM8qPtZXtQiUBuuQE=
Subject key identifier: DB:29:DC:BF:2F:6F:81:6C:A6:EE:F9:88:81:0E:57:7F:59:B6:3C:AC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E0AC8B7140117A0E2A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26241ebc-0030-3339-8623-18cb1470b4a2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e0:ac:8b:71:40:11:7a:0e:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4ef5ea74-f430-4d30-b861-6fcf3970ef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:5a:c8:c6:0b:a3:68:34:7e:cb:c4:94:95:
50:0a:52:80:7f:b7:eb:ed:c5:bc:5d:e4:b3:25:47:
d4:ca:e3:fa:3e:24:09:dc:ff:e7:28:64:5f:30:46:
33:7a:75:20:0c:44:8b:5f:05:49:c6:6f:5a:0a:98:
ab:34:af:48:d3:72:84:18:dd:5b:23:42:2b:f1:c5:
5d:d3:83:77:67:e3:96:c0:1a:ca:45:6f:3d:6f:a0:
f8:ab:d7:eb:b7:ee:f5:b5:a6:38:b6:8b:98:1d:2b:
20:fa:16:10:e7:61:0f:7d:aa:82:a2:f5:94:3b:5e:
7c:e1:4c:59:29:31:fc:77:11:6b:fd:ad:26:73:b7:
6f:49:3e:9c:21:18:d2:2e:32:92:51:f5:91:7b:bc:
cf:ae:19:d5:eb:92:7b:12:be:93:cf:15:ee:0d:74:
21:c2:2a:e4:4b:e9:a1:fb:65:2f:b2:c0:e6:dc:f7:
26:00:54:23:71:3b:23:f8:f6:df:f1:95:d3:12:49:
d7:4d:d3:da:99:44:68:37:3a:8d:23:1f:28:ff:c9:
c2:d2:fb:81:5f:74:1f:1e:94:e1:f5:65:4a:ef:0d:
2d:67:6c:ad:4c:d9:e1:96:c9:e0:6b:9e:a8:cf:a1:
b0:38:d1:0c:07:2c:3d:6f:34:88:48:58:cd:25:4e:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:DC:BF:2F:6F:81:6C:A6:EE:F9:88:81:0E:57:7F:59:B6:3C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/26241ebc-0030-3339-8623-18cb1470b4a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:6f:f4:e3:2c:f9:7d:fc:fc:6e:44:20:81:6e:b7:3d:31:d6:
f1:a0:40:23:5d:1e:2a:cd:3f:31:b0:c9:e5:5b:c4:0d:35:b2:
df:b2:ae:eb:8a:e7:1b:aa:90:f9:f6:6f:1d:70:2c:ae:9f:ef:
e7:60:1b:8c:a1:eb:d2:1a:68:70:d7:ed:6b:b7:56:4f:78:37:
37:b3:c7:07:ef:bd:9e:b3:46:83:5d:05:61:cd:5a:43:1a:60:
42:91:dd:a7:0d:59:37:c0:21:71:4d:20:5a:3a:19:bd:6a:4a:
39:07:60:88:59:9e:92:29:5e:68:79:ba:e9:a5:1f:d2:b4:44:
03:29:28:17:f5:69:84:8b:6e:c5:2d:26:fc:2e:63:09:8e:ce:
0a:0b:87:43:64:c4:e9:e7:a4:f2:e3:49:73:fa:5e:f3:d9:0e:
28:f9:31:58:26:42:c1:a8:7b:f8:70:a7:a1:e8:7f:04:17:f3:
29:6a:ef:d8:9e:43:c1:1b:59:95:a5:b5:ec:b7:ef:45:da:25:
e7:7c:7c:4b:9e:d7:24:7e:ce:6d:10:4e:9e:1a:38:fe:f4:ab:
90:4f:08:6c:19:6a:b2:6e:e5:e0:cd:37:7c:2d:4d:90:87:4d:
65:73:41:a7:21:90:8d:5d:b6:f3:aa:84:87:75:1e:e1:85:a9:
83:d7:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:45 2025 by rpki-client