Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa
File: 29bb7170-7a90-39aa-ad83-71606197544b.roa (raw, json)
Hash identifier: GbaKx12gLR3Xbj876VjL92dVZUFKIrve8DG3iLvOuU0=
Subject key identifier: D5:1C:D8:C4:AE:36:52:A3:B0:E9:CC:D6:47:C3:E6:80:DF:1A:FD:F9
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58196A4ACCB6213A2829180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:96:a4:ac:cb:62:13:a2:82:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1a554ac5-70ae-46c2-a860-757376678e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:c6:e0:db:ae:4e:d8:fb:b1:6c:6e:6b:d4:
e9:9b:9a:45:d0:7e:1f:54:0d:34:8a:b0:21:ae:1d:
8e:9e:01:ae:c4:12:93:95:25:6d:06:eb:d7:50:54:
cf:66:7d:8b:df:7c:61:e1:bf:c5:c2:c8:a5:99:61:
e1:74:47:3f:e7:17:cf:aa:7c:54:8e:e4:e5:55:bf:
40:02:9c:22:37:e7:8c:3a:ae:40:9d:dd:fe:35:65:
a9:33:08:9b:6b:12:d7:86:a1:a9:be:dc:96:f9:10:
1d:d3:b1:50:ab:4f:4d:ae:46:26:be:f8:f4:6e:4e:
fd:d8:55:74:e8:21:58:c0:7b:d8:24:75:7b:ad:42:
05:d7:e3:5d:5a:32:26:83:81:9d:85:80:34:07:6f:
a0:1a:ae:78:5b:c7:f7:01:5c:be:d8:8a:5a:3c:18:
58:95:61:e1:0d:e6:1a:4a:69:04:cc:80:76:05:70:
27:d7:6a:be:48:88:e2:e6:51:ea:fd:a7:61:86:12:
85:a7:89:be:34:9f:79:78:e1:1a:d4:83:a0:04:ae:
90:78:9e:c7:0d:93:34:a7:96:cc:63:82:f9:8a:6c:
e4:61:34:40:f0:f9:f5:df:25:50:d2:c7:9c:a7:0d:
d0:ad:11:80:d2:28:95:85:0a:33:17:72:a0:d0:e8:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:D8:C4:AE:36:52:A3:B0:E9:CC:D6:47:C3:E6:80:DF:1A:FD:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:6e:dc:ce:6d:8c:ec:a3:bf:b9:30:a9:0c:7d:ce:5b:7e:6d:
25:8c:f1:eb:55:a7:2f:4c:d8:82:6d:e1:10:bb:2b:85:14:03:
ea:12:eb:55:63:aa:43:4b:da:71:7d:2e:a0:22:3f:54:ef:4e:
9d:65:d0:90:52:9c:9f:49:81:8d:89:0b:bf:27:d2:7c:bd:79:
c4:9b:8d:58:67:55:47:42:bd:3d:39:55:ba:46:1f:0d:8b:aa:
83:e4:6e:40:11:d6:5a:8d:08:57:57:8e:79:d7:ef:6a:a8:ae:
95:90:9e:ec:b5:d3:16:84:fe:fc:5c:f0:c9:08:5e:21:91:0f:
31:9a:2e:78:cb:63:73:90:a1:f5:23:c3:62:48:9a:d1:f4:af:
2d:59:5c:23:bc:32:c0:e4:7f:07:99:5f:6d:d4:a9:f5:d2:9e:
b0:d9:b8:1f:fb:27:a4:9f:fb:b6:31:0a:dd:66:ea:17:5a:aa:
61:d1:17:2d:68:fe:22:e9:66:b4:5e:e5:e4:9a:af:73:5e:a0:
74:9b:9e:f1:12:f4:12:bd:77:49:51:9e:9d:29:3d:28:75:08:
de:04:57:44:bd:36:72:73:6e:bf:fc:08:23:64:09:37:e5:87:
5d:cc:dd:6a:12:70:03:ec:6a:1b:7e:77:ed:40:f3:70:92:8b:
67:b0:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:35 2025 by rpki-client