Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa
File: 2af33beb-28bf-3e20-8796-37fd8256bd13.roa (raw, json)
Hash identifier: XPs7Z88JAao3uNhYDFFYW8t2xMbs1nkxYTyqkF/bz80=
Subject key identifier: A3:98:B7:F6:A4:1E:95:F4:29:A8:B4:32:37:C8:10:FA:2B:EA:97:5B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58149CB45C212CED410AA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:49:cb:45:c2:12:ce:d4:10:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c4119d81-b58e-4d2d-9647-8c58f850d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:61:cc:a7:db:3b:5e:f4:32:23:4f:55:05:
ea:af:cf:92:9d:d0:66:d9:11:8d:fb:37:39:1a:78:
a3:85:89:d1:37:58:5d:7c:80:92:19:9b:13:fd:10:
f8:61:7d:34:ae:c0:3b:68:bd:bd:25:de:36:1f:5c:
37:3a:a1:75:62:f7:f0:b5:a1:3b:3a:7e:ba:e2:22:
33:9a:12:21:f6:fa:f1:34:d4:20:66:b9:00:db:1c:
e5:9a:c5:d1:60:73:19:bd:fc:2b:29:0e:0c:84:36:
a4:b9:67:87:21:d5:8e:64:43:46:95:04:40:72:7b:
4e:20:e7:36:8a:a0:75:27:61:7e:de:15:c3:64:0b:
eb:ea:93:f7:02:db:47:36:71:ce:93:fc:91:a1:88:
a1:e5:06:e8:bb:21:fd:c1:e0:3b:bd:e7:0f:46:13:
ef:6c:86:85:ac:cb:f2:6b:58:c9:ff:66:a6:60:04:
68:0d:91:2a:a7:ab:67:02:8c:66:53:95:31:c2:9e:
4c:63:67:fe:ea:5a:ea:4e:e3:a2:18:6d:7a:f4:80:
b0:2a:cd:de:db:78:c7:eb:d4:9f:b8:08:40:e8:3d:
5d:87:cc:7a:02:8e:34:ae:d5:5b:b6:d4:1d:05:7c:
c6:56:0d:2c:9c:ac:c1:36:86:f2:37:7a:08:5b:66:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:98:B7:F6:A4:1E:95:F4:29:A8:B4:32:37:C8:10:FA:2B:EA:97:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:04:a7:33:1b:c3:f5:ac:82:3f:92:2b:9c:c8:07:29:41:ae:
17:eb:0d:16:4c:66:49:b8:68:8b:25:9d:f0:4e:05:26:30:81:
f5:1d:1e:dd:15:3a:70:fc:4a:78:85:a0:86:cd:82:40:ec:68:
06:80:c3:8a:6e:a4:f6:ff:67:67:9e:b6:58:9a:a2:68:3d:5f:
9f:3f:44:c7:22:fd:af:75:7f:33:33:14:26:41:d0:1e:0e:0f:
ab:7e:7a:93:fd:43:b9:1a:47:3a:f8:81:09:a9:34:ad:e5:5f:
cb:41:0f:df:3d:b0:ea:5f:ca:70:d2:31:91:66:de:06:eb:18:
2e:8a:3c:19:b0:19:ca:f8:b5:28:66:57:0e:24:83:a6:a5:aa:
bd:21:09:fd:00:69:d9:7b:05:a0:b8:5f:98:df:dd:c9:e4:8f:
1f:a1:c5:52:dc:fe:5a:1f:1d:0c:94:64:95:31:aa:a0:3a:39:
05:b8:e7:23:0c:08:5d:db:ff:d9:80:ef:77:cf:7f:25:7d:3f:
f4:3a:d1:64:8a:1d:98:5c:dc:93:56:61:78:21:9e:45:b7:31:
8d:05:18:07:23:87:6d:42:de:26:7e:0e:10:df:c2:d7:26:ea:
bf:77:84:37:2f:58:8a:14:58:73:69:8c:fd:41:b4:14:4e:a2:
85:af:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:57 2025 by rpki-client