Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
File: 3ac6c564-59d7-31eb-8b66-a27be99aa706.roa (raw, json)
Hash identifier: Lsqqggzf2IbanEqUsQelhP7Se1hMYiMmdOEhb6CgNFQ=
Subject key identifier: E0:CB:91:09:81:A2:16:0A:E8:EC:FE:0B:E1:0E:0B:F4:0A:EC:D2:46
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581997EE299960E3956AC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:99:7e:e2:99:96:0e:39:56:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=89aa2730-e2e4-4466-9e7e-58b2e1060454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:77:ff:f4:32:8b:27:a9:bc:9e:dc:83:91:
dd:70:2d:f5:f3:b4:5e:14:62:cd:45:75:09:73:fc:
1c:fe:19:ed:ac:ff:7b:48:1b:7c:ef:73:b7:2f:75:
60:91:f5:1a:6e:a5:18:b9:ea:db:11:26:de:2f:7a:
9d:7b:d6:9c:7b:b7:b2:4a:fb:db:8a:77:75:78:f4:
be:54:ea:bf:2e:85:4f:1a:0d:d3:33:31:80:fb:5a:
0e:21:c6:11:b3:98:59:9c:e8:76:ed:7b:d4:18:3d:
a2:55:3d:76:dd:01:16:ea:7a:2b:dd:b1:a6:0d:9a:
06:ef:21:e8:ca:a4:c4:9d:8a:21:76:f4:93:83:b5:
3a:fe:30:03:3b:e3:76:6a:15:3a:cf:bc:1a:69:5a:
c8:3c:74:11:fb:51:c0:72:ed:aa:c2:80:cb:70:dc:
5a:89:6a:71:b5:1f:7c:1e:7d:21:ad:ac:d8:a0:cd:
75:54:bd:4d:2a:c2:ff:73:d1:a3:14:af:33:7b:2c:
44:34:f1:d8:95:d9:86:49:34:ce:5a:40:28:22:cd:
cf:f0:61:44:2b:4f:85:05:99:67:38:ef:49:35:2a:
94:c3:df:bb:eb:46:1a:15:a7:cc:89:b7:35:8d:fa:
d2:94:e7:d4:24:e9:04:b7:72:e2:01:25:2e:18:03:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:91:09:81:A2:16:0A:E8:EC:FE:0B:E1:0E:0B:F4:0A:EC:D2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ac6c564-59d7-31eb-8b66-a27be99aa706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:80:0a:12:39:87:ab:3a:59:ef:e1:35:9b:84:88:f1:89:d0:
df:4e:6c:01:65:d9:90:0c:b7:1d:ec:17:4c:b4:84:70:32:75:
bc:73:04:8a:f0:98:20:37:e6:c7:4c:db:c9:c5:c7:d0:a8:75:
b3:00:ff:31:54:ff:04:6e:b8:87:ef:d7:f1:fe:fe:e4:7a:cc:
a9:24:d1:4c:6d:6a:10:ec:a8:a8:21:82:07:b7:df:02:35:bc:
a5:1c:4a:5c:dc:7b:df:71:bb:ed:26:c2:1d:8c:cf:3c:49:6f:
c4:89:fa:61:b1:e8:fa:69:69:43:e5:77:de:08:fd:15:44:db:
78:61:62:e2:2a:f8:24:44:8d:40:fe:00:93:3d:da:56:5a:f3:
11:e6:9a:5b:7e:42:e2:aa:e8:7e:05:3f:35:d1:be:09:bb:94:
f8:0e:f7:21:df:31:05:d5:dd:07:d2:51:a4:c1:a2:05:8c:dc:
e5:9f:50:bd:f3:b6:88:07:78:bf:3a:8a:f0:d7:02:fd:25:7b:
a8:e6:d8:f2:c3:14:3c:fb:83:16:e5:68:6e:1e:4c:4d:94:02:
0f:4b:3a:65:39:94:55:0e:18:ec:70:91:2b:b1:38:88:bd:8d:
bc:b5:84:00:4f:2e:2c:7f:09:3b:41:01:59:48:fe:2c:73:7c:
00:a3:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:41 2025 by rpki-client