Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa
File: 3d8f5d90-a69d-3cd8-a196-091546b82b17.roa (raw, json)
Hash identifier: q99QlsoMDtH65NwHDnwtjDGBZ8FRWAi7lCeloGOdL/w=
Subject key identifier: 05:79:83:C5:77:DF:F7:E3:4C:E9:32:62:3A:9A:F8:4B:9B:01:3E:5E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814E0ABA8421339ADC25C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:4e:0a:ba:84:21:33:9a:dc:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=8d50f495-5e4f-4768-8d3b-7104528ec35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:a1:f4:a3:68:8b:bf:45:dc:88:55:ce:93:
0a:78:b2:58:72:22:70:d9:5b:e1:50:28:c7:94:4a:
3e:b5:79:79:bf:25:cd:ae:1f:f1:f3:26:31:94:51:
ad:0f:7c:04:f8:b3:9e:35:42:34:10:7a:bb:9a:65:
f1:91:44:f2:f3:1a:a4:ae:83:46:de:7c:f5:90:42:
f1:40:48:ad:2a:d4:0b:33:29:a0:5e:14:a5:8e:13:
7d:2e:6a:6c:e5:33:73:82:da:70:00:22:ca:05:c5:
50:71:6f:74:7c:df:ad:9e:52:0b:9c:df:4d:14:c5:
e5:70:4a:57:0c:83:e3:ba:27:59:26:86:98:84:61:
d1:90:2a:c4:a3:d3:32:c5:a0:bd:fa:36:f5:0d:a1:
11:66:ff:cd:ed:53:1d:f6:8f:ae:fd:ab:3b:dd:71:
7c:b7:83:98:22:68:18:18:9b:b8:06:1c:99:0b:fa:
af:58:05:e3:3a:bd:06:69:63:e8:8f:65:80:c3:fa:
a1:5b:77:c0:17:f1:32:ef:36:02:4e:74:a7:e0:ac:
02:c3:10:5d:65:75:08:29:1a:39:cc:97:33:ee:6b:
94:8a:f9:a4:3b:05:d5:3e:b2:48:73:de:b2:a4:b9:
c1:8e:96:f5:1a:be:f0:7b:89:5d:de:e9:06:e6:cd:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:79:83:C5:77:DF:F7:E3:4C:E9:32:62:3A:9A:F8:4B:9B:01:3E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:8b:06:1f:a4:2e:01:a0:0d:44:39:63:f2:7b:32:09:d2:74:
a8:6e:14:76:a7:3e:bb:61:8f:2e:7c:2e:60:34:95:a9:f0:8c:
8a:03:50:23:bb:80:fc:f4:84:4d:e5:83:d2:a8:5a:00:7c:51:
3b:8a:4b:e4:f4:0d:42:d2:21:19:5f:6d:e2:87:d9:40:e1:12:
71:57:2a:61:7f:21:3e:14:3f:82:e4:3c:7a:8a:f7:b4:4a:c0:
28:a5:76:13:80:c0:df:7b:cd:67:e9:ce:c7:04:1f:56:f5:1d:
ed:e2:60:fc:29:f5:cf:5b:a5:bc:dc:36:6c:f7:72:36:63:ff:
f1:65:50:e2:2d:2b:44:31:2e:d9:88:4a:18:50:6f:50:26:3d:
48:6a:78:ce:cd:13:62:db:8a:dd:1d:c1:a8:d7:97:f2:62:95:
5c:c6:41:5f:c8:ba:1a:81:c6:55:c8:f5:1e:8a:ec:76:c9:4d:
fd:df:fe:1f:5f:96:9e:a7:ca:0e:31:60:e6:46:41:de:f8:ee:
f6:54:cb:5c:5b:a8:97:35:66:14:42:5c:19:27:ce:a1:67:32:
b1:6e:60:1e:38:52:8a:1f:ff:bf:a6:5b:58:31:d6:5e:98:24:
7a:3c:a7:67:32:00:34:cd:7d:e8:af:7b:8d:18:15:9b:aa:36:
ae:d5:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:01 2025 by rpki-client