Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f70da08-4212-3037-a9d5-47a448ad7dde.roa
File: 3f70da08-4212-3037-a9d5-47a448ad7dde.roa (raw, json)
Hash identifier: FtNCXy5oc9R6lMtgcs8HoGfF7VCzGSqOA6GSGx8sBPI=
Subject key identifier: E3:49:9A:9F:56:23:7E:0E:01:F5:1B:F5:F9:4B:BD:F4:8D:F0:30:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58197BFA37EC612B256CC40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f70da08-4212-3037-a9d5-47a448ad7dde.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:97:bf:a3:7e:c6:12:b2:56:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=69bf542f-f407-477b-a386-742064fe24f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:03:64:85:c5:a1:7e:0e:83:e5:4e:9e:e4:
dd:8f:2b:a0:44:ca:62:ed:f3:c8:37:bf:b9:70:4e:
9c:73:67:c6:86:9e:fe:69:0f:92:c9:c4:45:df:31:
55:d0:93:61:b2:1e:89:91:b2:4c:02:1d:ef:e5:41:
24:44:1e:e5:2c:92:5e:14:dd:3b:dc:35:d7:3a:06:
8d:e4:b3:24:26:43:33:aa:ad:2f:75:ca:ae:43:b3:
d4:5a:cd:47:c5:f2:8b:6c:fb:d6:23:ab:d3:ff:d8:
d6:fa:b8:dd:7a:2f:13:34:bf:36:28:cb:52:30:62:
95:5c:08:da:19:fe:eb:83:60:5a:9e:02:64:81:aa:
f5:33:11:10:65:fa:02:09:0e:eb:fa:2a:bc:95:25:
84:55:9b:2f:47:ef:d0:4c:95:d0:0d:29:6a:62:41:
d2:ee:3b:8a:1d:e8:b7:09:15:bd:ad:68:d7:8d:cb:
d0:a9:9e:d1:76:20:3d:d4:72:77:cb:77:9d:bd:f2:
e0:fa:60:06:34:84:8f:ba:c5:b4:27:57:62:4f:eb:
94:9d:fd:1b:59:55:b6:24:1e:91:03:ba:df:ec:c5:
31:be:f1:d4:d4:70:49:ab:8d:87:19:cc:8a:cb:6c:
c5:65:95:04:a4:28:c9:ff:df:97:53:d9:f7:f6:49:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:9A:9F:56:23:7E:0E:01:F5:1B:F5:F9:4B:BD:F4:8D:F0:30:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f70da08-4212-3037-a9d5-47a448ad7dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:39:e8:15:0d:0e:c6:2c:fa:21:e4:dc:4b:cc:35:52:6b:16:
18:00:36:06:f5:1d:e3:33:20:0a:9d:87:1d:5f:d3:8d:12:07:
e0:01:8e:b5:f0:b9:9d:a2:ff:e7:49:42:73:6c:97:47:34:28:
3a:db:48:84:38:5a:e4:bf:d0:fa:b3:f7:28:55:d4:f0:35:8d:
88:eb:50:69:a1:a5:c3:f3:cc:c0:3b:05:e0:d4:8b:02:b1:4e:
a8:95:1c:26:f9:dc:50:01:c4:87:06:84:8e:10:4c:8a:d5:f9:
29:2a:81:ec:51:53:56:04:42:6c:43:01:18:25:c8:21:7a:f8:
89:4c:36:04:e2:f4:45:93:6b:b7:b5:b9:99:5a:bb:86:b2:3a:
6a:aa:07:01:c5:ac:bf:76:88:8d:89:77:ed:e2:3e:48:fe:4d:
d4:c6:6b:dd:c6:df:5d:d0:b3:50:f9:fe:01:73:3f:0a:dd:11:
e6:e8:59:4f:3b:ed:49:66:e0:16:c0:50:20:1a:4e:05:81:00:
46:ec:11:6f:ba:33:75:f4:cc:bd:fc:ba:e3:38:7d:14:ec:38:
25:aa:a6:67:b1:3b:90:1e:39:65:29:e3:8d:0c:0b:98:a9:83:
13:d9:52:f2:57:3d:53:6c:4e:97:88:3a:0f:dc:43:d1:29:84:
72:56:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:39 2025 by rpki-client