Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
File: 40420dc4-9d4c-3850-9245-08633abd44d4.roa (raw, json)
Hash identifier: ZSqju1qHRHAhLdW28W4LVW0z5OChRGe/uR0xNjxjdSY=
Subject key identifier: 65:08:A8:9C:CE:F5:5C:57:D9:BB:58:93:86:B4:39:7D:E6:A1:EA:FD
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581A079A1B979E5A5378240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:a0:79:a1:b9:79:e5:a5:37:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f2e9dffe-bf91-44f5-bb50-d19aad2b21bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:42:84:97:e6:9f:d9:27:2c:6a:9a:52:de:
cf:87:f7:77:8c:c0:d5:db:4f:3e:45:37:c4:76:b9:
49:7e:c7:47:91:04:21:0e:1f:38:13:84:dd:c5:28:
f8:0c:f3:69:ee:2c:71:9c:18:6e:59:c5:21:cf:5f:
21:5e:b9:d3:a2:aa:89:81:1a:ad:0a:97:4b:36:60:
d9:f4:e0:d8:b7:40:50:87:3e:c2:ad:38:6a:12:ac:
4e:75:2f:2b:6a:b0:78:85:03:bb:91:db:87:f9:97:
e7:d8:dc:c0:54:22:48:83:bf:3f:0d:75:5e:81:03:
8a:91:e3:c4:45:76:1a:91:6a:eb:35:86:1f:f3:c1:
37:0e:c8:5a:2d:b8:56:9f:4f:81:84:34:b3:4c:09:
ba:cb:00:5d:f8:51:d3:01:69:d1:b9:b8:48:5b:85:
ba:69:c0:8b:6f:36:45:a9:99:6e:f4:21:f2:78:64:
4f:21:fa:4c:e8:81:65:54:bd:55:a8:32:c4:20:a7:
e4:e2:5f:0b:e1:bb:7b:99:7c:e1:22:e4:46:f5:13:
34:b2:f9:31:06:a8:b6:4f:0d:9d:de:67:53:18:cc:
32:02:1a:3b:b7:4c:c3:3d:4b:33:b0:a0:6b:1c:fd:
e2:e7:df:fb:05:98:26:6c:12:31:f1:f1:39:7f:59:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:A8:9C:CE:F5:5C:57:D9:BB:58:93:86:B4:39:7D:E6:A1:EA:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:40:63:1c:c5:63:d6:f0:c0:3d:09:25:e0:cf:11:7e:ac:7d:
bf:bd:7f:8c:e7:1d:53:5b:d2:3e:fe:8f:e9:1d:49:9b:6f:5b:
6c:7a:95:60:cb:a2:38:76:6a:6f:2b:ba:27:08:93:87:42:0c:
79:27:3e:f7:5c:af:c5:15:39:bf:b3:84:a8:b4:96:19:9c:ee:
c9:33:57:6d:bb:58:26:92:f4:d1:a7:0c:75:d3:85:f8:71:14:
f5:42:f3:10:13:6b:57:84:92:64:20:f5:f8:ad:57:d7:58:28:
0e:4c:a6:f1:13:a6:11:bb:5f:4d:34:71:b8:34:2d:0e:67:2f:
dc:6a:e8:bc:fe:d4:0c:ed:95:bb:46:7b:7a:b0:2b:be:c2:67:
94:af:6d:58:e6:de:b3:d7:65:bd:a5:e5:b7:75:1a:4e:5a:2b:
2d:5c:aa:21:bc:3e:b7:73:c9:96:b7:5a:9b:7d:c6:d8:5a:a9:
2d:aa:a1:73:65:95:e9:40:a4:be:3d:94:75:4e:c0:88:20:fb:
26:98:c8:8f:43:28:92:2e:70:37:d3:c1:df:95:9f:1d:8c:3f:
33:77:cd:b5:9b:f6:eb:0c:4b:0c:02:be:e9:c0:3c:f1:84:cb:
68:05:1c:52:c0:e3:70:59:68:df:c8:8a:4d:1b:c6:8a:cc:f8:
bd:b7:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:03 2025 by rpki-client