Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545cb389-b097-38e6-b1dc-405d3f63e088.roa
File: 545cb389-b097-38e6-b1dc-405d3f63e088.roa (raw, json)
Hash identifier: u7nVIIgz5zCj313td7+FUz3SbXfKH9X9JU1oz0bWJR8=
Subject key identifier: 48:F6:67:9B:93:08:1D:A6:C7:53:6A:1C:F2:53:6A:65:1B:97:6D:04
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814598D013D7268FEBF840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545cb389-b097-38e6-b1dc-405d3f63e088.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:45:98:d0:13:d7:26:8f:eb:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=869c7655-56eb-4bdb-aa57-15aef535310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:91:6b:7e:5a:48:1e:0b:04:2b:52:2d:e2:
0d:3a:2f:02:cc:18:25:4b:36:d7:58:6f:dc:15:56:
66:40:38:2f:0b:51:dc:a1:8e:47:04:bb:4a:6f:e1:
51:67:c0:09:0b:b1:b4:ef:07:2a:2c:a9:f6:95:69:
e3:d0:4e:7e:cd:58:11:ba:56:28:7f:ec:01:4b:8a:
a3:b0:98:25:bc:2a:38:32:dd:32:16:d3:66:09:21:
25:1b:64:a5:40:02:76:aa:9d:41:13:1e:6b:15:c5:
7f:13:57:71:88:71:55:6a:7e:3f:52:33:07:0b:b9:
08:59:a0:f4:33:fa:06:b1:23:c1:99:04:c2:0b:1b:
48:28:71:c5:ab:46:95:03:be:fd:34:53:9e:4e:51:
14:b8:8f:c3:5a:7f:ce:23:b2:c2:d3:a3:f1:0a:3d:
20:0c:e0:c3:ef:aa:14:09:77:38:a6:45:b7:01:4f:
73:ee:76:11:b2:a9:40:9a:32:fa:0d:8d:ec:3e:30:
b1:b7:f7:f0:f5:73:1f:29:83:06:20:15:b5:93:62:
3e:58:44:e5:81:c5:f0:0f:f0:7a:d2:d0:5c:dd:4a:
7b:ee:19:00:65:b8:a5:1d:2b:bc:cc:0e:9e:36:fa:
62:1b:f1:ff:47:15:db:8c:65:dc:c5:c5:bc:57:93:
35:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F6:67:9B:93:08:1D:A6:C7:53:6A:1C:F2:53:6A:65:1B:97:6D:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/545cb389-b097-38e6-b1dc-405d3f63e088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7a:a4:42:28:ab:ad:bb:73:fa:96:38:fd:ff:ca:7c:4d:49:
56:2b:99:aa:b5:74:f3:59:4e:49:36:ff:3e:e0:1e:b8:55:5c:
eb:c1:1b:e3:3e:f7:f9:e1:99:7f:74:f3:35:a1:d5:74:4e:ba:
87:17:48:eb:08:bc:ce:03:1a:b5:46:c0:0a:0b:38:f2:78:e9:
da:54:76:eb:2f:22:c0:49:d1:9a:38:35:f1:31:69:7b:3c:fe:
ad:22:95:51:de:0c:c2:bc:bc:7b:26:0a:e3:34:8f:76:d3:93:
e9:e1:49:05:5d:81:3c:d3:ad:5a:6d:ff:ef:72:6c:fb:d8:55:
b0:b1:5a:fd:29:0f:05:c2:c2:70:7f:2d:a0:56:6e:5a:39:f1:
57:51:eb:76:3a:73:f2:0d:74:f0:75:d0:63:b6:23:46:ce:00:
9f:c2:18:c5:34:dc:9e:e8:36:7c:d9:d0:27:65:cd:03:7e:06:
6e:c9:ea:c3:4c:ee:f1:ba:d6:b7:ed:71:55:ee:d2:37:60:4f:
81:f6:b8:4f:89:bd:07:c3:92:bf:ed:5c:3a:3c:27:ee:83:55:
98:34:c4:57:28:8c:20:66:ef:4a:0b:7f:83:73:b6:c1:d6:d5:
e5:cf:ab:69:88:fc:46:a3:dd:b6:2d:70:92:ac:f1:34:4a:a3:
41:37:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:14 2025 by rpki-client