Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa
File: 5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa (raw, json)
Hash identifier: qgSwf75oVASW0/Fwp21dzFq+/HwyzY7hjaGThwDhE14=
Subject key identifier: 80:06:7D:D0:14:1B:39:E9:21:46:8B:D0:B9:5F:70:BA:01:D4:EC:3D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819DA56B62D697FE8D7300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9d:a5:6b:62:d6:97:fe:8d:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1d8c2d3f-eca5-4702-b7fe-6e5a71f9e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:55:bc:a9:aa:31:dc:eb:44:c0:73:68:2b:
f0:84:6a:98:20:88:32:52:2e:e4:6e:9d:ea:63:8b:
cb:f1:41:d1:fd:0e:71:6c:41:90:0e:4e:4b:60:54:
29:34:d5:14:4f:04:f1:44:24:ac:de:ea:58:99:b8:
33:b1:c1:44:59:24:da:27:f4:2e:62:1a:3c:17:2b:
bf:da:14:ee:1d:53:50:b0:9f:86:39:0f:ef:b6:ae:
f8:38:ee:b0:1c:59:81:e7:3b:a7:21:69:77:42:95:
86:46:0e:d9:3d:6f:93:b9:04:5e:d0:c2:04:61:34:
5d:1f:88:a9:8a:2c:4f:54:01:b5:8b:12:65:d1:8c:
33:b5:09:dc:ee:16:a0:8c:bf:97:84:65:d1:73:f6:
c6:52:b3:94:d6:a3:c2:3b:4a:f7:4b:a9:28:07:95:
cc:73:e8:54:65:23:72:33:05:d6:12:ad:be:07:04:
25:9d:eb:4e:ee:9b:18:d7:43:70:49:ff:69:57:83:
d8:e1:3e:c3:3c:30:4c:5a:14:25:8b:aa:b7:0c:44:
01:53:4e:16:ce:89:c6:5a:dc:a1:cd:34:13:69:2c:
10:c2:ac:21:a0:32:77:13:90:2e:f8:5c:11:5c:6e:
b4:7f:da:1a:34:39:7f:04:08:c4:8b:22:a3:57:49:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:7D:D0:14:1B:39:E9:21:46:8B:D0:B9:5F:70:BA:01:D4:EC:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ca:bc:0e:f0:0d:f0:2e:18:30:9f:71:ff:23:24:a8:2d:4a:
ac:2a:ad:df:f2:41:c3:67:62:dc:5a:df:12:3f:08:ca:44:e9:
d3:a0:10:57:84:f4:3d:03:ae:00:25:59:cf:cf:20:16:3f:a0:
4d:06:e7:e9:44:b0:b5:97:e8:48:62:0a:40:48:61:d8:ce:5c:
30:b2:0d:ac:11:f6:5e:f9:b0:e4:87:33:fb:63:14:aa:a9:1c:
62:22:bf:8f:fe:e8:9e:0b:0a:fb:99:a9:05:d0:81:5b:2f:fb:
4f:8a:cc:43:ac:96:32:dd:cd:54:42:94:22:0b:5c:e9:c0:e2:
4c:bd:cb:74:a8:1c:fd:c0:06:d8:8f:03:13:2c:11:5f:32:de:
9e:29:18:2d:3c:90:87:6f:29:bf:25:f4:95:e3:07:8a:c3:e2:
9a:02:f4:25:a7:a8:b1:90:6e:88:ac:b3:62:d8:d3:20:83:4d:
63:c4:f0:d6:aa:31:43:fb:32:53:4a:dc:b5:33:35:6b:79:6c:
31:50:b2:25:79:0e:9e:c7:1e:90:1c:13:55:c3:3d:14:9b:ae:
71:8c:73:b1:07:9f:fc:fc:d9:d7:94:d2:0f:e0:a7:cb:77:6f:
c9:2a:c6:0d:89:29:cf:c4:53:cc:b4:6b:5e:01:62:92:0d:d3:
33:7e:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:28 2025 by rpki-client