Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
File: 635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa (raw, json)
Hash identifier: 1zOHaqAtzKLnq2wCV43ZXGqM6vA4feHolntBtvrMPbU=
Subject key identifier: 02:13:DD:6D:C1:96:36:FF:62:84:A9:14:E8:BE:21:B6:43:0C:EC:3E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C580FD0456D7DB8E40C2F800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:fd:04:56:d7:db:8e:40:c2:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=d3f720c5-e278-4567-8093-f051be3f88a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:57:23:73:e0:ac:0a:5a:d0:66:55:d0:9a:
3c:af:67:32:6f:ac:8c:a1:54:07:72:fa:e0:2d:1b:
cb:5a:08:9c:d6:6f:c2:b2:2d:95:98:ae:d5:49:8e:
51:c9:18:2a:4e:5d:65:12:50:4d:a6:ae:a3:ce:8e:
1e:9d:66:1f:59:af:2a:e1:d6:d9:52:4e:3d:cb:29:
56:18:f7:e0:c3:93:04:f2:31:82:4d:8b:72:f0:47:
d1:89:d4:11:f4:62:3d:e3:60:22:d9:d6:07:5a:f3:
7d:ce:a2:0c:ce:ab:3b:a2:4c:9d:4b:e7:e6:e6:44:
4a:19:72:b7:ab:49:3d:00:1b:2f:a2:fb:fd:eb:4d:
4d:f5:aa:ed:61:9e:64:1f:9a:5e:2a:de:7e:f4:a4:
3b:ae:a1:37:64:87:ba:9f:7a:f8:81:88:87:aa:b4:
e1:5f:92:20:bc:64:b9:06:db:da:9e:6a:08:78:da:
fe:da:8d:2e:e1:45:1f:de:56:bf:d9:cf:8b:ca:8f:
bc:c4:0a:4c:76:cb:88:d0:c4:09:84:94:ec:78:31:
4c:a8:b0:77:3e:82:91:60:d0:2c:ab:98:56:aa:b4:
c0:b4:61:de:a7:21:31:ce:ee:63:db:e9:59:f1:eb:
c7:9f:6e:7d:95:a9:5e:9b:68:13:73:ae:b6:09:8b:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:DD:6D:C1:96:36:FF:62:84:A9:14:E8:BE:21:B6:43:0C:EC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/635ef67d-d529-3cb1-bf93-ed1dc3c00b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:89:62:6a:3d:73:e9:b4:a9:6b:f0:8c:8d:a4:2c:93:af:a2:
01:2b:ac:30:d4:58:36:1b:0b:c5:72:33:ae:68:01:ee:fb:ba:
bb:f5:fa:df:64:7b:42:c1:54:73:16:e0:a2:d7:69:d4:f9:77:
4d:51:79:9b:98:e7:ab:8b:d5:d3:d4:aa:58:57:70:67:50:2e:
2e:7f:eb:c0:98:40:ca:b0:8e:ae:a2:b6:e9:05:43:e8:66:22:
bb:d2:e0:20:a6:eb:2a:59:93:0c:38:2c:69:14:71:40:92:4c:
85:d4:9d:6c:a6:ca:c2:b6:0f:24:e3:f5:96:77:e0:59:b8:85:
c0:f0:75:30:1a:46:ff:ba:fb:84:90:0f:ae:92:04:8e:2a:2c:
bd:4d:92:e2:b6:e9:1b:dc:0e:33:06:04:09:f9:6f:37:ea:4a:
f9:c2:2a:17:d9:1f:5c:80:38:7b:7b:da:77:34:c8:0b:a4:a2:
1c:1f:25:47:3a:66:26:df:8c:e2:e3:0e:75:b1:eb:a2:32:be:
dc:a8:10:05:40:50:cf:ee:50:2c:a1:df:f3:d5:9a:52:b5:a7:
c5:d2:26:a9:00:33:fc:7c:2d:e4:85:a1:6d:de:2f:0d:a9:1e:
7e:11:61:57:96:2a:f6:b7:af:6d:a1:96:1a:b5:66:72:b5:31:
af:54:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:06 2025 by rpki-client