Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
File: 65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa (raw, json)
Hash identifier: CFp8sSdwiRTtSPMVebd1JtURFKB/mHxEyxy4imWZp5M=
Subject key identifier: BF:44:A1:00:7F:B9:30:2D:3F:58:33:83:A2:C0:30:81:EE:B6:DA:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DA0F8F67AF89F839D280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:da:0f:8f:67:af:89:f8:39:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=add880e8-03a0-44cf-acaa-ab2b658d1e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ac:fe:8d:2f:37:e9:b2:73:4c:c4:d8:59:0d:
1e:93:8f:aa:42:34:56:cd:48:19:9b:4b:d3:b1:08:
57:39:90:df:50:73:16:9a:71:c6:0d:bd:5e:12:1f:
f0:7a:09:70:fb:75:1f:04:8b:bb:98:2d:39:14:eb:
ca:d6:78:04:f9:3b:38:e5:b8:89:8b:b8:f6:80:f3:
1a:39:62:83:ca:99:cd:a6:71:81:73:28:e9:d1:c4:
cc:16:c2:56:12:2c:d2:b2:07:ce:f8:eb:52:ec:6a:
71:04:b6:ca:64:e4:70:d1:0f:66:8c:c9:10:76:ee:
57:ce:cc:f2:ac:31:03:f6:15:28:ba:a3:99:fc:73:
67:a3:5f:6f:62:6a:2f:e2:1f:bc:25:6a:ab:40:37:
9d:6e:c6:31:91:e1:f1:b6:29:05:cb:0c:62:a7:cc:
f4:72:e6:3c:fe:6e:bc:54:ef:07:5d:e9:ea:53:4f:
48:6d:a3:f4:72:55:0a:b8:63:e4:98:90:42:c4:38:
be:65:34:4f:dc:70:82:ad:11:aa:13:92:87:f5:be:
5a:e6:70:7c:18:44:a9:a7:ea:7c:3b:27:a2:70:c4:
e7:72:bc:92:c9:b0:50:9c:cf:fd:55:87:e4:f5:cf:
d4:2b:22:4b:3f:fe:33:74:37:06:ad:c7:03:d2:38:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:A1:00:7F:B9:30:2D:3F:58:33:83:A2:C0:30:81:EE:B6:DA:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:98:4c:63:69:65:95:5f:e0:4f:ef:ae:75:b1:b6:36:76:19:
0d:d7:32:9d:83:6e:76:a7:f2:bd:fe:5e:0c:29:d9:d5:58:d9:
51:02:ce:0d:a9:17:57:63:7a:96:fd:36:95:4c:4f:ef:e1:b3:
14:d0:3b:4f:24:a9:34:ab:55:32:5b:7c:95:2f:ef:e2:10:f1:
92:e5:bc:ba:00:81:52:53:4b:16:14:80:ef:74:d8:93:ae:fe:
2c:60:9b:98:07:a9:e8:07:27:0c:c5:fb:95:5b:e7:f2:97:55:
89:40:76:79:6c:a6:6a:ed:52:79:ab:01:b0:e3:91:46:85:74:
0f:99:41:94:f9:21:41:8d:8f:99:db:bf:1e:0b:3a:a5:4e:61:
f4:a5:55:09:8b:2c:9e:f0:40:c5:89:94:a8:7f:78:3f:81:14:
7a:bb:f9:23:04:67:9d:d0:25:68:4a:5a:93:58:cb:78:b7:58:
b2:6d:1a:68:79:57:c1:3b:a8:4c:4c:f8:59:9f:e7:0f:bf:a9:
e3:ac:88:ab:96:64:e4:46:3c:8d:84:c1:80:1e:61:46:ce:2d:
a4:2a:11:02:4b:a8:ef:29:06:4c:53:31:da:2f:d5:ea:6b:23:
80:61:5c:5b:43:b5:e8:8d:9e:ab:fc:11:38:9e:a3:06:15:fe:
ad:af:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:50 2025 by rpki-client