Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c52afa-cc70-3b3b-8908-432606d00f4f.roa
File: 72c52afa-cc70-3b3b-8908-432606d00f4f.roa (raw, json)
Hash identifier: kwFJHoWOv96DgFN8InI5RY9htw+MSQKr2+BqE7E/Vpg=
Subject key identifier: 6D:2A:7A:25:B5:C4:FE:8D:80:3B:15:0F:53:27:23:B5:6C:42:5D:1E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F432858487742E2B9F5E2DA1302765F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c52afa-cc70-3b3b-8908-432606d00f4f.roa
Signing time: Tue 07 Jan 2025 13:22:51 +0000
ROA not before: Tue 07 Jan 2025 13:22:51 +0000
ROA not after: Mon 07 Apr 2025 12:22:51 +0000
asID: 7155
IP address blocks: 70.41.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:42:e2:b9:f5:e2:da:13:02:76:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jan 7 13:22:51 2025 GMT
Not After : Apr 7 12:22:51 2025 GMT
Subject: CN=bc343311-07db-4689-b08c-fa0030fa0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:13:00:0a:7d:d6:e4:e4:fa:d0:cb:81:ad:
62:9a:f9:17:71:53:42:dd:7a:ea:fa:fa:fb:4c:b4:
a8:13:0b:ed:b2:f7:37:69:bd:8d:ff:b4:15:48:60:
aa:52:d3:46:f8:28:9e:4b:f2:f2:31:44:ff:16:4c:
af:39:82:36:b9:21:01:fc:4e:91:89:a8:c5:90:95:
42:06:8f:42:a1:bb:f0:3d:e3:10:b1:f3:e2:12:00:
27:10:9e:1b:8a:b0:24:36:15:9a:38:19:b6:86:c2:
7c:a9:2c:71:7a:be:41:3f:c7:50:de:c1:97:a8:93:
4b:3b:33:5e:25:2b:5f:2f:ee:c2:95:b8:f1:be:a7:
7b:c7:12:d5:cc:60:a9:c7:3e:86:82:72:d9:b7:ec:
f0:f5:08:96:f0:56:28:36:8b:ab:3f:dd:3d:d4:6c:
58:ac:68:d3:90:aa:d0:92:b4:c5:57:97:73:2d:1f:
74:35:47:95:82:37:9e:60:cf:68:1a:1c:2c:f6:20:
3e:44:85:6a:97:18:53:e4:93:cf:71:c1:72:a1:ae:
ff:0d:b5:30:f3:76:9a:3c:fa:4e:ad:d1:06:10:aa:
8a:6d:5b:cf:7f:b5:4b:70:b8:e6:ef:1a:e4:34:d1:
ca:97:fa:10:c9:05:7d:d1:92:3e:5e:53:1c:f8:07:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2A:7A:25:B5:C4:FE:8D:80:3B:15:0F:53:27:23:B5:6C:42:5D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c52afa-cc70-3b3b-8908-432606d00f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:de:f2:93:6a:37:97:ae:bf:0b:3f:6b:dc:60:7b:92:32:4d:
cb:55:5b:8c:4b:b6:09:a0:38:e2:27:c4:be:9b:dd:13:8f:69:
40:a2:e4:d8:87:ff:44:52:50:a2:44:a0:07:04:1c:7f:52:6d:
43:db:ed:c4:76:b2:4f:40:fd:35:e8:9d:b8:df:66:4a:1e:da:
0f:66:53:a9:ae:f3:76:bf:74:50:0e:ae:ef:85:bf:81:56:2d:
26:f2:51:0f:28:ce:fe:1c:f9:aa:33:fd:72:46:50:71:a2:18:
76:99:d7:38:96:af:a5:96:e6:49:1f:da:a5:2a:51:d6:37:31:
95:b4:65:db:31:e7:51:d0:59:d4:7d:c1:23:0a:87:53:0d:78:
5d:3b:72:c0:19:a0:12:76:70:dd:5a:07:0b:a4:30:23:af:5f:
fc:1b:6d:8b:57:90:3d:3f:0a:16:d0:8b:bb:d1:b3:cd:22:ee:
c0:78:77:d0:2f:b5:76:db:dc:e5:d6:20:38:76:1a:59:bf:e9:
94:17:63:17:c4:e0:1e:a4:9b:ed:7c:23:92:23:f5:ac:fa:0d:
b8:9e:44:54:46:58:fc:ea:22:b3:c8:1a:34:a5:37:54:ff:3c:
06:cd:bc:00:9c:21:7c:a2:be:c5:df:34:44:9d:58:f0:18:d5:
4d:7d:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:45 2025 by rpki-client