Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa
File: 875e1d65-b3a3-3f98-a573-0d5574a74afe.roa (raw, json)
Hash identifier: MR3/Hr9oH1PPMMlMpgVUDoPHBcjVsEY6I/IJBZ5IIiM=
Subject key identifier: 70:39:C7:C7:65:4E:C4:B2:06:88:7B:C7:04:36:E9:66:5E:59:D0:A3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581456F9F63C282AD7EA680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:45:6f:9f:63:c2:82:ad:7e:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=dac96922-8507-438a-9a4e-518d92071cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:41:e6:fd:89:e7:15:27:88:37:03:31:b0:
f9:b8:12:8f:65:a0:85:70:45:49:84:c6:d4:66:5c:
68:19:b1:f2:52:0d:5c:50:52:34:c2:79:54:a9:eb:
60:ee:bc:42:16:49:f9:60:d3:8b:40:2d:8c:ee:e5:
91:52:70:55:d1:91:4f:68:2d:4d:b5:25:92:92:8e:
36:28:9a:ca:65:0b:e6:91:d4:3b:a9:5a:d3:ee:d6:
95:fe:68:d8:60:7a:75:cf:f4:1b:29:50:c7:7d:58:
20:96:00:74:9e:aa:54:d7:39:83:51:48:7d:81:1f:
73:01:4d:d6:e2:ad:3c:a7:b5:c0:72:45:d7:4b:de:
4a:58:cb:18:bd:1d:23:4d:98:f8:26:96:7e:59:14:
c9:8c:68:ab:77:f7:2c:6d:b2:72:6a:f9:94:8e:8c:
c7:5e:4e:1c:a5:f9:40:64:c8:64:fc:dd:34:bc:3a:
b3:a8:21:32:72:58:93:d2:5a:e5:37:d3:a7:ba:1a:
3b:df:f6:d8:85:e4:31:f5:0a:26:ea:c1:45:54:50:
dc:98:c1:1e:90:74:fb:04:cc:00:9f:b5:49:64:05:
6f:d1:ed:a8:51:bb:32:05:4f:cc:ac:34:9b:63:a8:
df:8c:52:76:d5:db:df:af:68:7e:5d:64:9f:73:6f:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:C7:C7:65:4E:C4:B2:06:88:7B:C7:04:36:E9:66:5E:59:D0:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d6:34:c6:0a:d6:e7:78:72:b3:f7:33:e5:af:57:81:c6:00:
a4:04:24:10:02:9a:e4:e2:30:94:4e:b7:78:63:1e:0b:c9:79:
13:95:c6:91:87:05:97:66:8d:de:50:d0:00:33:e6:17:e4:70:
42:0c:2c:e4:47:ad:2b:5f:e1:59:cd:97:cd:0b:a7:40:3a:a2:
8f:aa:50:61:68:27:a8:36:e9:ec:68:67:d8:9d:ef:ac:4d:4a:
a1:17:f4:85:61:93:ea:0e:f7:34:36:95:27:64:74:52:a3:97:
53:10:d0:4c:e4:16:bb:99:82:f4:f1:3a:b7:69:df:14:3c:37:
d6:fc:ed:fa:67:f2:f3:b8:2d:57:ef:47:04:25:9c:d2:67:3a:
e2:64:e7:fb:37:96:61:99:33:e5:67:98:05:25:1f:42:46:19:
f5:38:11:70:54:3a:a3:da:57:2a:0c:2a:f1:bc:ce:df:d0:06:
93:74:23:04:8e:22:9a:96:d4:c8:21:dd:69:a6:ea:ef:bc:ba:
49:4c:bb:25:23:3b:73:63:ac:9d:1c:98:5c:6b:cd:b1:ee:d6:
95:30:a5:1d:51:23:b4:48:2b:0e:fd:7c:ab:91:41:2a:51:d2:
6b:df:c7:13:be:2b:d6:f6:b5:1f:57:6c:80:8a:f5:62:1e:f1:
6f:ac:18:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:36 2025 by rpki-client