Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa
File: 8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa (raw, json)
Hash identifier: gAbxBjmpAI2agccPiUHy7E7LtbQ+Np8NDQGbmjWKKCw=
Subject key identifier: 27:63:1F:28:8A:93:C0:8C:78:B1:4C:E5:5D:D0:BF:4F:92:06:BD:95
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581E0D987F8026E671D6000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:e0:d9:87:f8:02:6e:67:1d:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9d481b1b-1c9d-450a-a5a8-a0f515e85360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:dc:77:a4:0b:1d:57:a4:27:00:0d:03:c5:
5e:00:37:c1:c8:d8:a2:1e:00:e2:e1:07:14:30:fc:
39:22:0e:14:cb:11:06:e5:b0:1d:e7:db:0d:32:12:
c9:17:1c:44:81:ba:c8:ae:54:44:8b:12:79:4b:45:
bd:e4:df:98:32:06:6f:d1:d2:60:1d:de:16:26:32:
7c:ab:db:3b:f0:6e:2e:ba:89:fa:63:16:64:a1:71:
55:b9:ce:46:10:f4:2c:42:6f:00:78:ee:a0:8a:08:
e4:e7:02:db:06:67:5b:38:08:4c:e0:78:8e:52:b1:
e1:2d:cc:8a:dc:7e:ed:1e:14:26:2a:49:17:de:db:
b5:85:2f:8e:70:3d:88:b0:7e:7a:e3:c8:b0:63:c5:
0b:f3:8d:20:94:20:e7:de:1d:cf:33:06:e8:cc:45:
64:f4:4e:72:4c:b8:94:4f:a4:20:b9:26:da:fd:4e:
ab:13:17:47:ff:40:03:01:22:71:d5:73:6a:23:6d:
ef:56:5e:8d:38:69:39:31:3d:ec:d9:f9:02:1c:cf:
d0:28:86:f3:16:09:63:3e:38:9a:f3:73:09:46:71:
6a:30:b5:03:d0:5f:39:d4:1a:2e:77:5f:4b:47:b7:
d6:46:d5:24:85:c7:8e:70:98:e9:eb:f4:80:81:2b:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:1F:28:8A:93:C0:8C:78:B1:4C:E5:5D:D0:BF:4F:92:06:BD:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e2afea8-aee2-3ca8-b8b9-92a361df2fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b0:8c:79:81:95:b1:b6:5a:d4:04:3b:cd:eb:c3:e6:8a:d9:
02:8f:54:ec:0f:5a:68:38:21:e8:46:ec:fe:cf:63:10:2c:59:
52:3a:cb:e8:04:64:3e:01:05:f5:80:95:86:73:13:e4:9a:b0:
dd:ef:5f:53:b7:20:a1:12:a7:00:61:4f:7b:43:58:ca:64:a6:
5b:33:ec:9e:c8:5f:fe:0c:f2:06:74:ff:b2:94:5a:2f:3f:c5:
4d:7e:26:f6:a6:73:c2:57:14:d0:bb:c4:cc:7f:df:64:75:30:
8d:84:6b:a7:d2:ec:75:74:40:b9:08:20:02:90:db:da:4f:94:
4b:56:30:28:69:6a:df:cb:66:7d:7c:48:75:1d:ef:01:9a:75:
8a:62:8c:59:8e:31:02:f3:c2:96:a0:77:33:27:2e:27:f3:b8:
08:0b:e8:88:9a:3e:fe:d9:50:47:e6:93:2c:a2:17:7f:33:c7:
03:3d:c7:da:bd:62:9c:d9:e9:33:6a:ef:a9:be:0b:88:21:2c:
df:f4:c0:85:c0:5e:3b:b8:5f:90:42:e4:5c:20:08:ae:23:71:
a5:e6:c7:d4:42:1d:54:cb:87:0a:92:05:97:2b:f3:c7:07:88:
6d:78:fa:c1:90:cf:bb:d1:1a:78:4e:8f:30:93:44:4b:7f:f0:
f2:84:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:11 2025 by rpki-client