Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931d6afd-0ba2-316e-957e-234b75fab262.roa
File: 931d6afd-0ba2-316e-957e-234b75fab262.roa (raw, json)
Hash identifier: EON7cIMcazHC8gy8c0ox5LfT9Jbpf3dyNoTeHqwJ3ns=
Subject key identifier: 9C:48:4F:15:50:BA:B8:D2:45:75:C5:8B:ED:4E:6D:E4:18:80:6B:E6
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819611C75A451ABDE04780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931d6afd-0ba2-316e-957e-234b75fab262.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 67.54.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:96:11:c7:5a:45:1a:bd:e0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=61f7272f-71ae-43be-bfb2-ef81f88f0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:ad:d0:9d:cb:7a:54:1c:fe:35:cd:97:d4:
d7:1e:59:6f:ee:b2:53:ba:03:90:01:8e:e9:a3:17:
b3:d0:1a:5d:0e:a4:ac:bc:af:c9:95:9d:75:23:cd:
02:ea:06:f2:cf:f9:ad:8a:b7:62:e3:1d:33:46:9a:
b2:32:94:a9:ee:91:c1:6b:97:00:b3:15:a3:83:8d:
10:df:11:b3:78:70:da:90:e7:b7:65:40:8b:ce:9f:
bd:8d:b4:84:f6:a9:0f:d7:63:59:9c:98:df:93:e5:
41:1d:c4:50:2d:e8:c7:6c:22:b2:f1:46:57:4c:f0:
48:d2:f5:c2:5b:3a:13:cf:dc:72:bd:5a:c1:af:4b:
75:f1:32:14:63:ab:3b:d9:a8:c7:fb:6f:c0:62:4e:
a7:82:66:50:b8:cf:85:24:32:d1:ac:50:6f:6b:3d:
2c:89:8d:3c:fa:78:12:37:02:90:0c:1a:63:81:72:
e1:95:6d:68:a9:a4:bc:4c:44:40:0a:b2:39:a9:7e:
ec:c4:d8:4d:9f:cf:b4:55:74:51:5e:37:c1:64:ae:
2c:d2:98:31:bc:17:e1:c0:53:7f:2c:0d:5e:ea:b7:
c6:ae:69:fd:c3:20:55:26:ae:7c:87:a9:50:6b:f6:
d5:9b:7e:5b:e2:72:53:a5:10:b2:8b:78:76:d9:20:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:4F:15:50:BA:B8:D2:45:75:C5:8B:ED:4E:6D:E4:18:80:6B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931d6afd-0ba2-316e-957e-234b75fab262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:43:76:36:98:01:7d:60:35:4e:d2:8b:51:42:f0:6e:b5:60:
dd:6d:a7:b2:60:81:18:a2:de:6e:11:7b:c1:5b:41:b1:7a:d9:
e5:6c:af:e7:fc:66:a1:eb:78:c1:ca:61:6d:ba:e5:80:2f:9c:
61:e3:13:4a:e5:c1:b5:42:1a:dd:ba:1c:a5:6d:95:88:0d:21:
f5:eb:32:2e:f0:5f:5a:6f:66:00:66:c2:bd:c7:90:b1:79:37:
e9:1c:28:9c:bd:0e:64:fc:c9:e7:fe:49:a3:ea:60:58:5f:db:
bb:f1:fe:bc:0f:22:a2:a6:7f:2f:79:a2:24:e9:f8:bc:14:fc:
f3:13:69:63:38:9d:d5:b2:13:a5:5e:29:8d:3c:e8:fa:c2:b2:
42:d2:32:c6:0f:ac:5c:a3:7b:1d:53:08:7c:c1:92:68:57:57:
85:2c:0f:b5:b2:d1:13:09:05:4e:ea:7b:fe:4c:6e:a6:98:2c:
b2:82:2f:4d:e1:c0:9a:f7:05:c2:07:43:a8:a9:a3:27:3a:64:
0f:86:a1:71:01:aa:44:97:bc:d7:bb:f6:37:83:64:1f:18:09:
96:a3:44:55:a6:57:de:08:28:b1:20:76:9e:f9:c9:6e:14:53:
97:2e:30:e3:c8:61:4a:77:cc:37:35:e7:e7:c7:1d:d1:2f:8c:
e4:97:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:55 2025 by rpki-client