Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa
File: a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa (raw, json)
Hash identifier: 2AR/ZkS0nPUZe3Z49DfpOos6YxKU1K2byJq9r9uO2vk=
Subject key identifier: E8:C6:24:D1:EE:89:8B:56:60:D5:F7:81:E1:48:61:3B:95:3D:FB:5B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819740C74AF2036A838880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:97:40:c7:4a:f2:03:6a:83:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=faffac7b-d363-4efc-9ff4-1b0bddbed847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:8e:2b:63:1f:17:15:49:69:56:16:f2:e3:
0c:5c:5b:c2:ee:d0:e1:68:2d:3c:c2:65:95:7c:d2:
0f:47:13:82:5f:69:82:3e:2f:a1:21:1a:72:0f:29:
88:67:58:eb:f5:c4:87:e6:c7:2f:fa:b2:fc:52:8e:
c1:92:5c:07:a3:e9:3c:40:4a:65:d1:68:0b:68:34:
db:27:e8:8e:d1:c9:bc:26:b9:90:69:92:02:26:54:
41:d7:92:67:0d:cc:81:3d:ce:95:db:46:de:b5:7d:
07:19:6f:96:70:c1:fe:4c:2f:8e:c8:9e:ce:7d:31:
2a:09:b8:e1:02:66:4a:61:fc:5c:ef:ea:14:bb:27:
08:45:d4:61:eb:5e:27:31:e3:b7:aa:8a:d2:98:fc:
49:13:57:25:41:33:4e:78:ac:8e:31:36:d9:cf:98:
55:d6:e3:b6:3e:9a:87:e0:78:79:00:d8:05:3b:e3:
33:39:32:70:7f:83:38:11:0d:ec:d3:5b:d6:7c:4d:
26:62:8a:5e:c3:5f:45:e6:82:73:51:cc:34:3d:f6:
97:f6:8d:8f:db:8b:55:0a:5a:15:aa:1d:78:9d:96:
cc:41:68:1e:93:a4:01:89:2f:cd:a0:13:15:6f:40:
9a:7e:ea:27:3a:ff:b5:30:a8:f6:49:23:5c:c4:9f:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:24:D1:EE:89:8B:56:60:D5:F7:81:E1:48:61:3B:95:3D:FB:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:01:00:77:c8:e7:6a:99:40:e5:6f:c6:8a:5f:db:92:12:03:
f3:38:c7:cf:51:32:40:43:62:44:70:69:70:e6:00:90:ef:b1:
e8:d5:98:be:f3:5a:cf:3f:0b:e3:6c:b5:da:58:19:16:c4:e6:
47:5e:6f:e3:93:bf:df:98:39:6f:88:e1:3e:79:28:40:bb:f9:
59:1a:fb:16:11:a6:88:43:d6:62:da:3b:88:dc:b9:b9:d3:9b:
88:60:f0:71:97:46:dd:21:16:15:a0:ff:10:a5:34:06:b0:d8:
b3:3d:08:f9:17:0f:1d:28:88:a4:c6:d8:09:9f:d0:45:8d:d5:
e7:9e:74:fd:aa:2d:fb:2d:80:8d:27:00:7b:e3:d3:cc:a6:65:
32:f5:45:e1:c0:04:a0:e9:a0:b4:8b:ff:18:06:fb:84:a3:86:
fd:b5:97:3e:b9:fe:60:48:68:ca:2c:ef:27:a1:74:d1:6c:58:
37:b3:f5:84:e6:45:0d:7e:e8:15:98:90:fd:d6:bc:6f:d1:98:
f0:07:94:a0:28:22:21:90:de:d2:be:e3:f4:67:f3:b5:88:65:
ba:4a:cb:f1:b8:6b:be:49:70:97:e0:e4:95:5c:38:9f:aa:72:
66:c5:7e:18:69:30:40:96:0d:b8:f3:57:e3:f6:9e:8a:ca:b3:
bd:7c:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:00 2025 by rpki-client