Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa
File: a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa (raw, json)
Hash identifier: tPNi7YXDYXu7lkG0nAuVH5zbQZ6nQaDT2v+QN2+ndm4=
Subject key identifier: E1:17:95:FF:75:2F:81:DD:1F:5C:8B:71:A6:90:CF:7C:DE:5A:53:AB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810B7827BD6F25B988D680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0b:78:27:bd:6f:25:b9:88:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1466f102-ecbf-4b80-972a-0c70f51fcd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:07:bb:c1:ad:b5:08:3c:e1:6f:3c:71:bc:
22:81:cf:5e:9e:c8:ae:d4:d4:53:a9:7d:34:26:40:
3b:45:f9:31:d1:85:9d:9e:2d:80:03:02:bc:0f:07:
ae:a0:c9:40:ae:69:ef:84:62:49:ab:1d:42:d4:2d:
ab:e0:75:ff:d5:26:39:00:6f:13:af:f4:8b:83:ec:
38:7e:c2:73:cc:83:bf:89:a7:3f:ee:1d:26:0f:09:
3e:4f:a9:82:49:79:ed:96:5a:af:b8:41:2e:d2:a6:
e9:d8:69:0b:c0:20:a8:7c:eb:7a:fc:77:4b:c5:c9:
7a:ff:3e:5d:98:be:84:77:e2:06:33:a3:c7:b3:ad:
ce:9a:82:9b:29:88:e5:d0:a2:34:ef:c3:20:c4:b3:
7a:fb:3e:66:c0:eb:98:92:36:02:f0:4b:63:5b:4b:
54:22:56:aa:f3:53:a7:fa:34:4e:b9:dc:a6:9b:52:
67:89:42:bd:c5:39:b7:be:f7:c6:bd:b6:a3:5f:81:
45:9a:ff:38:c0:c8:26:b2:f0:18:14:3a:d7:36:3c:
e6:07:c1:2c:e2:b0:6b:0d:8f:0d:d6:48:83:1b:e0:
cf:21:c8:46:43:6a:1d:80:5a:f4:7d:48:dd:57:97:
5b:84:10:72:7f:10:16:39:6d:3f:e5:29:93:15:a2:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:95:FF:75:2F:81:DD:1F:5C:8B:71:A6:90:CF:7C:DE:5A:53:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:ef:cd:a0:b8:39:8d:70:3a:05:2d:0c:f9:81:a1:a3:2e:14:
3c:c8:06:d5:eb:b3:5a:07:a3:25:2f:ad:4e:3c:a4:24:56:ab:
01:f9:68:2e:70:4d:ca:d7:88:38:a8:af:0a:d5:73:36:65:28:
a1:56:62:b1:39:f8:45:7c:45:cd:b1:88:d0:d0:cc:57:81:36:
d2:9f:8d:a8:1d:03:06:37:ef:9c:c8:e9:13:77:29:58:0b:ff:
53:78:01:1d:8f:1f:c7:d2:33:04:74:7f:04:33:c4:69:ff:4d:
eb:03:dd:64:39:c5:12:ae:4c:33:f7:f3:04:94:bc:cb:da:8f:
22:4b:39:3f:bc:64:d9:fd:27:31:8b:ee:af:68:41:8e:ac:2e:
42:9f:c6:a1:36:55:41:05:c7:00:61:c0:5c:7b:d2:4f:22:2e:
80:a5:5e:ff:6a:89:4b:9b:32:4f:8a:01:dc:ed:bc:03:8d:c8:
98:65:c5:f5:67:2f:6a:69:b0:c7:d7:f8:21:e4:2a:97:ff:ad:
17:ef:34:16:56:ad:3c:0f:a3:e6:0b:28:30:63:95:63:c0:be:
f8:8d:a8:10:fe:6e:db:ac:6f:67:94:c0:08:e2:49:64:0d:93:
f8:23:96:a5:59:d8:e1:2f:3e:59:1c:f8:c6:d3:d8:13:b4:17:
54:c8:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:04 2025 by rpki-client