Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c3db8c-3e79-3b71-9a21-01d6c0e5adda.roa
File: a9c3db8c-3e79-3b71-9a21-01d6c0e5adda.roa (raw, json)
Hash identifier: 7MTyyCGI8o+kX5ZDDHL/cklaLTba3ThMDbk8qEZQOss=
Subject key identifier: D9:FC:42:69:B4:67:5C:FE:9A:72:AE:30:4E:28:1E:06:3D:A1:3A:67
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D0855B965C990C5D94E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c3db8c-3e79-3b71-9a21-01d6c0e5adda.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 162.72.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d0:85:5b:96:5c:99:0c:5d:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=fc7586a2-2d0f-41ca-88ea-d574ef019144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:7e:68:07:d5:5f:c1:ba:6d:cb:7d:45:e0:
df:0a:05:c9:e0:6f:02:cf:a5:75:8d:36:1a:f2:38:
cf:4c:49:16:2f:66:d9:50:14:e1:18:2e:c6:33:66:
db:c8:e4:7f:ef:a9:c4:9d:2e:17:44:7f:65:da:59:
78:b1:c8:f8:ae:3a:1f:d2:f3:04:f9:fa:6d:60:37:
25:6e:b0:92:fe:fd:c3:16:3c:62:45:4c:95:3a:e8:
b0:32:22:c7:12:e6:d4:f4:42:5f:62:c3:51:dd:d1:
a9:4a:43:58:a5:03:99:45:d3:6a:5f:3a:ad:2f:de:
d6:32:25:b0:ac:f3:9c:39:e6:c9:ae:b4:df:d5:5a:
34:42:23:07:7e:47:c9:10:3f:f0:f1:38:a1:0d:c0:
ab:11:9e:02:16:7d:19:0e:60:f3:64:b4:4c:b3:30:
22:29:a5:b4:c3:22:e7:3e:ea:7f:0d:82:9d:cf:73:
e8:3b:a6:13:1a:0a:c6:ff:a4:26:64:96:8a:d7:38:
e9:65:c4:22:41:0b:43:e6:59:96:10:c9:87:d6:02:
7f:5c:7b:30:17:12:37:95:a7:d7:80:11:b1:de:ec:
ec:48:a1:c9:ed:ef:7a:df:b3:53:12:1f:7a:54:1f:
3f:a0:9b:0b:9b:95:a4:3f:5c:a4:bb:ec:a6:d9:d0:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:42:69:B4:67:5C:FE:9A:72:AE:30:4E:28:1E:06:3D:A1:3A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9c3db8c-3e79-3b71-9a21-01d6c0e5adda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8e:97:48:28:c7:52:73:65:fe:cf:39:aa:c9:4a:34:79:f2:
46:fc:21:84:ca:81:b1:5c:a3:e1:89:63:52:0c:6f:41:48:91:
23:7d:d3:87:11:7b:3c:3d:3a:ad:b0:19:9c:34:ef:95:c9:a9:
9d:45:b3:b0:6e:df:61:21:60:3e:50:20:0f:e5:6c:ee:55:da:
4b:97:12:9d:bc:7b:a2:f1:65:20:31:2b:b6:fa:ea:0c:d9:e8:
2f:2c:8e:42:31:72:d6:93:ec:06:da:82:a4:fa:db:02:77:fc:
29:4b:14:e3:0e:1d:ac:7e:7c:5f:64:cd:ba:04:8f:dd:04:d0:
f6:b4:b0:55:fc:16:e8:85:10:ff:77:9d:fa:09:3c:45:3f:d4:
72:dd:b5:f0:85:e5:41:dd:c5:11:20:c8:d0:af:bb:1d:3d:51:
d2:72:90:19:5c:23:1b:74:c1:85:d0:0e:00:09:57:a7:0d:bd:
91:16:10:b4:60:34:77:20:e4:92:7a:db:9b:62:6c:22:8a:c8:
ea:cb:95:75:89:b5:bf:2f:cc:93:cd:e0:88:c2:ab:09:6a:45:
72:bb:df:17:2e:a3:89:18:f7:44:cf:53:21:39:5c:45:48:d8:
c5:b8:d2:7b:88:40:ba:6d:6e:00:37:f1:eb:06:fd:ee:21:bc:
17:0d:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:54 2025 by rpki-client