Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa
File: aa39a6ce-2914-30d6-8ada-a97f77613312.roa (raw, json)
Hash identifier: ht1o4nEy6s0EQisrjxmm1Lj29z3SNl04cNuwrUB/G98=
Subject key identifier: 2B:B0:80:D5:B8:CC:67:74:BF:00:02:31:1C:78:AA:AE:CE:8D:ED:CA
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58142EFEEE95AF408BC9930
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:42:ef:ee:e9:5a:f4:08:bc:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a932823d-024d-4463-946e-40a1feb1ac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:ee:df:03:6d:08:01:fc:bf:3c:ff:30:98:
85:26:6c:ba:3c:1c:b9:30:2e:86:5c:9c:2b:80:b5:
19:f1:b1:c5:f2:ed:38:07:1b:f5:e4:d9:0c:af:1e:
b4:64:f5:11:06:78:ab:41:9a:2c:e1:67:07:c8:13:
6c:bc:1e:9f:5e:7a:5e:a0:27:57:5f:88:63:c1:4b:
5b:56:18:f9:be:45:68:e5:db:2c:71:01:8d:eb:a3:
9e:38:2e:45:03:51:61:7b:8a:54:27:34:d5:d1:a0:
02:5e:68:f6:eb:ed:33:76:f9:42:73:22:cd:da:98:
40:80:cf:ba:25:fd:08:ea:48:d9:0c:13:e8:1a:fc:
8b:78:21:61:bc:6b:44:ae:cf:ab:ab:41:82:a6:e9:
d3:3b:5d:f0:c3:e0:b5:34:66:a9:48:86:e3:04:f9:
2f:08:99:a4:bb:10:7d:23:4a:2a:da:6f:7f:ef:42:
71:51:2d:83:f0:31:bc:f0:7b:a5:03:d5:2c:f4:ff:
2c:1b:94:aa:ba:8d:8f:47:42:63:36:11:e7:98:72:
7a:c7:e2:db:84:77:c4:5a:61:2a:ca:9a:e5:52:af:
eb:3e:f9:8f:15:1b:a9:f7:79:2c:95:80:b6:2f:c6:
29:c1:b9:94:78:e4:71:37:3a:8d:05:43:a5:6d:5d:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:80:D5:B8:CC:67:74:BF:00:02:31:1C:78:AA:AE:CE:8D:ED:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:a0:84:9c:40:ec:b1:45:d7:03:fe:08:74:5f:6d:78:98:5a:
14:04:13:cd:87:9e:dd:3c:e6:87:9d:8c:1d:28:f5:cc:b2:63:
30:6f:51:43:7a:af:d9:ce:36:f3:42:ed:ec:6f:bf:08:82:9c:
93:68:4e:79:07:dd:08:db:8b:ba:75:0c:2d:18:ab:43:6d:4f:
14:6d:89:96:dc:31:51:7f:92:c0:ba:a3:54:47:a5:ae:23:e0:
ca:07:fa:45:46:1d:63:f0:f2:aa:d6:e2:1d:6f:41:6d:3d:28:
74:30:fd:a8:56:b5:56:ce:c9:39:92:6b:99:e3:42:2b:3b:a3:
6d:21:11:10:e5:58:99:db:96:a6:52:3b:93:51:6a:80:8d:73:
78:da:87:5e:f0:71:7d:4a:3f:bd:ff:b1:08:23:9f:eb:6d:93:
f6:1f:a7:99:94:f8:43:ed:53:5c:d0:f2:56:ac:f5:e9:52:0a:
47:e3:81:2b:49:ba:05:62:74:30:73:20:80:d3:e0:b8:2e:44:
3c:f4:7f:04:6c:f3:c9:86:b8:3f:77:ae:02:1d:d1:ad:13:46:
2c:50:41:41:3c:74:ec:ed:cd:3e:7a:d4:dc:3b:91:78:a0:9c:
78:b0:62:24:e3:ce:a3:fc:d0:57:39:41:88:0b:45:64:1a:36:
f4:71:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:55 2025 by rpki-client