Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa
File: ad46bc04-ac23-366a-a4cd-abe806940a1d.roa (raw, json)
Hash identifier: pTVqEh6vmCMpcbXE6ZQ94OIpSt9f7WzURhkUn/+Fko4=
Subject key identifier: 98:0F:EB:CB:C6:98:B5:CC:DD:51:0A:66:85:86:D8:3B:1C:1B:E6:5C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581967DA033D38ABC595D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 70.41.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:96:7d:a0:33:d3:8a:bc:59:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=389afb4b-dfd3-4e35-b4d8-b03a388c4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:e4:1f:2f:03:25:38:15:1e:46:89:ab:cf:
bb:ff:65:67:26:d5:a6:b2:13:23:a8:af:9f:38:9c:
33:d4:b0:c4:11:5b:cb:f2:82:ec:3d:f7:76:98:32:
ae:14:6a:71:e2:36:c6:3f:34:14:3c:86:3c:0c:86:
7f:fd:01:f3:62:b6:41:63:25:be:a0:a6:ba:56:76:
76:7e:7d:cd:3a:d9:01:69:69:62:be:18:8f:fa:68:
a7:4d:4d:4b:e4:e8:26:6d:94:fd:ec:92:22:a2:ad:
b3:ad:3e:69:2b:32:3c:c5:a9:76:a0:59:ed:43:2f:
bc:61:cf:5e:a8:25:3b:81:eb:b6:4c:14:d4:a7:d6:
32:9b:4e:86:32:9f:f0:7d:a0:ee:58:91:10:73:eb:
72:73:d9:ba:c1:52:2c:94:0d:90:76:5b:cd:16:69:
64:61:bb:c7:2b:c5:ca:88:4d:60:2c:dc:c4:0c:d9:
3f:93:0b:47:38:a0:9b:07:50:4d:ea:03:9e:fe:93:
40:ba:81:32:51:ae:65:bd:7d:ec:3e:9b:0c:21:70:
d3:7c:de:83:03:b2:f7:f5:82:2e:ff:b2:c6:bb:e0:
9b:5d:1b:0c:93:e9:cc:93:97:c4:b7:30:67:f3:d9:
33:b3:fd:1e:9f:c4:a0:2c:0e:5f:97:a8:92:5e:66:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:EB:CB:C6:98:B5:CC:DD:51:0A:66:85:86:D8:3B:1C:1B:E6:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:48:54:f0:94:77:0b:98:09:7e:4e:fb:7e:3f:73:ce:49:74:
62:3d:72:dd:f9:18:76:a6:e9:65:d7:5a:79:4b:34:95:94:f0:
a1:78:91:79:12:67:8a:7f:09:41:5e:ca:24:82:37:0d:e7:47:
d8:a6:f7:07:80:03:48:6e:bb:64:9a:fc:ef:34:59:36:aa:82:
3f:a8:d0:a6:70:7a:46:98:34:c0:f3:3e:9b:02:04:4a:24:d7:
3d:02:0a:06:b9:5e:8a:de:3a:85:a3:d6:3d:d2:77:d9:75:c4:
e9:c1:2a:83:ff:16:32:b6:6e:ea:33:8e:60:a1:0e:e5:18:68:
5c:25:21:f3:27:aa:6e:86:fc:b2:59:ea:78:c4:2e:e3:f0:33:
8f:7c:76:2b:9f:29:d7:72:bf:d7:c6:12:31:ed:8b:e4:47:40:
e2:1a:e0:ea:8e:fa:00:d7:1f:be:f9:8e:b2:f9:f2:7b:65:75:
2b:3a:0c:b7:65:22:b0:bf:f0:84:79:bb:cb:a3:22:ab:c9:f5:
95:64:bf:24:9f:4c:e2:ba:e7:a4:b0:67:ab:36:b3:e7:39:8f:
67:4a:4e:4e:4a:43:7b:9f:d3:40:aa:6d:a4:7a:3d:d7:d6:58:
d5:b4:fa:9e:c6:b7:2e:48:ae:c0:be:e6:c7:d2:ea:84:8e:37:
01:fe:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:23 2025 by rpki-client