Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa
File: ad760d84-9ad6-391c-8399-873dafb9d352.roa (raw, json)
Hash identifier: uoId1wfohi39fBrwHGnVX1W4SqnyKs0Q86AL3egeIBI=
Subject key identifier: 12:11:57:83:B8:F9:6E:54:DB:BB:2C:78:86:15:4E:FC:9F:F3:BD:0A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58146298CBD3F3F903235E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:46:29:8c:bd:3f:3f:90:32:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5fabb0a4-2c6c-4f7f-9301-46995a9b3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:08:3e:21:50:b5:1f:dc:df:f0:ba:7a:8d:
e8:3a:90:7e:14:5f:a8:7e:3f:db:ec:09:42:48:a2:
fa:47:36:37:d2:64:e1:5c:d2:2e:f1:4a:d0:68:10:
fd:b7:75:0c:ef:11:52:07:23:77:82:d3:5f:dc:3f:
0c:02:8f:42:78:7b:94:7f:ea:36:9c:11:25:e0:7e:
ee:ac:c5:1f:d8:e1:78:c3:aa:12:61:09:b4:4a:0d:
64:8a:82:6a:30:69:92:ff:db:d2:c8:53:41:b3:e2:
f0:0a:cf:d6:8d:fc:45:e1:85:39:dd:fb:00:3e:42:
29:33:14:9d:be:c1:b5:1f:af:91:e8:6c:99:66:65:
cc:ca:f7:75:0b:93:fe:a6:3e:b7:6d:30:2b:62:75:
7d:bf:f6:0c:28:cc:2f:5f:94:4e:32:d3:b7:6b:9b:
11:da:26:d6:ff:d8:aa:60:29:60:4e:ff:2e:9b:1b:
69:63:c6:80:98:53:69:b4:a7:01:5e:91:6f:45:c0:
99:6f:69:74:e8:3a:3d:09:3b:43:76:1f:21:0c:cf:
9f:9d:2d:f6:78:dd:2b:29:15:b3:84:89:bf:da:94:
23:95:08:95:7e:70:4b:aa:bf:03:ea:25:96:cf:0f:
db:5d:c2:d5:9a:2e:4f:e1:63:6c:b9:e6:a3:44:a9:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:57:83:B8:F9:6E:54:DB:BB:2C:78:86:15:4E:FC:9F:F3:BD:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:9e:15:ae:b5:b1:d8:12:88:18:b8:85:c9:b7:a2:e0:27:be:
00:a4:9e:18:b2:86:11:b5:c1:cf:50:b1:63:ad:d0:4a:ad:b6:
c9:73:08:c5:49:b2:2b:d3:28:86:20:b7:49:50:e6:22:34:81:
04:e0:fd:ca:a2:3c:81:00:bc:c0:0c:70:1f:c2:9a:6e:34:a4:
6c:ed:51:4e:95:1e:51:62:df:d4:e6:43:49:fb:cf:4e:0a:62:
49:84:bd:63:1e:fa:45:24:8d:c8:39:96:3f:2a:54:ad:dc:83:
b1:b8:56:04:5b:64:79:51:e1:68:0f:1d:ab:51:e1:24:94:0e:
d3:fe:ec:e5:bd:fa:01:71:db:52:b3:40:e0:7d:8a:d5:ba:da:
23:a2:e3:8e:2d:0d:de:43:1b:e8:42:17:98:7b:ec:60:0a:77:
77:37:93:c4:75:fa:f9:c4:06:b4:f5:83:52:95:f2:3d:af:5c:
dc:02:55:99:dd:0a:a9:2a:65:16:a2:0f:65:c3:72:c9:2b:2a:
d0:59:e2:a0:d3:76:3f:3c:a6:4a:9b:93:7b:80:cb:f9:41:81:
f8:bb:b3:40:1b:b6:a7:be:b3:ee:57:29:b4:e2:03:e3:90:db:
cb:16:8c:96:1b:19:43:8c:c7:d3:f0:54:9c:46:50:7f:22:05:
e8:22:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:32 2025 by rpki-client