Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa
File: bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa (raw, json)
Hash identifier: /6uu22i/h/L2R7eOwSO3tLJLWJCzagoE3qfcmU8gWYU=
Subject key identifier: 14:7B:0B:C5:CC:77:9D:29:9F:07:1B:BF:27:1B:3C:03:F1:DC:B2:BC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814F4A02C1E90AFC81F200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:4f:4a:02:c1:e9:0a:fc:81:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=49cb43b6-70fd-4b31-8a29-653bd491b3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:48:87:50:89:d0:58:f8:3c:dd:44:a1:c6:
c6:79:c3:8c:f4:24:b5:f2:54:a7:3f:9d:67:0f:04:
cc:eb:45:10:f6:76:f5:cb:7d:79:4b:e9:74:37:26:
78:cf:a7:78:e2:c9:e1:52:74:8c:42:b8:1f:30:a4:
82:be:80:7c:80:7b:48:fd:2f:64:ce:24:2f:01:9f:
6e:f4:6f:3e:31:85:b8:96:9a:52:41:cb:5f:ea:d0:
2e:db:9c:e6:68:2c:19:07:bc:4e:9e:66:6c:07:92:
cc:cf:31:a0:89:85:7f:ee:4a:49:dc:36:01:79:37:
61:20:10:82:fc:18:74:25:4c:fc:07:d4:c9:e3:e3:
72:78:80:5b:64:80:01:0e:bd:bd:46:b8:e3:24:54:
94:83:0b:c3:26:e2:9e:84:0c:57:af:ce:2e:00:a0:
e6:e6:5a:32:fc:5e:79:5f:7a:67:05:7a:2d:16:04:
e8:7e:3d:8f:60:2d:aa:d0:e4:7c:50:50:0b:ee:81:
de:c9:f5:d3:38:84:49:aa:44:14:d2:c3:7c:98:8f:
e7:54:aa:97:64:ea:69:1e:ac:82:88:6a:ba:20:eb:
9a:71:ed:d7:1a:49:79:7e:b0:43:37:65:7d:48:bc:
7b:24:bd:a5:50:e1:a9:42:1f:e6:ea:5f:8b:11:84:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:0B:C5:CC:77:9D:29:9F:07:1B:BF:27:1B:3C:03:F1:DC:B2:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bb3fa1de-32de-3305-ba48-5f16a7fc507f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:df:28:82:cc:5f:cf:0a:0b:69:0f:06:8d:9b:48:7f:64:1a:
ec:4a:31:7c:49:8f:d0:9c:bd:d5:c2:c5:dd:4f:58:80:0f:09:
a9:aa:b8:2c:3b:4d:56:fb:13:d6:8d:6d:4d:14:18:df:d0:bf:
bf:3f:c4:86:cf:74:c0:5f:38:8c:e7:3e:9a:68:25:89:f8:17:
00:e2:cd:a5:81:a9:db:2d:23:46:98:0b:e0:e6:1a:f6:64:0f:
c0:ef:b1:04:e7:72:7b:63:1b:5c:b7:12:1a:13:eb:ca:68:c3:
24:4b:2d:b5:fa:49:91:05:fa:0a:cf:2a:14:fd:66:3c:a6:a1:
64:a7:b3:39:33:7c:e7:31:e3:f0:e0:dd:b2:7e:07:28:80:e5:
63:e7:a8:9f:32:2d:e1:2e:5d:3e:4b:10:44:f5:3c:fd:33:1a:
7f:66:24:23:af:03:aa:54:6e:db:35:cd:ae:2b:63:8b:ab:c4:
f8:19:9d:29:a4:08:77:bc:28:1d:88:c5:51:34:b3:cd:9a:92:
7a:b7:8c:05:96:60:02:9e:4d:8d:e7:4f:df:84:2b:ad:54:56:
49:e4:e6:09:55:5f:bd:cb:0c:da:b1:66:8e:06:0f:29:e2:03:
49:a2:d3:81:39:1f:0d:21:84:0b:67:3f:f8:47:38:7c:5f:b4:
15:5e:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:55 2025 by rpki-client