Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
File: be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa (raw, json)
Hash identifier: MArBR8e+4UGpv82poGGogqurNn6i8WneobMIiqXEjTk=
Subject key identifier: 24:FC:82:EE:9E:EB:2C:7E:4D:C0:AE:01:04:EC:17:A8:6E:8F:D0:9F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5818FD7748EB0FFD6720200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 16491
IP address blocks: 75.104.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:8f:d7:74:8e:b0:ff:d6:72:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0765fd53-4627-4a82-ba52-be2434d38b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:bd:ab:89:22:4e:b7:a3:39:14:a9:eb:fa:
1c:41:eb:a4:b6:5b:44:e9:d1:a6:ab:b2:97:96:cc:
60:b9:fd:b6:69:08:96:e3:f1:ad:d0:32:d1:aa:a0:
65:ea:92:61:56:ec:52:0f:20:e4:f7:c6:38:46:38:
c4:5f:3c:81:a8:a7:76:86:1a:d4:aa:c9:d2:56:3b:
5a:d9:f5:00:44:40:10:ee:78:0e:24:61:66:f8:3a:
83:08:74:2c:a9:d7:c3:33:23:1c:46:42:10:2e:14:
0d:2d:36:6a:39:5b:b7:7e:46:c8:83:13:50:cb:fd:
47:32:6e:ae:55:6d:36:3f:af:ef:a9:3b:9c:8e:f4:
12:73:66:4f:de:2e:d6:3b:cd:74:07:3b:27:72:af:
fc:63:47:66:e4:34:2d:bf:99:40:46:cc:aa:e7:81:
38:7b:bb:04:d6:d8:55:d7:21:96:fc:80:02:ac:07:
6b:9f:3c:5b:17:15:29:68:46:53:d8:30:f5:ca:a0:
5d:25:4a:bb:81:7e:97:24:c2:45:01:54:4e:32:88:
f7:ff:35:72:cd:64:ce:f3:ca:57:84:fe:c3:04:b7:
a0:94:50:4b:63:9b:2b:44:79:a8:53:4e:81:9b:6c:
53:59:8a:eb:75:6a:99:ac:48:ae:91:f2:2d:74:c6:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FC:82:EE:9E:EB:2C:7E:4D:C0:AE:01:04:EC:17:A8:6E:8F:D0:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be97825c-6d11-3dc5-9ad3-3d0a473e596b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d4:27:af:7d:b0:e9:d8:6a:09:5f:dc:eb:4b:26:b5:c6:90:
de:b0:83:12:ea:be:10:83:19:b8:16:44:c6:a1:47:29:e3:6f:
43:9c:95:61:62:a3:97:a4:08:e9:07:c3:f3:a1:5f:69:7b:fe:
e6:1f:6f:26:c3:0e:48:71:22:7c:8a:df:7d:0c:18:55:33:30:
e7:93:46:53:74:46:5e:9c:70:49:da:80:eb:a7:1e:97:8f:85:
65:53:06:73:27:70:7e:5b:94:95:22:4b:5d:e7:0a:18:a8:0d:
0c:fe:8e:d5:7b:24:08:16:e8:3a:a5:60:aa:b2:a9:eb:ed:37:
05:f3:28:19:78:d1:4e:20:c9:e0:03:d6:ab:92:63:84:a8:d0:
c0:18:b7:eb:20:44:25:20:68:37:1e:1d:95:f3:d9:0f:94:bc:
78:da:b6:84:93:6d:fb:be:0f:d8:94:44:bf:b7:0c:35:5a:7f:
b8:1b:a0:95:ff:fd:d4:38:b0:c7:dc:fd:0b:59:97:49:19:69:
58:72:9c:98:79:8d:5c:10:fd:a9:6e:8d:e9:2c:bd:0a:65:77:
2b:d2:2f:f0:0e:a4:59:04:20:39:25:f5:cb:90:29:dd:c2:9e:
9d:c8:34:5a:d1:68:98:a7:80:93:e3:16:67:7e:ee:c3:7e:43:
c3:4d:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:42 2025 by rpki-client