Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa
File: bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa (raw, json)
Hash identifier: r0Arr+fS1GtFySLXYts4+1x5mYZxfSRuohk3gZ9FmZc=
Subject key identifier: C1:A4:D7:1F:6B:12:F6:DF:6D:BE:6D:47:DF:94:B8:E2:D7:25:51:29
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5814E4E80FDB0EA8AB00300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:4e:4e:80:fd:b0:ea:8a:b0:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f1ec89af-4ba9-4bc2-aab4-428f05e9ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:1c:99:d6:5b:c0:f3:e2:c2:fe:a5:de:e0:
71:42:50:21:8a:ba:59:23:c7:73:43:76:26:59:27:
52:f1:93:bc:97:55:70:3e:e2:0d:0b:06:7d:1c:a1:
a9:49:f8:46:26:29:81:7e:01:00:a0:75:ff:f3:61:
c9:a8:79:52:4b:41:14:c3:2e:d5:3a:15:ae:bb:79:
f9:52:a9:72:32:1a:9d:df:e9:4b:2f:3b:c4:9f:f8:
90:8b:3c:90:5b:c6:ec:e3:8c:f5:53:45:66:b7:bb:
08:a8:c9:a2:a9:9d:55:31:78:ed:fd:24:2d:4b:14:
5e:6b:b1:e0:7d:07:9f:4a:50:9c:78:9f:75:98:0b:
c8:6e:8f:06:13:ea:f8:7d:89:fd:d0:ad:5c:9c:ca:
38:6a:f0:77:92:94:79:d9:f8:db:1f:e6:bf:4b:3e:
60:fa:f3:26:47:72:be:c3:8e:2a:bf:1f:0c:81:ce:
95:68:88:39:90:81:1f:ad:1a:e1:f1:23:b3:1a:bf:
ed:35:30:25:c8:7f:f6:a9:a7:9c:91:37:82:d2:3f:
6b:22:48:b2:fb:a3:d6:4f:a1:45:2f:d4:f2:dc:60:
5f:2c:64:fd:4b:75:95:33:04:53:3a:03:8d:1e:70:
b5:d9:f8:53:ac:d1:46:0d:9e:99:b7:1d:b3:7a:60:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:D7:1F:6B:12:F6:DF:6D:BE:6D:47:DF:94:B8:E2:D7:25:51:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ed:f6:39:bf:64:76:7a:60:70:97:1b:fb:fc:8c:eb:6f:fb:
76:a1:0f:d3:ce:c5:e4:7b:3a:6d:a9:bf:ba:85:3a:01:74:dd:
2d:fd:e4:9d:d2:92:81:ea:41:04:4e:45:b9:d1:e3:75:58:12:
e5:c1:bf:a1:ec:3c:f1:71:c2:a1:fe:88:28:97:08:2e:b4:c3:
a2:58:25:d8:b1:78:50:b9:24:de:23:5d:a9:96:a1:d2:9e:6c:
16:f0:20:41:00:b0:ac:9d:04:4a:46:f6:df:72:2c:ed:1d:e7:
7c:8c:98:61:bf:67:06:b5:03:93:f9:7f:e3:6d:65:72:68:f7:
89:11:7c:6c:7a:9e:1e:c3:b8:17:2c:f8:d4:4b:08:49:74:c7:
cc:a4:6d:94:7a:58:88:53:fa:bf:35:93:22:cc:53:4a:8e:fb:
ba:fd:06:30:c9:be:1a:84:43:e1:f8:99:01:65:0f:c5:d2:98:
e3:e0:01:fa:4f:f7:ce:72:68:3c:17:d7:69:dc:13:3f:d1:22:
fa:7d:d3:9c:b3:29:09:30:75:06:5b:90:23:03:64:b8:50:13:
83:72:f9:ad:95:a4:8d:58:76:53:30:b3:f4:04:49:ae:db:30:
17:dc:9d:92:f5:0d:70:64:64:51:b1:d7:8e:f3:fc:65:aa:f0:
03:f8:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:34 2025 by rpki-client