Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa
File: bfb37e32-2356-3716-b3a3-042ad3762687.roa (raw, json)
Hash identifier: c8uZoHh0hTzpAab+/b3Zxqidu0Evv4kRVfhNPzlh3m0=
Subject key identifier: 7B:C4:A3:B0:04:13:5C:A2:09:11:7C:18:D2:04:B3:E3:14:BC:49:1A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581907F76ED7C88203DDF98
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 40306
IP address blocks: 70.41.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:90:7f:76:ed:7c:88:20:3d:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=cd0f55ea-e18f-4768-bcbf-56ef6a7aff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:56:bd:e1:94:12:ed:7b:52:1e:58:da:6d:
5b:b8:74:cf:57:8b:bb:4e:c7:d5:85:87:16:8b:02:
ff:c6:69:7b:3a:47:78:b3:09:f8:22:94:78:f5:1f:
f8:41:94:9f:c6:4e:e6:53:04:ad:d7:25:c9:0a:81:
74:65:e3:e1:05:65:bc:58:e6:15:a7:51:09:58:a1:
ed:14:a0:96:33:6f:1b:65:41:91:ce:b3:39:d4:9d:
2d:87:2e:d5:cc:93:96:e2:20:fb:8f:8e:73:69:05:
5a:52:e2:bf:a6:c5:d1:c8:19:be:26:0a:56:f9:d6:
d6:91:d6:76:22:ab:aa:a3:34:68:dd:6c:b1:02:e5:
d5:04:59:d1:29:43:31:d8:2b:8c:62:90:9d:c3:cb:
fa:6b:cb:83:5e:c7:94:a2:0e:48:a2:e7:41:97:e5:
59:28:c8:74:43:5b:d0:23:28:a3:12:5d:3f:c3:80:
4c:e9:6a:c8:82:fe:6b:7b:9d:c6:16:0d:7b:6c:19:
37:cb:5a:e1:ac:ec:5f:4a:2b:b8:90:9b:d1:59:a8:
86:0f:3f:6d:11:17:ec:98:89:6b:33:d2:37:65:66:
36:7f:dd:36:e5:dd:c5:b6:e7:a2:01:fa:34:58:37:
26:fd:09:2c:c5:0e:ab:1d:a7:23:2b:20:93:99:c5:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:A3:B0:04:13:5C:A2:09:11:7C:18:D2:04:B3:E3:14:BC:49:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a9:67:7c:ea:62:a5:1b:c9:44:ad:2c:6a:42:48:78:ae:5f:
ff:79:61:5d:4f:0f:da:4d:14:25:85:2f:c1:7b:56:0c:3e:fb:
07:35:b6:75:d8:09:79:2a:50:f6:aa:37:bd:68:b9:be:67:3a:
e6:89:62:69:fc:ec:34:46:e1:08:27:eb:db:10:e9:e7:8b:26:
78:e7:c6:89:bf:81:99:e1:4d:57:86:d2:cd:a6:11:28:ec:1e:
57:55:55:4e:1e:82:12:ff:c2:14:4e:46:52:42:94:ea:9f:e1:
f3:04:b4:f1:84:47:6c:f0:42:b3:d7:3e:2b:56:e5:64:d8:bd:
70:f1:49:aa:6f:bb:2d:6f:74:70:56:54:30:d7:e4:55:eb:47:
19:85:33:3a:19:7b:c0:05:91:7a:84:dc:4c:7b:b5:e3:c3:75:
55:60:96:8a:68:45:0c:ec:c2:3f:58:fe:a7:3c:40:fc:e0:65:
25:61:3a:df:29:95:12:06:80:2f:fb:22:45:c2:d2:6e:90:ed:
b7:6b:f7:4f:7e:f1:d3:b7:0c:af:20:43:a4:19:44:26:a5:ca:
6e:74:f2:16:24:d2:58:bb:0e:1d:69:10:7e:19:84:48:d3:c0:
1e:27:2a:34:2b:8c:20:43:0c:e7:33:3b:0d:e2:ed:68:c9:3b:
b1:27:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:29 2025 by rpki-client