Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa
File: c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa (raw, json)
Hash identifier: Ma0nucshO0sq2WAd1J7n414IrggBWyN73N+/dA+65tU=
Subject key identifier: 9B:74:A3:BA:5E:52:AB:B7:B1:1F:1B:3D:F0:B1:33:84:83:AD:0C:10
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581D56F9AE497D922B8D700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:d5:6f:9a:e4:97:d9:22:b8:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4faed1ce-b367-442d-af05-1c8f332eefa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:69:f3:47:fe:fb:3b:e0:ec:c4:5f:e3:05:
bb:80:5b:ea:20:05:09:bd:b5:d5:03:dd:94:80:dd:
7b:e2:53:97:5a:85:f3:81:48:24:14:07:ea:79:25:
54:3a:4a:95:4d:33:07:71:3e:35:fb:e2:49:8b:0e:
ab:d7:58:42:ef:c5:e1:12:49:26:bd:69:7f:c5:47:
8a:36:ba:ca:1f:ab:1a:38:e8:de:e0:88:b6:05:89:
84:65:97:e7:69:29:10:99:59:7c:e2:f1:84:ca:5d:
96:c0:2e:d1:a4:14:7d:66:e0:94:e3:7e:a9:af:23:
1d:20:70:80:e0:ee:c1:77:0e:28:c7:de:0b:34:e4:
2e:31:ac:9b:b8:88:2d:03:6b:9d:5d:b3:16:69:18:
da:9f:e0:f2:54:0c:a6:c5:83:7a:7f:02:c2:5f:a2:
e4:cd:b7:09:61:d8:78:53:5c:48:b7:4f:33:60:4f:
25:44:bf:d3:3e:32:24:59:6b:13:8c:b7:f5:ce:31:
4b:17:a2:d7:11:9c:50:1a:14:c0:0a:c9:92:97:5c:
e2:37:58:01:9f:47:e5:92:9b:ed:36:97:bd:07:3e:
a2:3f:5b:25:38:ec:b0:50:c4:e4:b1:1b:a1:bf:be:
0e:cc:1c:f5:f2:07:5c:6c:93:b4:2f:7d:28:b3:dc:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:A3:BA:5E:52:AB:B7:B1:1F:1B:3D:F0:B1:33:84:83:AD:0C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1ab7ccf-4c1c-31e9-b08e-e0e3b126240a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:09:d3:69:a6:55:a3:f3:72:24:48:2b:4b:b0:e0:5c:45:8f:
33:10:dc:8b:dd:ab:49:3c:06:f5:9b:a9:55:94:c6:d9:9d:43:
9e:22:45:55:aa:37:3e:d7:f8:af:6f:35:fc:b4:cc:43:40:5c:
bf:f5:4e:07:a7:d1:a6:9c:30:7b:b6:ac:3d:5f:5c:78:48:72:
23:d3:ae:02:b3:ec:1c:16:9c:2f:fe:4b:d1:fe:0e:18:09:ad:
53:9e:a9:52:c9:3b:fa:7d:aa:e0:d8:ee:d0:39:29:8a:7e:d7:
69:e9:66:7f:1f:0b:c0:2d:44:cb:49:80:f2:e9:44:ed:7a:aa:
ac:e7:be:25:23:9c:d3:3d:36:4a:d1:7c:4d:81:b0:67:68:cc:
61:5a:00:56:63:a4:09:04:ab:b2:77:02:2c:d0:66:e3:b5:77:
ad:c6:ca:d6:44:99:d5:92:e9:05:c8:7c:a0:8a:ab:eb:30:72:
51:db:e0:54:a0:d9:9e:33:f8:50:5c:1c:ab:e8:4e:2f:33:44:
3c:a1:3f:dd:be:1a:85:4a:b1:1b:85:1d:22:15:57:f2:81:c8:
9c:b0:4a:70:c9:aa:cb:88:0f:da:ea:bf:85:99:f7:d3:d2:7f:
21:d0:ba:bd:21:61:8e:57:6f:e7:3a:1b:52:8a:14:e0:b6:bb:
d1:a7:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:20 2025 by rpki-client