Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
File: d197b3d6-542b-36cb-baa2-2b0446a590d4.roa (raw, json)
Hash identifier: x8s9ZBX8VMrKta/pRmzxtGl4Bo6q3IeBpfmF6Cro8Ac=
Subject key identifier: 29:7B:CE:A5:1F:FD:B2:A8:B7:A8:7F:1F:33:AF:18:A8:CE:0C:85:57
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5819F8EE5B7F66EAB8510C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:9f:8e:e5:b7:f6:6e:ab:85:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4551c467-b753-447e-b948-9ad8bcd2379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:bb:f7:c4:31:d0:19:9d:f0:74:d4:de:cd:
9b:28:28:f1:4d:68:9e:4f:3f:be:9f:a3:39:7e:18:
a3:c7:ef:67:68:60:85:ff:15:06:71:b5:e9:3e:74:
42:7f:2d:dc:69:a9:8b:26:fe:eb:ba:8c:3a:35:97:
aa:a6:ec:16:27:1a:f2:a1:f7:51:13:16:8c:f2:1b:
56:6a:12:e9:dc:18:f4:0d:ff:fe:3d:5a:f7:9f:f0:
61:ba:fc:9a:5f:cd:16:58:50:c7:cd:0d:0a:c8:32:
e5:b9:f7:01:41:80:96:60:b5:c0:aa:37:fa:11:df:
a4:3b:e7:e4:8c:82:fc:57:71:3f:23:00:b4:fa:83:
9d:50:04:77:32:d4:ac:a8:e2:84:8a:79:08:90:76:
e2:3c:73:d6:e9:6a:9b:6b:2a:06:89:02:2a:d3:d2:
eb:c5:d5:e5:4b:60:c3:72:8b:74:c3:6e:9c:7e:0f:
b7:91:11:5b:3d:0c:f7:34:f3:c3:c0:ff:41:8e:4e:
a2:85:4b:d3:b5:5a:83:fd:13:65:ee:6c:bb:77:27:
25:32:17:d1:cc:a8:19:1a:d9:07:dc:0d:14:ec:b5:
2b:7e:1d:fa:3a:11:11:2d:6c:29:35:ae:6b:6a:38:
43:8a:6b:8e:72:fd:6a:38:34:1a:f1:15:77:82:68:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:CE:A5:1F:FD:B2:A8:B7:A8:7F:1F:33:AF:18:A8:CE:0C:85:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:14:1a:b9:17:88:cf:ab:f5:1d:18:ac:e1:3b:b7:c1:cd:47:
34:ea:c6:91:37:7b:28:d0:ed:48:c9:22:e6:bb:ef:e4:29:a0:
7c:5f:6a:9f:ed:f7:d7:48:59:4d:27:e8:c3:9c:db:d4:e1:04:
ae:a4:c9:e4:a1:47:5d:a2:b2:be:fe:55:38:cc:55:c5:c4:85:
21:9b:2d:f7:98:37:4f:91:a7:7c:f5:6f:82:4f:14:a6:a1:b3:
c9:6d:e5:2c:66:66:0c:17:d3:75:1a:7e:e0:e8:f1:fa:b3:0d:
74:e4:7a:e4:e9:d5:6c:76:0c:c2:37:50:c5:46:ff:53:03:46:
f0:07:7a:59:47:6f:29:3a:ce:5a:81:d9:1f:26:88:27:8e:21:
79:20:e0:4b:28:46:c7:c1:8f:d2:8b:b7:de:1d:a5:40:73:71:
4f:72:65:af:79:9d:89:51:6a:3a:17:2c:d1:1f:30:f2:03:fa:
1a:04:7b:82:16:54:c7:9a:71:cc:f7:f1:70:ad:78:b6:d2:53:
4e:4e:1c:2a:72:ca:3d:56:99:15:f6:33:d6:7d:f7:c7:ee:62:
de:ba:86:32:d1:f3:26:fa:eb:53:2b:21:b7:f0:d1:2f:70:b1:
4a:76:0a:6c:80:45:88:92:c2:6d:04:5c:9f:dc:5b:6b:e0:e9:
bd:c4:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:41 2025 by rpki-client