Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa
File: d47493d8-e41f-3519-b496-a2ab6504e2cd.roa (raw, json)
Hash identifier: MRw0uzlamDkO30dyYDeVqyC11nUZ/XR61wIW4HJRBOA=
Subject key identifier: 04:28:4A:F0:EA:60:0A:8A:95:7D:3F:C2:BC:6E:40:F7:14:F6:D0:AB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5810DCEA83DDDAEA6610580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:0d:ce:a8:3d:dd:ae:a6:61:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ef23c787-b8b7-45cc-84e1-7f59863e70a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:2d:f7:ae:cd:74:76:5f:74:f3:2f:88:31:
6d:28:25:7b:df:ff:97:65:83:cb:e0:f8:2e:10:4e:
5a:b8:3e:fd:89:42:fb:5d:94:db:70:6d:b9:01:84:
5c:c6:cd:04:fb:21:73:1f:6c:7b:26:13:88:a4:c4:
89:79:8f:45:e0:88:62:af:a4:e7:32:bf:74:34:e7:
bd:53:ed:39:f8:58:0d:98:89:87:3f:73:f2:76:34:
3a:ea:01:ae:ba:f0:8c:e4:a3:ad:37:4c:30:1f:8a:
1c:01:12:8f:80:57:b6:af:94:c9:e2:d4:2b:11:b6:
8e:b7:a2:f4:98:94:38:a3:d2:0c:26:61:b0:d8:c9:
c6:3a:35:9a:50:54:64:59:0d:23:7b:81:3f:68:65:
b3:67:73:7e:b1:ce:06:2b:d3:7a:9e:a6:00:2e:8f:
51:27:fb:16:99:23:91:06:26:20:20:6e:fb:7b:74:
d9:12:af:66:8b:4c:fd:1b:18:1e:fc:c0:69:c4:36:
7d:76:2a:63:25:1a:7f:89:5a:cf:64:ff:a3:85:e9:
9c:d8:da:b0:ec:72:90:df:b3:d8:7b:7d:eb:de:1e:
25:2f:82:5d:13:f3:2a:8c:84:60:30:17:e2:f8:b3:
75:8c:87:b7:c6:31:4e:ad:9a:55:0a:16:d2:39:0a:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:4A:F0:EA:60:0A:8A:95:7D:3F:C2:BC:6E:40:F7:14:F6:D0:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:22:99:6d:99:fa:ed:4d:66:20:a0:b2:5b:31:49:53:41:fb:
61:78:51:15:65:b2:81:dc:d8:ec:13:a4:c2:24:68:a4:88:da:
79:6c:cf:28:ed:48:8f:02:2a:51:c3:d0:00:83:aa:5c:dc:a9:
28:07:0f:93:c2:5d:6c:ae:e6:08:e6:a6:0c:eb:a1:51:6d:c6:
e9:13:85:ae:d0:ea:bc:69:0a:aa:f5:09:1b:6f:a2:0d:e5:10:
4f:44:d7:0f:2e:45:1b:3c:a8:72:9f:a7:63:6b:df:bb:9b:0b:
89:c0:7b:7c:f7:8b:9e:70:1f:ad:d5:a7:3a:a9:3d:8c:f6:e4:
36:f1:4a:d7:bb:d4:3c:17:f1:10:3f:e9:1d:a9:7e:65:3e:fd:
79:1a:97:38:5b:3a:d9:b1:03:f2:4a:a0:f4:8c:95:0f:72:35:
0a:9d:bd:20:aa:73:af:a7:41:5c:24:b5:d7:1f:db:50:9d:b5:
ce:e8:56:4b:0d:e1:3b:f1:aa:45:4f:6e:66:aa:f7:0f:51:fd:
ce:3b:f0:07:41:62:0a:54:eb:14:69:18:a0:47:f0:51:36:1c:
3f:95:99:3e:7a:05:a3:89:bc:d4:b4:02:4b:2e:2f:bc:ff:69:
2c:7c:79:2b:b8:91:42:a9:85:ea:02:8f:5d:5e:f8:10:e7:3e:
3d:73:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:09 2025 by rpki-client