Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa
File: d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa (raw, json)
Hash identifier: n6ElS2eQcoXRx2bCcEnDWgtm5vjcY0BoqbFyWIdhmfs=
Subject key identifier: 85:8C:29:EA:3D:8A:07:95:93:94:B5:47:CD:77:72:3B:A2:04:98:27
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58148DEE7095BBDEBE271C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.243.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:48:de:e7:09:5b:bd:eb:e2:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=91250bea-9d7a-480a-a4bd-e965286c0727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:66:46:43:73:ec:db:c9:26:67:ee:69:de:
71:dc:ea:b2:67:8a:a7:bc:ac:b8:58:f8:29:e7:12:
ee:09:de:19:6a:8b:08:78:c2:2d:4a:f7:1c:90:3e:
dc:0f:56:8c:b0:2b:d4:5f:3f:2f:cc:e1:b5:81:04:
0a:cc:74:1f:58:a5:d0:f4:a6:d0:47:8c:fa:ca:7a:
da:cd:27:f3:ab:9f:6d:07:7a:15:03:b3:7e:9f:c0:
a3:ca:a0:7f:77:38:fb:3a:02:45:d6:c7:7f:88:12:
96:09:00:13:1f:f9:9b:71:6f:b1:af:13:9f:27:33:
f5:18:2d:70:b0:0d:6e:b7:28:67:81:c2:b8:c9:bf:
03:6c:73:81:fd:5b:41:c3:8f:cd:da:86:75:07:c1:
b7:f2:6c:64:a1:c3:2d:88:2a:05:67:70:08:05:95:
a3:77:35:4c:28:6d:bd:d1:d1:66:09:40:e5:a1:08:
09:6a:6e:bb:02:c4:f7:3b:c6:b4:25:5d:c2:41:2b:
f9:6f:36:9a:ec:24:3d:50:27:63:60:44:74:e5:8e:
16:f8:fe:19:37:82:58:9a:e6:41:5f:68:29:e9:3e:
6d:8c:68:6b:f3:9c:13:97:aa:02:38:90:75:9d:85:
3c:fd:b7:ca:40:3d:a0:35:ad:c7:b0:7c:d3:e6:1b:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:29:EA:3D:8A:07:95:93:94:B5:47:CD:77:72:3B:A2:04:98:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7e5cf07-48ae-33b1-b40b-858d96c269ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:16:46:c9:2c:32:16:9e:f3:4d:ea:87:b8:c6:ad:f7:63:fa:
7f:0b:ad:1d:49:86:07:88:3c:02:a1:47:c6:44:49:2b:df:cc:
ba:5b:f0:0a:29:d6:53:dc:76:3e:e4:ab:a5:03:50:a3:ce:c0:
38:d5:be:63:de:cf:62:f0:1f:55:f6:e1:06:cb:ce:9e:14:2b:
46:b0:eb:58:3a:ee:57:53:be:2f:ef:9e:ea:b0:6e:60:61:f1:
bc:34:8e:cd:be:86:8a:47:bf:96:a5:39:28:ad:d7:92:96:0f:
1f:5e:4e:7a:6e:c1:7e:0f:5e:42:25:a8:be:91:67:a4:6c:e0:
c7:ec:55:41:f9:86:69:86:3d:83:8e:a0:b0:43:e5:59:32:f0:
b2:d0:03:9e:c8:9a:b3:f5:db:38:27:d6:c4:77:6e:42:31:5f:
92:ea:5c:22:25:48:59:ab:c6:9e:ca:95:12:c0:ec:16:8d:c1:
f7:67:71:ab:e4:c5:c2:d8:67:0d:97:77:69:49:52:95:ed:d2:
b7:16:25:71:49:19:ac:73:f9:4b:56:06:4e:50:4d:25:b3:97:
5a:fd:84:3b:31:38:f5:c0:af:f3:ae:d4:4b:68:9e:4e:ae:a8:
7f:91:fc:94:38:c0:cb:15:aa:23:4b:b6:57:d0:ac:17:b5:01:
f6:ad:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:20 2025 by rpki-client