Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5fa2f3-5dd5-3988-8f5f-f92e5d35a32c.roa
File: db5fa2f3-5dd5-3988-8f5f-f92e5d35a32c.roa (raw, json)
Hash identifier: 8UCPVxuv8ivHyUuW5mMcyQuTYb6TkC0Uq2MLwbjmi2g=
Subject key identifier: A4:02:9E:87:FF:E2:40:1D:1C:5D:38:D0:D9:BC:40:A1:D1:80:3C:2C
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C5811F9F570A557413A8DE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5fa2f3-5dd5-3988-8f5f-f92e5d35a32c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 75.105.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:1f:9f:57:0a:55:74:13:a8:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a115dcf8-6f3e-4feb-82e7-6ef787dd5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:d5:5c:02:05:1d:a9:64:1e:22:14:dc:47:
c6:2f:44:31:4a:7e:3d:29:4e:12:e1:00:f6:15:d9:
04:99:39:ee:f5:dc:ff:59:2b:7f:3d:2e:84:b3:22:
ef:11:d4:b9:9d:55:ce:c7:e7:7b:f5:5d:1b:65:c0:
71:04:0d:2b:77:db:e6:7f:54:41:25:8f:28:ec:51:
c2:c4:c1:04:90:52:29:36:5e:be:82:64:2a:54:66:
a6:da:93:f2:49:27:68:85:47:af:c7:7e:8a:a4:97:
c3:08:c1:b3:69:0d:be:1a:a5:75:a2:23:79:96:81:
f6:0b:59:c2:a0:b7:97:d1:ee:14:64:af:15:0b:ec:
b3:ec:29:1b:22:93:80:6d:86:21:3b:20:d0:bf:27:
db:92:ef:bc:ec:92:0c:f7:f3:cc:5f:5c:0b:08:fa:
d8:7c:03:3a:2e:c3:d6:7b:18:48:4e:fb:da:b2:b0:
45:af:ec:9d:3d:8c:0f:55:98:6c:c8:b3:29:4b:6a:
8e:af:85:52:26:c8:81:e6:4b:bf:95:24:e1:d7:e0:
cc:03:21:16:0a:f3:a2:9f:ae:c9:d7:84:f9:96:39:
b8:4a:14:d5:0f:c9:bf:57:83:40:8c:1e:55:51:05:
c3:af:2d:10:51:81:1a:ed:15:19:31:9a:94:04:9d:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:9E:87:FF:E2:40:1D:1C:5D:38:D0:D9:BC:40:A1:D1:80:3C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db5fa2f3-5dd5-3988-8f5f-f92e5d35a32c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.105.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:33:1a:a6:ca:05:97:41:37:3e:9d:ee:fa:8d:44:85:24:fc:
28:13:36:00:4d:5e:d2:39:90:dd:20:82:97:7c:12:b9:9a:a2:
70:c8:3d:76:78:99:55:60:4e:f4:fb:49:16:d4:53:a7:6d:3d:
a1:04:03:65:86:15:66:e2:f1:99:3b:20:52:ce:b6:25:2c:8c:
51:61:65:ad:28:80:ae:c2:e3:33:3d:ed:62:94:08:12:3b:6e:
ab:f1:ab:7d:31:3c:03:9d:7b:25:bd:36:d8:80:4e:b0:4a:f7:
6f:a8:36:d8:2f:36:f5:c2:74:9a:48:c9:aa:20:48:7c:f7:80:
06:a4:f5:e2:66:4c:b6:2b:17:9d:fb:cb:c1:71:55:fb:92:04:
b8:ac:75:ae:9a:ea:7d:c3:fb:6e:96:db:d1:e5:a9:01:da:11:
70:ef:3d:40:92:04:d1:89:74:c0:0b:f6:d7:97:52:03:4b:5f:
f9:f8:79:fa:88:ce:9d:3f:ae:e1:ed:b0:d4:66:80:ba:27:80:
54:af:4b:27:6b:80:51:eb:0a:d8:22:74:d9:89:ed:b8:c0:a0:
4e:50:4d:fb:82:10:2b:ec:50:2f:b7:87:86:d2:ae:22:c3:95:
1b:26:e1:b4:51:6e:52:22:6d:9a:39:5e:9a:8b:05:b4:6b:7d:
a3:1d:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:18:18 2025 by rpki-client