Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa
File: e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa (raw, json)
Hash identifier: AZS76XDP8U6C5jO+BLl2AA2+98E7wDWx3WcI0klEkwQ=
Subject key identifier: 5B:DA:A9:8E:04:9B:1C:12:2D:BB:B3:18:FC:9B:5B:02:63:43:97:4D
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581DA3E2CB9FB410266B100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 172.242.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:da:3e:2c:b9:fb:41:02:66:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5cfbe07a-6927-4ff9-95af-ad632736200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:fb:e8:d9:35:8b:a5:08:36:02:37:b5:91:
96:b5:5a:eb:5c:18:22:96:de:39:ec:40:13:91:72:
81:e9:75:01:c6:45:b6:cc:e0:c9:0d:38:f6:69:aa:
7c:46:90:42:b1:64:78:5d:e8:17:77:26:b9:0a:d9:
18:17:11:bd:4c:1a:ee:15:44:47:37:44:f8:bc:a7:
d2:47:ea:a1:bc:95:d5:ed:cb:42:ca:e3:92:5a:af:
7f:c0:fc:17:0a:21:5a:b5:eb:4f:31:06:7b:3d:42:
21:58:4e:48:22:2c:b4:cb:9d:86:42:7f:ce:63:ed:
2f:25:88:e2:a3:b8:dd:2f:1a:5b:ec:ed:e2:a2:ff:
2d:9c:bc:31:a6:ce:fb:9c:07:87:c6:87:60:4f:43:
1a:df:ba:5b:60:aa:d1:f6:ba:23:78:9b:b7:90:48:
0c:00:da:68:f6:de:a2:65:77:71:a7:b2:e2:4f:1a:
de:d7:6b:4d:f3:7b:4c:dc:9c:5e:c5:36:ab:58:c2:
1a:78:27:4c:eb:36:9d:e0:5d:ed:6b:5d:71:52:0f:
d5:9c:74:40:b3:24:90:7a:89:79:ca:c8:e9:cc:d6:
32:d8:e8:21:0b:f0:4c:bd:0d:1f:5d:b6:7a:f2:ad:
46:14:ec:be:16:bd:b6:e1:2f:9b:1a:7f:d1:00:79:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:A9:8E:04:9B:1C:12:2D:BB:B3:18:FC:9B:5B:02:63:43:97:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:c1:be:60:22:55:9f:cc:ea:43:9a:36:c1:d1:63:ca:c4:fb:
8c:ad:47:1e:3d:62:a8:78:aa:29:df:74:02:76:9d:84:f4:bc:
77:43:82:a9:e3:35:85:9f:b7:5a:4a:ac:ad:1e:b0:d3:0c:ae:
26:65:a8:46:11:b7:8a:1d:a4:a0:f3:be:99:64:87:6e:5c:a8:
f2:c2:e7:49:12:ed:9d:1a:52:24:c2:e0:02:fe:03:02:de:99:
29:03:d4:76:23:8c:36:4a:cb:fd:2d:86:cc:e7:59:34:54:42:
8f:da:28:60:f3:6f:a1:d1:b0:62:ab:b1:14:95:67:e5:4e:69:
78:03:e0:a6:9d:8f:c0:1e:90:1c:62:30:75:34:ee:d4:7a:3f:
e4:a5:ec:3a:21:5e:95:87:32:d8:ad:08:3e:e0:46:27:6f:53:
f1:ed:7b:07:ce:26:4c:c0:20:21:3b:00:76:60:76:29:cb:a7:
b5:8f:c5:e4:17:aa:1e:e0:fe:6c:64:c3:91:47:d4:29:a2:d4:
a6:d4:64:2c:43:22:29:a2:45:58:c3:15:1f:0a:f2:b4:72:0e:
16:38:95:72:a7:96:d5:c1:ef:9b:7b:f8:f3:9c:6d:02:d7:e6:
92:f4:4d:cf:15:5c:38:33:4c:54:76:61:b0:43:6a:24:bc:c4:
91:dc:8f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:11 2025 by rpki-client