Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa
File: f8345415-3ea1-3302-af18-e89348c9eac5.roa (raw, json)
Hash identifier: wrbfgnP19U1AVc1VUQzqJqnCtSOhEwirFMMnZayZN3k=
Subject key identifier: 15:12:45:46:6F:0E:5B:43:DC:E8:41:7B:8F:B6:B9:DF:22:36:04:E6
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C58112CFA571132051BA1000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 72.173.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:12:cf:a5:71:13:20:51:ba:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c74b7ad1-a84e-41de-b936-67d0628ca607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:b9:2d:88:3d:f4:dd:63:2f:86:3a:aa:df:
ef:3c:72:52:b7:d9:74:51:3f:cd:cd:01:06:d5:af:
ed:f7:f3:26:0b:78:c0:cf:dc:84:35:f4:3b:a8:64:
5f:92:63:87:a5:6c:13:18:f0:02:0c:b1:43:06:62:
6e:41:01:66:37:0d:47:26:fc:15:15:8f:af:bc:53:
27:e5:3f:70:cb:c1:7e:47:1e:c0:bc:bd:11:0a:e6:
bf:b6:24:c8:e4:24:6e:e9:ac:46:ad:a6:b7:64:09:
a9:f6:6f:c2:e9:52:97:9d:01:aa:a8:34:9f:77:2f:
e3:fe:c8:23:74:3f:21:78:aa:94:78:80:9d:96:f4:
4b:da:02:13:a6:2a:98:d7:da:2a:14:a2:d9:95:bd:
0c:5a:01:92:33:2a:89:49:d7:c6:10:5c:98:04:a0:
4e:31:92:b4:0e:0f:4c:64:0a:0e:df:b5:37:30:6e:
ec:66:1b:e2:5c:54:a6:d3:03:6a:b5:0a:56:0f:41:
b0:53:b0:94:eb:eb:ab:f8:60:ca:16:3f:1d:6a:ff:
c4:15:0c:46:06:84:e6:e4:42:e7:d7:0d:c6:58:d4:
ab:cc:3b:19:41:14:67:08:d5:4c:69:98:84:d6:ef:
f0:26:86:6f:07:a2:17:b3:bf:5a:d1:56:be:03:ca:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:45:46:6F:0E:5B:43:DC:E8:41:7B:8F:B6:B9:DF:22:36:04:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:19:bc:41:d1:5c:e7:05:3c:43:0a:5d:2b:b4:08:90:e6:56:
16:1d:83:a5:07:e8:24:97:c7:96:e7:36:f5:0c:c2:18:ac:41:
1f:b3:6e:42:b3:d1:98:3b:98:8c:86:ac:32:e7:d8:7b:3c:58:
1e:2d:ba:e0:9e:10:f7:c5:51:ed:bb:05:7c:8c:5c:72:67:26:
d7:2d:de:e4:06:dc:a4:de:a5:02:d3:11:89:7e:09:5f:68:a1:
fd:26:0f:47:b1:d6:a5:fe:75:d1:ab:1e:f9:45:37:3f:c1:b4:
b8:4b:84:89:c6:eb:16:64:f3:ee:e7:dd:fc:62:b4:e2:79:14:
2f:6e:1d:bd:e5:42:31:a1:54:dc:09:e6:bf:35:6b:a8:2e:16:
ea:cb:f0:a7:9d:c1:ee:82:56:91:d0:78:a8:63:5c:b9:30:7d:
e2:c0:aa:7d:fa:1a:37:5e:ee:40:6a:1a:8c:d6:62:27:b1:79:
9a:36:36:61:2f:fa:29:92:0c:36:f6:e5:42:63:ac:40:8f:77:
dd:2f:5e:96:4f:3e:aa:d8:93:16:7c:8a:d0:46:21:e9:00:68:
e2:2f:fe:da:e0:51:5c:51:0c:c4:b0:43:75:9c:5c:27:94:ba:
1e:2f:50:7c:f0:04:1a:d2:68:71:e5:fa:c6:c7:c7:5d:4f:1e:
a2:3f:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:10 2025 by rpki-client