Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa
File: 0248a708-1e5d-3bac-8f01-bf8e608bb045.roa (raw, json)
Hash identifier: WnUYX+uZa424rUqpjzcmd5x/rDwXOnGNiNDT1NTmJPg=
Subject key identifier: 21:F3:BD:47:56:C5:7F:D4:AF:00:56:B7:35:08:B9:E6:72:FD:C9:02
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7A7A874B9A52C385CF40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7a:7a:87:4b:9a:52:c3:85:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e18070cd-e3c8-49ca-8a50-06228b4b9544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:7e:3c:2a:58:06:23:03:3c:bc:e7:4a:d5:
53:39:4b:78:08:08:85:ee:fa:8d:14:de:5c:4f:ce:
58:89:a5:43:5a:5b:2c:aa:c4:43:0a:15:be:e8:d5:
6e:41:14:0e:aa:ee:02:9e:92:c5:fe:db:65:0a:56:
02:22:fa:bc:aa:bf:b6:da:38:45:87:f6:c0:07:e7:
0d:44:84:e6:8a:18:ba:d1:83:4e:ce:21:3c:97:da:
f8:cf:fb:dd:3c:90:b9:b3:5a:87:1e:70:1c:28:71:
b7:51:de:b4:2b:2e:13:2f:f2:95:57:3e:1d:2a:41:
da:0f:89:8d:ce:36:91:89:70:ed:74:fc:78:d9:88:
2e:32:26:e6:09:64:41:82:72:db:22:44:6a:52:d2:
a5:f5:d4:be:24:15:53:9f:32:12:28:9d:e6:f8:d3:
6c:4c:60:e6:ef:88:8c:a6:06:31:db:bf:7b:88:f9:
ab:9e:25:be:d7:39:61:48:26:31:b4:0d:14:74:83:
84:a2:b7:cd:3e:67:77:d1:3a:16:89:92:3f:f5:fb:
4c:5a:db:b4:25:d1:26:aa:3a:4e:a2:f7:4c:3f:4d:
c7:8f:76:79:ae:64:6d:eb:87:00:c5:a4:b9:2c:31:
c9:62:db:8d:a7:9d:a5:44:d5:71:b3:ff:2b:e4:0a:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:BD:47:56:C5:7F:D4:AF:00:56:B7:35:08:B9:E6:72:FD:C9:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:97:a0:cc:86:19:aa:46:00:dc:ed:3e:0f:9b:58:28:04:51:
2d:16:71:12:59:8c:58:15:07:07:a3:75:5a:61:c1:c2:ad:6d:
0c:fe:e1:39:9e:b4:97:a2:9a:5b:38:82:43:a4:c2:16:96:e5:
72:21:c8:f0:17:db:b4:1a:16:3e:f1:ce:77:77:40:47:d1:c2:
d2:02:cb:c6:16:d9:db:67:96:f8:97:d4:59:23:0f:33:4b:99:
e7:2d:c8:0f:c5:6b:8e:ba:cf:24:95:7e:63:dd:82:20:22:1d:
49:7e:14:3c:26:f0:af:33:89:4d:66:de:81:8f:55:72:d3:d3:
fd:50:be:7f:18:75:ce:71:b4:01:69:d2:b8:73:9d:e2:02:9c:
fb:e4:a1:46:5f:e2:32:5b:16:db:ab:8d:db:7a:6a:b1:4f:c1:
f5:cf:fb:a9:1a:c5:e8:cb:20:99:a1:24:e6:df:70:67:45:02:
a9:9e:7e:96:b8:3a:35:4b:e0:47:17:07:51:dc:c7:bb:60:24:
6d:0c:54:74:2b:a2:7d:cd:80:89:20:df:d7:1d:01:22:26:7f:
7d:8e:30:8a:1d:4a:e5:3f:a2:4f:e3:54:f7:91:98:a5:b4:68:
fa:f3:44:dd:b6:33:d7:62:6a:9f:e6:3d:6c:ec:81:06:95:48:
97:84:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:53:28 2025 by rpki-client