Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa
File: 0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa (raw, json)
Hash identifier: MQibsm8ot6U1SvRTS8m+7LrM2EqPgkBuTxC9Ep0FgS8=
Subject key identifier: 5B:45:FD:69:55:97:F3:53:E5:2E:28:5B:43:E7:49:5C:CA:10:E1:61
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AC00D49C99C4EC140AA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 40306
IP address blocks: 72.173.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:c0:0d:49:c9:9c:4e:c1:40:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6c72eeae-44cd-4e0f-a95f-b9f7fe317466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:eb:89:0e:6a:de:ef:61:8a:19:32:1d:e2:
8b:4e:7b:cf:c2:3f:45:98:f3:44:8b:86:98:c5:33:
d4:ac:3a:bd:97:cb:d7:d8:0d:58:1a:fb:47:c3:20:
bb:1d:34:ca:77:70:53:bc:0f:97:5d:d1:27:2d:ab:
25:af:2f:80:66:9e:5c:02:b8:20:19:4f:0f:9c:06:
91:9b:ea:40:64:af:07:87:35:58:a9:df:31:6e:a4:
a1:92:0a:48:2d:0a:d8:21:58:fa:80:b1:ad:ce:76:
d3:67:64:ec:93:11:be:1e:d8:9f:72:80:6d:3b:9a:
78:15:fa:72:5d:91:37:7f:74:42:b7:78:61:f9:7e:
2a:fe:82:e8:08:ca:27:91:3b:41:f1:01:8c:31:c1:
fc:e5:d0:e3:d1:ce:23:fc:bf:43:3b:79:8d:c9:bd:
75:1d:50:e7:d2:0f:8f:d9:43:6a:7f:50:3a:93:cb:
fd:d9:4a:b1:de:04:c7:f3:92:c8:e3:ae:a0:ea:2e:
a4:78:36:4d:d2:84:ae:3c:30:b0:4c:76:97:f3:02:
bf:9e:97:b0:22:b6:09:62:04:d3:56:70:4b:3c:c6:
b7:ae:0d:65:6d:6e:11:12:d5:61:d2:01:42:be:fe:
00:19:a7:bb:ec:e4:e9:42:1b:30:1d:e6:e7:da:b6:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:45:FD:69:55:97:F3:53:E5:2E:28:5B:43:E7:49:5C:CA:10:E1:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bfdc16a-2a28-3588-a708-5f7b555fc6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:05:7a:ad:07:c6:54:44:ef:07:b3:5f:5e:09:fe:3b:c4:49:
25:5e:84:48:d1:40:ed:cc:04:91:0c:3a:0b:e1:5a:14:b2:07:
0d:39:14:33:0d:63:42:71:14:f1:14:a5:68:6b:e7:98:77:19:
1e:82:52:77:a2:dc:80:62:e2:76:ce:f1:6c:1a:68:0b:94:a3:
8a:7e:0e:3a:7c:f6:4d:86:8a:92:32:ff:50:d8:f2:c6:dc:3a:
67:b8:14:af:78:58:ac:16:b2:58:73:32:31:d4:9e:b9:8d:5d:
8c:b9:d6:03:33:42:e0:0f:3c:34:77:b6:b8:d1:64:d1:87:84:
97:c3:71:f2:76:7c:ec:f7:b6:eb:29:19:10:92:49:2c:ee:be:
55:47:28:3e:9c:f9:87:a5:d7:c6:6f:eb:5c:3b:b5:08:f1:45:
d2:5b:bc:b6:26:d2:0e:d6:20:85:94:91:4b:8f:65:b1:3b:e2:
9b:52:00:b5:08:d8:fd:c3:43:cc:b6:5d:d7:f2:71:90:ca:b1:
e5:ee:99:14:5e:55:e3:a6:81:f2:cb:cc:0b:26:9a:5a:a0:4d:
68:b2:d5:f3:a6:2c:c7:c6:b3:63:d0:56:d0:05:49:fc:f7:63:
27:a0:5d:b4:26:f7:0b:49:40:a1:19:b7:b4:0e:38:10:ac:5f:
7b:34:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:24 2025 by rpki-client