Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa
File: 12304d24-1c4d-30ee-8950-9cb3fd480a88.roa (raw, json)
Hash identifier: KtpDXiDWNW9BWDJa1jRKkri3tEZ303N1oWXXRqMtcYo=
Subject key identifier: E9:05:2D:2E:BB:5A:93:57:3E:50:2B:83:95:D5:A2:E8:5F:5F:5C:0E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B07AA0A2C2C194E35DB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:07:aa:0a:2c:2c:19:4e:35:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5aec7b93-c82a-4260-a5e2-ed17ab18e170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:b3:4a:28:89:d6:26:fe:a3:de:6b:0d:df:
84:c4:d6:7b:ae:8c:e0:95:b4:ee:7a:b8:9f:76:1f:
a9:2f:ea:f6:0a:57:76:16:84:47:46:80:ed:b5:77:
32:9d:95:71:81:bd:1d:c5:ee:4a:20:70:e1:1e:95:
5b:68:05:01:f1:73:0d:83:e6:1f:65:20:5e:47:df:
97:d0:e6:ea:bf:9a:11:3f:bb:1d:91:bc:cf:bc:7c:
81:b2:0a:d5:d7:37:4f:12:5c:e3:c7:2a:38:b5:b3:
21:8d:6a:f7:60:eb:57:09:80:54:58:93:e2:1e:51:
54:a4:ba:57:72:c4:12:5f:e0:2f:c5:31:6b:42:76:
d4:57:58:2f:7b:b5:73:52:81:86:86:88:11:1f:79:
56:f8:d6:90:77:57:c7:bc:6a:fe:5e:53:15:b8:43:
69:f4:29:ab:ee:40:4e:ce:8d:86:63:45:2f:26:8e:
ea:7d:2b:64:d2:7e:73:ca:9e:1f:3d:c8:23:4a:7f:
b3:91:b6:86:3a:47:13:06:76:26:40:09:c9:98:9d:
5c:08:be:d7:37:88:26:a0:02:3e:7c:95:2f:9d:dc:
20:c1:ba:1d:f8:5b:e5:b9:00:04:88:27:b6:21:94:
5f:83:82:12:bf:22:85:4d:56:45:e2:73:ad:f6:d8:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:2D:2E:BB:5A:93:57:3E:50:2B:83:95:D5:A2:E8:5F:5F:5C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:68:93:61:9a:0d:fc:53:65:dd:cd:05:41:37:3b:4f:06:bf:
70:b5:78:e6:61:52:77:0d:c0:9f:89:19:98:d3:8b:fb:c9:ad:
60:f7:01:b3:70:20:14:5c:14:d7:5a:7d:3d:55:34:14:c6:b0:
23:4c:de:e6:fa:24:9b:2d:b1:88:1c:be:f0:62:39:0d:9c:10:
0f:8b:5d:b3:71:11:c7:65:76:4e:a2:fd:c5:bf:e2:2d:15:98:
52:d5:64:0d:c6:ee:5f:ee:60:ce:3e:89:5d:0e:5b:6f:46:da:
d2:be:74:13:d9:af:45:4f:3e:4c:40:7f:9c:fd:3f:cc:2a:49:
b4:27:93:09:14:16:c1:35:3a:63:1e:e8:f0:94:87:70:82:71:
6a:e8:a2:9c:2a:53:92:dd:fe:5f:e5:64:7e:d9:fb:3f:be:03:
7c:ea:d8:ef:b1:23:4f:17:96:f6:01:8e:a6:fc:42:4e:75:6d:
9f:ce:f8:ad:77:ee:f9:a9:a8:a1:16:19:1f:47:f8:9a:85:91:
44:87:13:ff:84:0a:47:4c:04:6c:f6:28:8f:0d:df:d5:a6:18:
02:e4:ea:ed:8f:53:44:96:52:1c:d5:92:58:21:13:53:58:c2:
41:d6:01:43:18:48:b4:3e:8b:3e:14:d7:ed:a5:82:d1:3b:31:
50:e3:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:14 2025 by rpki-client