Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa
File: 130119ac-e2ef-3530-8627-f92f8fe44217.roa (raw, json)
Hash identifier: hGkCSf9zMK+VlSs0QpInPn662j/LZFal+PB0aFYyXHA=
Subject key identifier: 0E:1B:E3:9F:FC:8F:91:FA:1F:7A:1A:90:15:3A:3C:77:BC:EA:8E:38
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ABFD937E49022053A89C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 40306
IP address blocks: 70.41.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:bf:d9:37:e4:90:22:05:3a:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=df8772d0-b4ab-4d7b-9258-07cf9baa5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:77:4f:5d:b4:66:ae:e4:23:b8:5d:d7:91:
41:3e:65:38:90:47:b6:c4:c8:92:36:f8:45:40:89:
2b:58:97:f3:cd:60:b3:e5:45:4d:8d:11:e4:c8:ee:
e4:30:4a:85:ae:a1:41:a5:36:3b:bb:64:df:a6:0c:
b6:58:b1:d5:40:8d:19:a8:33:bb:14:68:86:af:28:
b1:49:e8:1e:4e:12:e4:11:c2:bf:ff:17:ed:84:22:
f6:84:3a:2c:72:dd:0b:e2:e4:6b:5f:2b:a4:35:ab:
87:9e:8a:46:3f:6d:e3:22:ec:48:64:aa:f1:05:62:
09:b8:a1:3d:a7:f1:72:d7:af:a6:e1:c6:71:56:11:
65:60:c4:2f:5d:0e:7c:d9:b8:6a:d6:ff:25:25:72:
65:b1:4c:11:0a:c6:19:88:5c:41:f9:ed:d2:b5:de:
df:e3:f2:14:ae:77:3e:f4:ba:c7:c6:22:5c:a8:bc:
4f:a6:ab:f7:f9:6f:fd:c1:d6:0c:4c:d2:d4:49:ea:
59:4a:c3:d5:8c:8c:f0:5f:f2:54:96:3b:2f:53:dc:
f0:55:7f:dc:47:58:8d:56:ce:f3:ff:b5:3e:21:a8:
c9:e6:8a:cb:ea:ec:e2:c1:33:c0:ab:5c:00:88:5f:
70:f1:8c:90:73:c7:cd:44:75:e2:a5:fe:3c:9a:df:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:E3:9F:FC:8F:91:FA:1F:7A:1A:90:15:3A:3C:77:BC:EA:8E:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:48:d5:84:6b:3c:b4:65:61:0e:6c:8b:3f:82:c7:75:70:55:
d5:bb:f1:4f:0e:8f:1d:33:2f:7c:0d:e1:77:02:30:cf:02:60:
af:33:21:87:d5:46:37:b5:c3:f0:9f:ef:02:98:26:74:fa:73:
93:fb:af:92:54:c9:4b:0b:18:23:ea:2e:03:47:3d:c1:69:70:
36:97:a3:ad:26:6c:f0:46:ff:23:77:f0:5a:21:1a:22:5f:f7:
2f:0d:fc:b8:68:46:26:d9:73:25:cc:54:16:b1:bc:16:fe:cb:
60:ec:89:36:00:4a:f9:7c:c7:c0:20:86:15:6c:d4:f8:7a:80:
ad:6f:84:0c:73:5a:91:f6:1a:09:3a:80:e4:4f:c9:a0:00:75:
24:16:a7:ee:91:65:ff:1b:05:be:d4:25:88:16:eb:dd:50:58:
f7:15:27:6c:8b:29:bf:83:8e:94:f5:3e:de:94:b0:26:7d:ea:
23:d9:86:7f:e5:43:96:fc:2a:e5:e8:e4:3b:64:4f:65:b0:61:
4f:0d:fa:84:1e:53:18:a1:f6:ca:da:87:af:b5:63:be:b5:b0:
b9:a8:5d:71:10:42:51:6b:e2:e1:a0:be:4f:cb:f7:94:47:2c:
6a:25:ba:b8:2c:40:15:e5:e1:aa:b9:bd:51:2b:f9:36:25:53:
7e:eb:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:14 2025 by rpki-client