Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa
File: 16d980eb-aaf0-394b-966d-6158bafba5e0.roa (raw, json)
Hash identifier: kzZb12WHnEqVMSBgh1agAXMYmFJKt/jEYqiwqT9o+r4=
Subject key identifier: 7B:BA:88:8C:3A:69:EF:28:E4:A6:37:B0:46:05:BD:1E:0D:6F:10:DF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B112592BA2E43834B2D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:11:25:92:ba:2e:43:83:4b:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ee41ac2f-2dac-4c54-9c42-5c0d8c3544d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:44:1f:ec:cb:42:3e:89:c0:5f:c9:40:47:
c7:51:74:2a:76:26:33:fd:48:a7:af:6b:e5:a7:8f:
c8:bd:29:1e:04:d3:43:a0:44:b2:50:36:c0:1d:ad:
c4:08:8f:3e:29:09:fd:2b:66:70:c2:7a:11:be:4e:
f9:ae:91:cc:4c:17:4c:0e:0c:55:74:3e:37:dd:72:
76:10:9a:85:29:14:72:c8:14:a3:d3:6f:02:b8:9f:
2a:79:3a:63:5e:8d:ee:32:0a:45:8c:e5:e7:87:7d:
02:3b:1a:98:7a:97:6a:50:9c:7c:ff:d0:19:6d:9f:
fa:06:52:98:80:c9:88:39:81:d9:71:95:3f:9a:0d:
30:3b:15:e2:ec:57:c0:79:4b:d7:4f:53:71:31:1a:
07:07:21:6e:ea:ff:2b:88:f3:ec:03:41:fe:86:cd:
49:9b:fd:81:2f:37:71:93:2a:f6:bf:c1:d5:1c:47:
63:e1:3f:60:83:2e:ba:f7:a5:cb:94:88:dc:b0:22:
4a:a9:81:94:58:87:4a:5a:47:c5:ed:a7:00:bc:3e:
ea:65:b4:d6:ca:fd:0e:e5:6a:ef:70:74:4a:cb:c9:
3c:4e:84:a1:dd:a9:1c:f7:d9:bf:5c:2d:36:70:93:
28:e6:3b:a7:97:2d:8e:2c:dd:f0:c5:39:09:94:56:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:88:8C:3A:69:EF:28:E4:A6:37:B0:46:05:BD:1E:0D:6F:10:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d980eb-aaf0-394b-966d-6158bafba5e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:55:d3:4e:98:80:a4:a0:61:af:28:02:28:50:d9:11:b6:ce:
80:90:f8:3c:29:bd:a4:b6:b0:d4:c6:f3:3e:33:48:73:56:42:
49:a8:b8:22:d4:57:2c:1b:97:9a:4b:b8:2e:52:8a:5a:dd:2d:
52:b8:7e:1e:9e:2d:9c:4f:10:aa:b1:00:30:cf:6b:df:1c:7d:
66:39:31:9b:e4:01:b9:fc:20:45:dc:74:69:0a:e5:ff:e7:0e:
0f:f9:f2:a3:06:32:15:46:cd:e7:0c:01:05:2a:9a:90:21:69:
c0:3f:47:5c:d8:8d:56:88:4d:8d:0f:b2:0b:5d:84:e9:a6:67:
67:b9:f2:bf:74:fa:de:1c:c7:7c:bc:d4:7b:a3:a3:e8:47:b9:
ab:3d:be:3b:44:c6:df:8b:f0:5c:93:26:db:2e:74:8a:c1:c2:
15:06:a9:da:6a:4c:eb:b2:50:3d:2b:19:be:45:97:d4:13:45:
28:bb:d3:a7:9c:09:26:ea:5a:d4:fa:e5:b9:74:03:42:18:6f:
a7:b1:58:44:eb:90:1f:66:21:92:30:04:c8:ec:86:96:b3:45:
33:7e:22:d6:f0:a3:7a:43:dc:8d:1c:c2:f0:cc:d0:4f:65:b2:
36:fc:d3:8b:16:ae:6e:67:66:69:f7:b3:41:30:9d:3a:ba:f8:
be:a3:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:40 2025 by rpki-client