Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
File: 1a329a07-dce6-37d6-abc4-69f4c755efc4.roa (raw, json)
Hash identifier: Rxj52vCM4qlfuRGCchKtM1grIflqqAPTxglrIWm5uAk=
Subject key identifier: C1:A4:E0:54:FB:51:23:B2:70:15:7F:0C:F9:AB:08:21:FC:40:F8:F1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A776AA1F5B0F121521620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:77:6a:a1:f5:b0:f1:21:52:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b7daecf2-2786-4c0a-aaac-a2d8bf576276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:40:c7:14:bf:57:68:69:be:2d:38:dc:b8:
8f:01:30:b1:03:61:81:47:9d:80:b1:c8:72:3c:d8:
d2:e8:dd:d0:82:e8:54:b2:06:d8:c4:fc:8a:15:09:
a4:6d:c5:fa:27:33:89:7f:1b:44:00:e0:33:34:2d:
93:cc:e6:30:03:b5:84:14:bd:be:95:b0:d2:79:5f:
a8:13:5a:37:41:a8:b3:1a:09:6e:84:47:53:8f:10:
34:46:25:c9:4d:03:07:93:ff:e7:8d:eb:0d:05:a5:
d8:af:1d:14:74:12:eb:4a:45:4d:49:13:fa:0a:84:
1c:25:51:17:8c:62:26:80:be:cc:24:6f:21:e5:c1:
c7:bb:9b:cc:f0:96:c4:22:73:b1:24:bd:54:e6:ff:
02:dd:9a:b3:9b:e5:26:11:68:63:4a:43:da:5d:2b:
8c:1f:d8:21:57:22:81:c6:ae:9f:ea:29:9c:d8:a2:
dc:14:60:d4:9c:59:4b:26:29:2d:41:d2:b7:ca:e0:
2c:b5:0e:64:c7:d8:8e:7c:b8:ae:c6:a6:de:c0:72:
bc:54:1b:89:07:4e:1e:93:fb:57:6b:8d:3f:ff:85:
bb:db:e8:55:56:c5:18:0f:08:60:67:e3:e5:09:66:
5a:d3:de:5f:72:4e:3a:fe:c7:54:04:9a:f0:b4:4a:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:E0:54:FB:51:23:B2:70:15:7F:0C:F9:AB:08:21:FC:40:F8:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:38:92:33:bc:48:67:00:cc:69:55:f4:68:b1:9a:0a:ad:2e:
6d:3d:cf:dd:e8:27:1a:71:9c:dd:d7:94:c8:a8:a6:2e:db:83:
f7:17:5c:05:72:3c:de:49:14:49:b1:62:ca:32:a1:92:f8:c5:
06:85:fe:6f:70:04:54:b9:92:a7:a4:89:b9:0f:c0:a2:48:ce:
e5:31:ee:90:31:1a:e7:5d:aa:de:04:3e:a9:37:69:80:1f:4b:
39:77:48:6a:e2:78:97:f9:56:1f:76:4e:e1:4b:65:5e:0d:c4:
20:92:04:07:89:ab:80:3b:35:c9:d5:28:b9:47:d4:7c:30:5a:
aa:28:7a:9c:6d:09:4a:9a:08:d8:a1:ad:d6:e6:c2:4b:17:6a:
08:24:44:6c:89:6a:d3:b5:6b:82:67:e7:f7:f8:d7:ad:94:55:
43:60:1d:cc:47:a9:bf:38:3c:d3:82:07:b6:55:b6:a9:a6:d3:
4f:a2:16:a1:ca:e2:50:2a:64:58:55:b8:51:2a:7f:f1:86:e7:
0f:5b:45:d8:89:d9:8b:c4:ed:d1:d9:ec:c3:4e:26:0b:3d:6d:
e0:79:29:49:96:9c:4f:56:93:54:52:10:25:f6:a3:da:2d:93:
81:c4:b1:42:ff:dc:69:bb:ab:2c:10:48:d5:f9:0c:aa:5c:9b:
e7:26:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:36 2025 by rpki-client