Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
File: 1a392fe5-ddf0-309c-89db-b58d570f08d7.roa (raw, json)
Hash identifier: VWExmCaeyh+sSt0b/BQaSIROUIdqRI6QN42VJU2cgAQ=
Subject key identifier: E9:2D:99:BE:BB:3C:ED:31:B2:39:9E:ED:C5:DE:DD:7A:BE:C3:01:56
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A308857E524BEAF7C5380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 67.54.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:30:88:57:e5:24:be:af:7c:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=9af8999f-56ba-43f2-9860-6391ac274e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:32:29:42:6c:c9:c2:e8:e2:a8:4b:70:cb:27:
50:9e:cf:12:fd:9a:85:8d:b6:fe:21:69:ce:39:6c:
cd:ff:68:17:cb:96:e9:64:41:b5:76:9d:1e:49:2e:
05:e9:46:cd:12:7d:9f:e2:0e:fd:a1:48:27:12:cd:
3c:44:c0:07:b4:ca:20:e7:03:72:05:80:93:7e:7b:
ff:17:62:ec:93:e6:23:5b:17:8a:b3:00:12:6d:2e:
68:08:24:6e:ae:82:08:2c:94:ba:6a:2e:74:e3:7f:
4c:ec:56:a2:53:c4:a8:13:71:bd:e6:e2:66:33:7f:
f6:d6:f6:0f:ff:72:1a:bd:b6:47:89:3d:a9:80:5b:
06:4d:aa:ff:b7:39:bc:e7:1b:f4:2d:8a:2c:e1:05:
01:46:4b:0e:bd:09:c6:fe:f2:eb:03:78:40:89:b5:
85:d2:50:94:11:e5:6a:63:7c:44:9d:6f:f8:0e:81:
18:d2:7e:26:3c:c6:a4:dd:61:76:4b:2d:e5:66:8c:
fc:e4:30:6d:5f:23:43:0b:5e:e7:d2:67:f7:a8:c7:
12:87:02:23:a4:fb:fe:b3:af:b8:63:6b:4b:9b:ae:
51:8b:3c:66:15:5b:c6:42:cd:cf:07:d1:b8:2e:47:
a4:3e:bc:c9:6a:d1:c0:65:f3:e7:4f:3d:af:41:7c:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:99:BE:BB:3C:ED:31:B2:39:9E:ED:C5:DE:DD:7A:BE:C3:01:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a392fe5-ddf0-309c-89db-b58d570f08d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
67.54.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ec:3f:86:4c:32:37:7b:38:bb:6f:1d:14:94:ed:59:2e:97:
72:5b:df:29:a0:31:be:08:d9:66:65:59:05:8e:a2:9c:62:0e:
da:21:68:5c:84:ff:53:24:02:71:7e:fd:e0:0c:fa:0b:51:26:
35:07:a9:b0:ce:99:bb:ea:43:48:8a:e5:09:3b:cc:ac:c7:38:
4c:66:23:a8:83:67:b3:b1:68:3b:b4:b4:c4:bf:84:3b:3e:53:
ef:db:65:e6:84:30:51:a3:a2:e7:37:c1:b6:a6:36:d7:6e:ba:
74:07:8b:24:e4:5b:b5:65:b3:4e:77:b1:e6:64:d2:7e:0c:0e:
84:67:7b:0f:38:96:16:89:c6:76:93:3f:35:ed:e1:7d:2b:b1:
e4:d9:a7:68:6f:92:7e:de:d9:60:7d:db:dc:6f:6a:75:ce:68:
86:dc:5a:41:95:be:e4:39:12:06:1c:87:f1:9d:ca:5a:09:db:
8c:5e:af:1b:4c:61:3b:b6:be:fd:fb:0a:85:d5:5a:ac:72:72:
ad:3e:a4:17:7b:cd:11:e4:fa:96:d2:46:ad:38:56:4f:9d:ba:
28:02:15:98:10:a3:f3:20:88:58:e9:80:cc:df:40:d6:ce:35:
33:24:79:fe:ce:ad:6f:6e:56:33:fa:68:b7:98:67:a4:75:46:
74:31:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:27 2025 by rpki-client