Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a89df61-3f27-3a94-adbf-a975f51cb808.roa
File: 1a89df61-3f27-3a94-adbf-a975f51cb808.roa (raw, json)
Hash identifier: 6kTDYSXZxi/LNTFyBoDBbqb3xk0FYRFSsHl0JVDvrRg=
Subject key identifier: A7:57:DA:17:F1:F9:2F:C9:3F:DE:CE:EE:E0:9C:FF:0F:CB:61:8D:67
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A76AE857B0776FB536200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a89df61-3f27-3a94-adbf-a975f51cb808.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:76:ae:85:7b:07:76:fb:53:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=07eee3b7-35fc-429d-bc80-38980b21fb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:78:ea:67:e8:5f:df:b2:d0:63:0b:26:78:
9d:80:03:cf:94:69:5f:e2:61:f8:52:85:16:09:00:
8b:b5:47:ac:db:2c:11:d1:79:9e:61:1a:4b:51:db:
d4:e4:19:2e:52:25:9d:8e:95:b3:d7:95:d6:d6:6a:
bb:e4:ab:66:41:41:7d:0a:43:91:f9:51:4e:eb:3c:
22:8a:e1:dd:71:c3:09:5a:9f:46:9c:48:57:55:03:
00:45:f3:9a:f5:b9:4a:a9:c1:ea:89:33:64:eb:c4:
7b:f0:da:d0:0c:a0:be:ab:d2:00:66:18:20:7c:bb:
b8:95:fd:d3:8d:7f:47:71:0a:47:50:ff:8e:9d:b5:
00:07:06:31:af:b8:1b:45:72:b0:6f:b3:78:5c:f7:
b6:5f:44:b3:ea:3b:cf:f1:12:d9:cf:cf:a6:56:be:
c9:b1:e0:14:fb:c5:06:e9:1c:17:7e:b4:a9:c8:d7:
2b:f2:b5:00:ab:d7:c0:56:b3:14:18:d3:3f:f8:fa:
6b:09:d0:30:29:3c:e9:1e:5c:49:75:65:4b:28:01:
16:44:26:b7:b4:2a:e7:76:fb:f9:6f:4c:1b:cc:48:
80:11:cf:bc:7c:af:67:74:ab:c7:78:5c:8c:57:2e:
c1:71:7f:9d:00:b1:e8:38:c3:69:91:a8:40:5e:9c:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:DA:17:F1:F9:2F:C9:3F:DE:CE:EE:E0:9C:FF:0F:CB:61:8D:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a89df61-3f27-3a94-adbf-a975f51cb808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f3:9b:6d:29:48:5c:3e:32:3e:b7:2f:57:2e:53:23:07:ed:
12:63:dc:e5:75:37:ce:90:36:d8:71:2b:db:93:60:b5:ef:d7:
ea:86:a0:13:79:f4:26:01:5f:81:7f:14:44:b2:33:30:ba:2f:
df:18:51:c0:cf:59:0e:78:fa:f1:d7:1d:d0:48:84:8c:50:02:
f0:02:cc:79:68:32:52:67:06:22:d4:4f:bf:22:3c:0d:5e:7d:
cb:22:f1:fd:cb:e2:a2:6e:4f:81:e2:65:ef:78:63:6d:42:41:
40:fe:19:15:a3:13:e6:a5:67:fd:d9:11:1c:31:8d:64:e3:ef:
75:47:ca:fc:c3:4f:8e:fc:d8:f8:a4:7b:22:b7:46:86:82:65:
24:b9:bf:78:73:e2:e4:dc:ff:ca:cc:87:1b:4d:d5:c3:41:df:
af:e2:11:37:3c:e1:e1:1b:a5:11:c3:15:83:1c:75:8b:a7:a6:
0b:50:6c:ad:5a:5e:4e:af:89:26:8b:9b:9e:be:a1:2d:89:17:
4b:1f:8b:46:7c:e7:4d:b5:3e:e8:e7:a1:1f:ee:2e:7b:38:ed:
62:4e:f4:77:01:62:35:a8:30:95:4f:7f:37:19:2f:e5:f9:e5:
8b:98:16:54:80:31:cc:11:35:1f:84:67:17:5f:1a:c8:54:84:
07:d9:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:17 2025 by rpki-client