Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa
File: 237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa (raw, json)
Hash identifier: P7ZHz9zFCEXv3bbPezoBsQ39DTGERZPL8UJ5MQwxY88=
Subject key identifier: 2C:F3:8C:FE:E6:43:68:FC:29:88:B7:8A:EA:C6:B5:4F:7F:74:D7:CB
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD1155E56041BFB99D1E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d1:15:5e:56:04:1b:fb:99:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cc67d64c-2388-44ae-a2e1-94d20b2616ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:f4:1a:bf:6a:1f:ed:e2:de:1e:a1:8e:f3:
78:e8:b2:e7:41:a7:8c:20:a7:05:88:c0:41:bf:37:
a7:63:ca:29:88:93:4f:06:1a:a7:ca:35:3e:3d:a5:
82:2d:0b:1e:89:58:e2:4a:62:08:43:89:f9:dd:7b:
60:48:8b:ec:da:d8:0e:48:59:1b:c3:cf:39:2d:fd:
48:89:01:4a:b2:82:40:2c:80:68:bb:9a:b9:e8:78:
b7:e0:0b:ed:52:34:02:c1:2c:d5:c6:db:95:da:af:
27:09:c5:2e:a5:57:f2:21:f9:80:fc:33:ab:cd:dc:
31:95:60:fa:ce:fa:24:cc:c8:6a:25:fa:13:fa:08:
bd:af:eb:c0:a1:08:16:cc:61:f1:cd:51:e9:15:03:
96:b5:dc:37:49:ae:3e:23:a4:c6:44:3d:9d:dd:a6:
bb:79:72:2b:f5:98:d4:50:e4:2c:0c:45:45:43:c3:
88:c2:27:fa:f7:79:45:ad:0b:57:89:aa:e0:9f:93:
32:58:ca:92:f0:32:09:a7:bd:33:57:d5:1e:31:7c:
35:21:8b:b5:54:ef:55:b8:ba:38:c9:b5:79:9a:2d:
2d:77:8a:5a:6f:7a:21:d9:15:7f:19:e7:01:44:fc:
74:ab:8e:18:c5:1b:87:0f:32:51:de:88:58:af:e6:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F3:8C:FE:E6:43:68:FC:29:88:B7:8A:EA:C6:B5:4F:7F:74:D7:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:3e:fa:d3:f6:78:00:05:02:04:4d:56:6e:67:ce:5b:f9:c5:
bf:57:7c:1f:39:37:98:11:84:da:b4:94:a7:78:64:d9:45:fe:
14:52:18:06:88:0f:5b:21:c7:6a:12:61:18:97:99:dc:70:67:
e3:e5:cf:26:8e:0e:4b:36:3c:42:75:14:8e:e6:d5:bf:6b:51:
a9:f4:87:24:c3:b3:53:9d:e1:05:03:84:16:f5:38:93:92:e7:
5f:e4:6a:e8:a1:04:64:6e:56:61:ad:1b:0a:55:cc:30:23:80:
3c:6b:1a:c4:15:b8:b0:aa:aa:73:bf:f0:a0:63:ce:83:71:6d:
45:6c:8e:1c:e9:0b:02:d8:64:5b:a1:b0:e8:23:51:51:dc:4b:
ee:93:38:97:ff:d7:33:1a:96:08:1e:04:c3:5c:13:ba:69:55:
a4:1e:23:73:33:65:35:0c:b5:e1:54:1c:51:5b:62:c1:1f:03:
78:1e:f5:cf:77:fc:89:cf:91:7a:4b:e7:8b:32:88:c6:dc:0b:
ab:fc:97:82:cf:c7:61:fb:81:20:07:b5:dd:a3:1a:ef:5f:cc:
84:9e:7b:45:b0:18:e1:02:bb:22:3c:93:32:bf:ed:b5:de:55:
5c:df:b2:ad:e2:c1:04:c2:97:39:db:91:ef:05:e3:e7:61:7b:
24:42:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:47 2025 by rpki-client