Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
File: 25ffd5c2-35f4-3ecb-9557-6964354a7797.roa (raw, json)
Hash identifier: mtlotPBoi1nRbZvVYbdzubpeMhYjPaK1vHkfXyGnaGQ=
Subject key identifier: 42:8F:42:00:6B:7B:11:65:EE:1A:01:79:B3:16:0F:F2:CF:28:9B:16
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A41BF9E4736DF2A6DF2A8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:41:bf:9e:47:36:df:2a:6d:f2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=0042b262-cf8f-41fd-9bdc-2a91d7b9b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:db:d6:d9:e3:95:9a:31:4c:a4:e0:5a:85:
50:8e:35:69:a0:f1:2d:0f:ea:af:3b:5a:77:8a:da:
e2:84:b7:9d:e3:36:47:a8:73:5c:68:95:dc:31:88:
15:75:2d:a4:bc:ae:0f:7b:ab:e0:95:11:36:e1:db:
64:31:ce:14:0f:7c:8f:65:94:45:9b:e1:0c:49:7f:
c7:1f:59:25:99:d1:a2:8f:0e:79:c5:1f:27:16:ba:
79:1d:ec:6a:d7:bd:02:76:a1:63:81:79:47:fa:6f:
a0:5c:c4:31:37:28:0b:7e:8a:80:9f:ec:51:99:1c:
0d:0f:a9:b6:44:9d:35:8b:31:f5:09:7d:ba:bc:72:
da:ca:2f:b7:73:50:c2:de:93:27:fa:e2:9d:ba:ef:
69:53:3b:6d:14:0e:94:56:f4:d1:97:6a:b4:f8:f4:
60:b6:11:38:73:c6:14:68:63:7e:06:d8:79:a4:de:
e9:fd:48:6a:3a:da:84:00:56:23:e5:b7:84:cb:13:
3c:86:d3:12:4c:7d:6c:9d:ba:70:38:cc:0f:da:e0:
71:6e:e2:2a:f3:07:82:68:e6:bb:9b:49:28:3d:05:
c8:f0:88:91:55:fe:7b:41:f8:fa:39:a2:15:47:df:
16:ec:51:c0:28:cf:6c:8f:d1:a3:e9:ba:05:bd:b3:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:42:00:6B:7B:11:65:EE:1A:01:79:B3:16:0F:F2:CF:28:9B:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d1:2d:1d:7b:2f:f0:99:0f:cd:34:da:e0:b6:36:c6:1a:ee:
ec:fb:5e:fb:36:a0:d5:4c:ad:84:30:ca:9b:ef:8c:bc:3c:4e:
bb:52:32:2a:8a:bc:0d:bc:37:fc:26:51:42:b3:fd:99:14:aa:
5a:b6:d2:1d:00:8a:71:2f:2c:ef:3a:f7:34:d6:c3:39:b2:08:
b0:29:1a:0c:9c:f3:a2:d0:3a:a9:a3:3c:69:2a:0f:43:64:c1:
51:13:f5:19:0b:39:14:4a:f2:c0:ec:c1:3d:1e:3b:f3:17:4a:
b3:ef:4d:8a:34:2c:41:54:30:12:c7:9d:e7:4f:71:8a:29:f9:
b7:bd:9d:b1:b1:cd:9a:d0:25:c2:4f:23:9a:53:e6:16:20:4a:
ab:25:83:7f:23:fc:e6:01:ef:61:bf:93:a7:65:20:f4:87:97:
35:c7:6e:bd:72:a5:27:75:d2:8a:a4:c3:7f:59:6b:9e:4b:b2:
41:d0:cb:a7:f0:32:21:61:43:bc:08:53:d1:fc:4d:26:9e:45:
f8:f4:0a:aa:07:58:03:26:55:8d:71:42:8e:b7:06:21:ad:1a:
60:6e:1c:2a:fe:b2:28:40:ad:8f:19:12:35:7f:97:76:db:69:
cc:41:71:7a:55:80:ad:1e:73:5d:17:59:91:bb:8b:30:61:8b:
46:b2:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:47 2025 by rpki-client