Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa
File: 27ea1895-da0b-3db1-9734-0ba63257dfa5.roa (raw, json)
Hash identifier: HgwYZ2wly74VC0GectxccXMLQGbsIlMctjnVLkq5HX4=
Subject key identifier: 92:E5:5F:56:2A:E2:E7:C2:03:96:9D:57:55:FC:51:83:89:C6:E8:94
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0B26DC1660FA010C61C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0b:26:dc:16:60:fa:01:0c:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2800db40-037a-4c36-9b42-86555b3b874d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:08:b7:c6:79:72:8f:e8:b0:64:68:53:c6:
e7:f8:f4:50:77:ab:f3:c8:25:22:af:ad:31:6e:21:
ed:c4:b9:3a:cc:2e:0a:98:1c:04:54:0d:fb:05:57:
b3:f9:6c:6b:9b:1c:5e:28:e3:78:13:aa:21:77:56:
cd:ad:6f:2b:f3:bb:6d:91:1a:00:36:2f:ef:59:0a:
0b:a0:a4:0f:89:ba:50:4f:54:f2:85:ab:54:2e:90:
22:cf:2f:7e:99:16:6c:08:7a:3b:91:bb:8a:bc:54:
a3:94:e5:67:db:bc:b7:aa:27:5a:d9:0b:80:e5:29:
3a:0b:23:1f:7c:78:26:ff:b1:f7:ee:40:70:b2:32:
4b:10:2b:e2:77:0d:0d:d5:03:9e:59:15:79:10:09:
43:2c:5f:bb:fa:ca:a6:5d:75:ee:28:29:fd:a2:3e:
f7:4e:13:14:63:35:89:ae:d0:b2:df:ff:1f:6d:59:
47:7c:df:61:19:91:eb:4a:d3:b0:58:73:4c:2c:4a:
a6:17:9d:64:81:06:6a:eb:44:71:96:20:cf:d9:dd:
d2:62:93:59:53:bc:c2:e6:61:e9:74:e1:83:3e:57:
cb:8f:9a:66:c0:5d:70:10:36:73:a2:b5:45:85:bd:
35:bc:77:0a:c7:02:e0:de:6e:78:ec:b6:64:c9:4b:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:5F:56:2A:E2:E7:C2:03:96:9D:57:55:FC:51:83:89:C6:E8:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:e9:36:95:e3:2b:d2:0b:30:69:c0:e3:15:e8:9a:56:d4:f3:
02:2e:25:62:8f:e0:94:8e:c8:c6:0c:af:03:85:14:b8:63:4b:
03:c9:bf:47:de:05:fa:32:a8:e8:e0:14:4a:fb:a1:ed:a7:e3:
1d:ca:3d:f4:28:8d:32:18:ba:bf:da:1e:a5:3d:7a:95:72:b4:
c7:2f:42:01:54:54:4d:05:b1:ad:b5:2a:54:0b:61:1b:a2:55:
21:97:f3:e5:0a:dc:b8:a8:1b:ab:ce:33:2c:e0:40:b2:2a:c9:
d2:78:39:80:a4:e9:17:4d:0d:e8:be:fb:87:80:91:4d:28:50:
68:47:37:55:d5:93:5f:4e:59:6b:18:f3:74:91:fc:64:0f:06:
d5:1c:65:f0:ac:f9:06:bc:64:89:62:74:58:cc:3b:a8:bc:61:
a7:66:12:0f:23:9b:49:a3:46:d0:93:3f:65:69:0c:27:a5:62:
07:a1:b1:be:d1:c1:b0:f9:f3:d6:5e:dd:76:21:1e:4f:19:23:
76:ee:84:78:ab:6e:71:c3:e7:cc:42:b8:b0:3f:02:ce:95:f8:
25:0a:41:a3:12:8e:8c:38:34:04:cb:20:b1:ea:b7:c9:7a:91:
51:e0:2a:bb:2f:ba:b1:04:f8:f1:52:a1:1d:97:f8:db:b1:c2:
7c:2d:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:14 2025 by rpki-client