Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa
File: 2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa (raw, json)
Hash identifier: 2B11i+xUE9flZiez/mL/mvjbuSNmi5d5CkOPp47wFTY=
Subject key identifier: DB:08:A4:18:E3:9B:01:5B:58:00:64:34:73:F7:69:ED:09:7F:FA:74
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0AF95109D06F4066E118
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0a:f9:51:09:d0:6f:40:66:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b223910b-244c-4926-ab67-830babab1e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ee:d0:ce:ad:5a:a8:01:c0:53:6b:c6:5f:ca:
63:80:da:50:aa:d1:92:8e:10:ab:d2:d7:4b:bc:4a:
fb:1e:3f:53:1a:9f:12:c6:b0:c8:be:70:9c:0e:28:
d7:08:e5:c2:ef:0c:6e:e6:8c:02:d1:f7:93:b0:09:
28:93:95:06:29:0d:64:50:ad:7b:41:6b:05:0b:c3:
1b:3e:41:9f:1c:26:8c:60:a3:77:d8:7b:58:7e:9b:
4f:a1:f6:ed:4b:43:de:f3:cd:83:9a:2c:23:8d:2b:
d4:a0:8d:e0:e0:e3:d7:d1:d7:dc:39:48:dd:5d:e0:
ad:f1:6f:84:37:52:0a:02:eb:9d:cd:96:fa:08:5a:
05:a2:6d:16:ed:c0:05:e9:ab:51:1a:a8:a8:28:e7:
8c:16:a3:c7:51:18:95:42:98:22:ec:64:17:95:2c:
9d:3e:bb:88:cc:f5:4b:18:2d:e9:f6:99:8e:80:53:
a7:a1:de:41:40:7b:f5:01:71:3c:12:f6:4f:c6:cb:
f0:99:18:31:dd:42:a9:7b:d4:b5:5f:bf:a3:2b:40:
40:79:43:fc:61:9c:9d:1b:69:ea:d0:9f:aa:68:de:
19:47:75:8f:bf:cb:6c:dd:9d:df:6c:ce:01:1a:1f:
a0:fc:50:cb:59:41:d6:21:49:27:25:cb:ff:08:1e:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:A4:18:E3:9B:01:5B:58:00:64:34:73:F7:69:ED:09:7F:FA:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:3b:d2:34:18:30:61:5f:b9:02:24:44:0b:9f:ee:dc:34:4f:
45:00:d8:1a:8c:0e:7d:fa:ad:65:a9:e0:fd:62:62:19:73:61:
c4:6b:b5:85:ff:c3:d1:ba:3c:11:db:15:9e:9d:cf:6f:7b:38:
ad:34:f1:49:21:f9:53:9a:94:b6:ed:38:51:bf:31:ef:14:a5:
b3:1e:b5:f4:cc:01:e3:69:d3:4f:94:fc:96:40:f1:08:79:1f:
e8:e5:8e:4a:02:ff:0a:f7:21:e2:4d:e4:d3:0d:cb:48:9a:6e:
76:99:bd:55:63:ff:34:34:29:00:51:db:ff:5a:c3:48:55:c1:
43:b8:0b:d2:7e:bf:ed:d1:b0:b8:85:52:21:d9:81:5b:fa:0f:
b7:16:6a:64:93:d5:03:09:a9:08:e0:07:c8:ce:e8:c8:50:03:
82:b8:48:bc:39:14:bd:45:46:7e:9b:ac:d2:f1:6a:fd:e8:c4:
9c:58:0d:84:85:d5:86:f3:9c:f2:88:5a:e2:f2:00:cd:e3:7e:
86:43:be:d9:29:43:6a:ef:ee:58:7d:d2:59:5b:e5:69:7b:82:
3c:37:45:da:df:e0:21:79:52:25:ea:1b:2f:72:6b:30:c0:80:
fc:58:80:23:01:5d:e9:64:95:39:d8:3b:4c:3d:cb:43:6f:61:
ca:c7:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:06 2025 by rpki-client