Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cabd872-7c06-3cd4-860c-b774174e87d4.roa
File: 2cabd872-7c06-3cd4-860c-b774174e87d4.roa (raw, json)
Hash identifier: TYp4B/9BFlvdqeQQM282YRWdFjSiKCA5Pm+n9Zc3Pcg=
Subject key identifier: 7C:D2:DC:38:45:B7:C7:06:92:45:4A:8D:8E:D5:39:44:B6:E7:23:26
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B086D33732A2CB39C9400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cabd872-7c06-3cd4-860c-b774174e87d4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:08:6d:33:73:2a:2c:b3:9c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3a495821-8666-4b95-9415-1a5e3cd52f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:2b:72:17:d6:2f:02:31:e0:db:cf:7f:8e:
fa:b8:db:cf:b3:37:70:e2:63:7c:2e:b8:d0:8d:91:
a5:ea:54:90:b6:a4:6a:3d:37:14:f7:8a:64:43:a7:
bb:80:f9:de:fe:cc:47:68:39:72:fc:c8:07:06:d6:
95:00:0d:ac:91:c3:dc:1c:ba:45:2d:7e:c4:a0:a7:
b6:05:9c:86:e4:1b:6e:60:76:1e:1c:19:13:f5:2f:
df:42:be:82:b8:b6:05:12:28:29:65:7a:e3:ee:6b:
b6:b1:03:64:0f:97:9b:4f:60:3e:93:16:95:a4:46:
5c:54:26:43:7c:3a:38:31:ce:b0:62:4c:e4:e1:c1:
31:58:97:43:af:16:08:77:82:ca:fd:ab:99:cc:cc:
1d:14:43:19:9b:d8:43:ee:cc:3c:79:00:d6:99:5a:
21:ed:39:7e:7c:0e:58:ef:7a:e9:0b:30:c3:22:27:
96:79:8d:15:cf:92:39:1e:9e:5b:dd:cb:83:b8:39:
a6:b6:f8:57:a6:6c:5a:39:b7:1c:18:88:72:bd:10:
26:c3:e6:84:a9:11:71:4c:09:e9:7e:28:6e:c5:6a:
f5:76:99:b9:5b:96:06:07:c3:fd:c0:dd:3c:20:46:
9a:b6:d9:ff:1d:00:fa:3f:76:84:6b:45:03:cc:c6:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:DC:38:45:B7:C7:06:92:45:4A:8D:8E:D5:39:44:B6:E7:23:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cabd872-7c06-3cd4-860c-b774174e87d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:20:d3:d0:b8:98:98:a9:4f:3e:1a:20:7b:2d:f6:b9:aa:a7:
70:53:95:57:62:50:cb:2b:3d:d0:81:47:0e:c7:bb:1b:f6:3d:
64:a1:cb:68:0b:ab:a9:d6:ad:56:be:59:ef:54:ac:ab:42:b3:
1c:27:03:30:8f:f6:6b:59:89:3c:c5:1b:fa:68:be:2a:77:ce:
85:84:77:a5:d1:48:fb:b4:1f:29:a8:ca:fe:e2:ee:09:61:b1:
d3:2f:50:eb:17:f2:bc:aa:aa:63:7b:11:35:2d:30:1d:3f:27:
6d:43:f0:eb:eb:82:11:17:f7:eb:d1:d8:03:3f:15:5e:ee:30:
60:96:52:5f:b3:5a:43:5c:da:75:a3:f0:47:55:cd:fb:84:42:
7c:97:78:e2:d4:f1:56:ec:7f:7c:c6:e7:ba:01:65:e6:2b:fc:
89:a1:a7:9c:ee:aa:8f:47:d9:92:0f:21:94:2c:30:2a:39:ab:
96:d9:24:ab:f2:4a:82:6e:55:4a:f5:46:0d:c9:a8:f8:0f:9b:
0b:94:55:cd:f4:d1:0f:a6:ff:ec:9e:da:58:b9:c7:35:53:39:
d6:fd:fa:bb:1e:c2:4f:56:ca:41:41:45:72:8e:eb:73:cf:ff:
ce:b7:77:da:8e:f2:9f:f0:87:ac:94:fd:94:a3:3c:3e:6e:44:
7f:04:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:40 2025 by rpki-client