Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa
File: 2ec1e51d-6725-3407-9b6c-11caa275e537.roa (raw, json)
Hash identifier: iNeG4W9+I8FVO6ZsFbCXsnVk6o2PlsIXMNp7xfFa7sA=
Subject key identifier: 65:83:07:D3:AC:D3:A0:1F:9B:85:6B:93:06:17:33:FD:85:CB:CF:52
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B093DE4DBC09626310C40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:09:3d:e4:db:c0:96:26:31:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=de40bf31-89cd-4f32-800d-64020b6c9eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:82:c5:23:60:fc:88:ac:0f:08:02:17:52:
39:3f:a8:b0:67:67:70:72:81:e9:0f:d8:36:15:8c:
91:20:50:a4:bc:02:68:12:34:10:b7:9d:7a:34:3b:
81:6f:90:9d:10:e6:41:d1:3e:63:7f:37:2f:2f:28:
66:c9:a6:3f:53:90:e4:ee:50:63:75:7f:c7:c6:f3:
fc:71:55:dd:c1:55:75:b3:25:3f:87:9e:4d:44:7d:
c9:86:75:cc:aa:e1:08:1f:09:33:34:c0:0d:3d:ad:
6d:c2:1a:04:9f:20:ed:ef:78:29:d3:1d:22:5e:dd:
62:6a:cf:c3:1c:d4:ab:8a:35:5b:81:26:9e:03:ca:
95:e2:9a:bd:53:83:e5:ed:a9:5f:2c:fb:12:bd:e2:
59:5c:04:a3:db:13:db:0a:42:8c:c5:ae:52:f6:4a:
f4:ed:4e:1c:4e:a7:23:e6:9b:2c:61:7c:80:be:91:
5d:ff:3b:1b:85:37:27:7e:e1:62:2d:e8:8d:b2:be:
9d:b9:24:3d:d4:26:69:e7:74:a3:43:3f:db:c2:6c:
86:d8:b3:7f:79:51:9c:4f:c7:71:60:ff:08:fc:63:
c9:d1:87:6d:bf:81:c3:e2:f0:5a:52:73:b7:9a:62:
06:bc:40:37:84:08:6a:d8:4a:f1:02:a8:f6:c3:52:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:07:D3:AC:D3:A0:1F:9B:85:6B:93:06:17:33:FD:85:CB:CF:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:5f:fa:ba:54:5b:8a:e5:b5:7e:81:e3:8f:41:0a:df:d3:93:
f4:24:9f:fb:00:b2:dd:ad:84:a4:11:ef:12:d3:e0:da:08:2e:
32:61:e8:b4:8e:fa:1f:91:4b:d9:2a:06:e7:99:09:ff:f0:e5:
5c:ef:b9:b0:11:a3:4e:04:62:83:54:44:f2:3f:09:92:71:d5:
4e:1d:13:16:6f:32:d5:24:bd:f9:38:e9:1d:b0:74:e4:19:a4:
2b:f3:b9:8b:6f:78:f4:a2:e7:fe:aa:3d:04:c6:1e:27:c2:cd:
f9:27:f8:c0:d7:cd:f7:f3:9a:e4:f0:c5:c3:5a:2f:7b:27:e4:
ca:4d:e5:3f:31:b9:f9:27:e5:e9:ec:e1:43:23:81:17:57:b8:
a4:e6:a0:c6:0a:fe:d2:d9:3d:78:76:28:dc:8b:11:ad:5a:6c:
38:2d:3b:80:d7:09:b2:23:e5:fa:e4:71:c3:a6:4d:62:96:f2:
6c:eb:a6:8b:c8:19:cd:96:b3:51:2b:18:f2:54:54:cb:68:0e:
81:4c:e5:06:6a:22:75:27:08:e4:60:35:df:97:f6:12:1e:51:
72:88:e4:bd:46:31:dd:0b:9a:42:0a:c8:df:90:68:4b:f0:36:
d3:f5:0c:b4:ac:42:cd:d5:c3:74:6e:70:4e:32:eb:e7:b9:09:
3e:5c:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:38:07 2025 by rpki-client