Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa
File: 30ac792c-270c-3870-94da-ed6d0b1a96c8.roa (raw, json)
Hash identifier: 1VWAD37ypYnkRoW8uprgfsdqra0kOYCjfrRQJ2jEAXo=
Subject key identifier: C0:B2:C4:9A:3A:28:4C:98:AA:5E:CE:41:CF:49:7F:10:5B:62:9A:F8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0F60626B88E886BF5580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0f:60:62:6b:88:e8:86:bf:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=16746c73-f1d9-40af-935e-4c8d6d6ccc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:c6:c5:b9:e9:59:3b:b5:2c:1b:e5:56:c3:
75:24:17:be:a4:d9:43:9d:89:ec:00:aa:7f:a5:b4:
82:30:b7:4c:0c:fa:ec:76:61:ac:21:16:80:0e:81:
78:8b:6d:96:5b:fa:19:7a:8c:35:5a:5e:5e:13:69:
f0:78:20:1f:72:49:b4:c9:f1:e6:8d:41:ec:94:37:
e2:82:98:73:15:25:75:90:83:3f:b2:20:3e:d1:c1:
04:b1:5f:ba:8f:e7:56:ac:f9:6f:2f:4c:bf:c0:d0:
ee:93:21:7e:38:0b:22:42:6a:e1:56:3e:db:15:c6:
c8:37:f7:93:64:d7:85:68:c6:71:b8:d1:77:dd:6c:
31:2d:fb:ac:e6:b0:3c:28:a9:9b:7d:78:74:82:68:
14:7f:45:1c:e0:9d:25:96:ec:8b:fe:f0:75:8a:13:
d7:84:f0:d4:4b:d3:e3:89:05:ec:59:f1:a1:0b:d0:
7b:a7:e5:b5:7b:c3:35:de:3e:11:32:2c:0d:bf:1e:
15:17:9a:71:01:0e:cb:ee:62:14:80:68:0b:3b:60:
68:7d:6e:b0:2f:6c:78:9c:be:9c:f6:1e:70:7f:b3:
42:19:4b:69:51:d7:26:7f:ed:3c:2f:64:eb:a5:8b:
cd:cd:57:ef:5b:9c:1e:13:a6:92:15:69:31:12:f6:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:C4:9A:3A:28:4C:98:AA:5E:CE:41:CF:49:7F:10:5B:62:9A:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:73:e7:cb:66:a3:7e:b6:58:e2:1a:c5:72:5c:61:ed:23:14:
72:05:92:23:48:95:db:ff:bf:4f:18:e8:d9:4f:03:28:a1:f0:
08:df:5d:a8:c9:25:ca:0c:6e:22:cf:a6:08:89:a4:2f:cc:bf:
42:cd:a0:2a:12:c0:52:52:b7:f2:e6:09:de:65:66:20:7d:dd:
3b:dd:6b:ab:86:ec:0c:9a:8e:4d:40:db:38:7d:fe:f4:fe:58:
03:2a:43:db:bb:f4:6e:f5:03:d0:14:b2:0b:b9:85:6b:93:51:
25:8a:7c:92:1c:4d:3b:3f:f0:23:21:e5:e2:29:30:9c:d2:ac:
8c:d1:05:45:84:1f:bc:5a:c6:e7:78:f1:3f:6a:8a:2c:af:95:
30:e0:00:4f:80:4a:30:24:6b:13:cf:5b:19:7f:00:6c:9f:b2:
b9:20:77:15:56:34:ae:00:2b:34:53:96:6a:71:47:fb:bb:fb:
32:81:32:2c:9a:6d:7e:c0:00:0f:55:00:7b:9d:2c:86:9f:ed:
83:cf:d9:a3:3a:6c:6a:92:fe:c2:fd:25:2e:a3:e8:af:b4:79:
80:81:2a:99:53:79:38:86:8c:71:e7:1f:3c:6c:0c:e4:29:be:
16:f3:a3:57:40:bb:93:66:43:b2:bb:75:d4:56:1d:19:9d:d2:
f1:b2:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:20 2025 by rpki-client