Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa
File: 3507b290-125c-3f58-85ba-ed6602ee5ef5.roa (raw, json)
Hash identifier: lC7pSvpK+K4hZoY5B+RtjMoZbLO+ezgDWdudBjSjo00=
Subject key identifier: 8F:C2:A6:84:C1:41:29:4C:CB:42:67:00:0F:6C:E8:F7:F7:E6:B7:2A
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7341F94C90402B00C300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:73:41:f9:4c:90:40:2b:00:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f92d971a-faac-43aa-a1d5-e9d1d8e29082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:38:f7:54:20:74:cb:ab:2a:d6:a6:12:fa:
29:bd:00:d7:37:d3:6f:30:fb:58:43:37:c5:79:51:
43:85:1c:86:54:c9:16:36:4c:fd:e2:ce:53:03:6f:
cf:6e:88:9b:e2:f8:47:44:bd:b3:8e:e1:35:05:4a:
35:72:e4:d0:6d:f1:1c:c8:1a:57:f8:d5:f1:54:73:
dc:b9:36:66:8d:da:9f:b2:6b:e3:fb:4f:82:96:df:
fc:a8:45:e0:15:9d:0c:19:f2:84:9f:43:80:ec:55:
ea:09:86:87:09:64:aa:22:3c:e8:50:01:b1:c4:6a:
90:7e:6f:cc:06:ef:64:f3:a4:ca:01:14:e1:4d:06:
a0:8c:18:0b:67:85:f1:1a:98:26:59:4c:b5:d0:b9:
2e:62:a2:e6:46:40:c5:ba:f2:33:f6:69:bd:7b:37:
18:be:cc:16:d5:d7:94:e0:55:2d:9e:cf:af:05:17:
c6:0f:89:14:d0:c2:82:25:9e:fc:30:8c:e5:40:e7:
30:ea:33:9a:7e:0a:e3:b4:1e:21:66:5f:1a:51:88:
88:39:83:49:77:19:76:2c:dc:db:32:bf:7f:02:bd:
24:86:19:fb:ca:88:98:ad:30:56:8a:e2:fe:28:47:
18:59:ac:8e:53:1f:28:18:f0:52:c3:e1:13:ce:9f:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:A6:84:C1:41:29:4C:CB:42:67:00:0F:6C:E8:F7:F7:E6:B7:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:d6:de:10:8f:bf:54:a5:cf:7d:26:10:b5:26:8d:88:7e:dd:
e5:69:1f:02:23:97:a9:a0:f4:ec:12:26:3c:4c:74:fa:58:3f:
98:09:20:39:43:35:4d:f0:29:e9:c9:04:7d:49:d2:e2:15:5c:
a8:10:15:a0:74:b0:ab:48:7c:d0:05:38:d3:7f:26:5a:3f:28:
52:9d:3d:14:2c:36:3f:99:3b:e4:b9:69:86:ae:8b:26:df:d2:
f0:82:86:4e:1f:d1:20:9d:82:18:99:2d:08:93:30:da:fe:bf:
5e:fb:ad:b3:9a:48:c7:ba:27:2f:fd:08:d3:86:90:5c:51:c1:
b1:ed:1d:ce:1e:1f:59:5e:dc:72:51:71:e9:4a:be:7a:5f:01:
21:7c:9d:a4:8c:3d:4a:31:cc:96:27:b2:93:60:c1:e4:7b:6c:
aa:45:16:70:25:7a:09:d4:6b:49:74:8f:38:7c:10:ee:d9:1e:
75:0e:8c:00:91:e2:5b:b5:c5:7a:1e:b3:2c:0d:4d:c7:f5:05:
be:11:c4:67:04:59:51:c3:87:35:cf:88:ed:09:f6:a5:60:f5:
4f:65:9a:8d:84:98:e9:13:d9:1c:95:54:93:e7:a4:a3:0a:98:
ab:99:69:3c:16:bd:cd:07:b5:61:d1:8f:76:de:f2:26:ed:14:
2b:e7:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:53:25 2025 by rpki-client