Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
File: 38432c1c-cf0c-3467-9f51-62e4ba11f084.roa (raw, json)
Hash identifier: 3Hpv0ZaTb41cWMy+iMDLEdOjtcImKoJdSVtSqcsLAsM=
Subject key identifier: 5B:0D:8A:77:20:10:A5:54:8F:7D:5E:93:34:18:EC:B2:93:9C:18:C1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A4181DA285A277F0B4200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:41:81:da:28:5a:27:7f:0b:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=58071a65-5550-4d8f-bd48-a86433ff2fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:58:fc:3c:21:9e:b0:5e:54:47:2f:7c:18:
6d:de:f9:1c:fe:7b:c2:51:4a:bc:a1:e8:f7:8c:75:
f6:d8:52:aa:d4:0f:7f:52:01:0c:9d:4c:67:a5:30:
b7:73:44:87:7d:97:80:1e:71:7a:42:7b:67:b4:37:
a2:7c:1a:f1:3a:68:d4:00:80:fc:45:0d:96:68:09:
44:3a:7c:ae:85:48:50:49:18:17:9c:34:e7:ff:37:
55:74:e5:e9:f8:01:b2:3d:8f:ae:e7:30:05:c9:c0:
d8:2b:0e:11:e1:a1:a1:10:a3:58:af:10:2c:57:f4:
4f:3a:0d:f8:61:60:2f:3c:b2:c5:e1:43:ee:d4:a5:
bf:00:e8:ed:de:74:66:54:7c:c1:7d:dc:d1:8b:a7:
1d:24:30:8b:43:5d:0c:75:be:1e:b9:c8:da:67:97:
b9:63:59:6b:39:db:ae:17:5d:19:61:1c:b9:5d:72:
cd:04:1b:20:0b:4e:0f:91:db:22:6f:10:2f:a4:3b:
0b:96:bb:3e:1a:ff:f3:8f:17:35:ca:fb:c5:bb:63:
41:f2:b2:d3:f6:44:89:e2:89:f9:27:9f:1a:3e:26:
d7:1c:3a:a8:17:6a:ee:4c:f9:80:03:18:4a:2b:0f:
a7:21:ed:a9:48:44:5a:6b:56:d5:e2:cc:95:c7:a1:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:8A:77:20:10:A5:54:8F:7D:5E:93:34:18:EC:B2:93:9C:18:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:50:0e:53:8d:36:70:ca:0c:88:3d:6d:46:84:6f:16:29:b1:
dc:c7:10:d1:a1:82:39:b9:26:ed:4e:f4:ff:57:f1:01:a0:0f:
ff:d1:91:1a:56:70:74:e5:49:81:a2:bf:42:6a:75:82:fb:d5:
4a:c5:d9:7b:ce:f3:62:64:f7:fb:63:20:70:eb:a8:f8:36:d7:
52:fd:ca:f8:a8:f1:e2:e5:7b:50:cd:bc:6e:1f:76:f0:55:02:
ab:0d:ff:60:46:60:56:ec:f2:18:19:4a:53:8a:53:4c:50:1f:
25:92:b3:b1:2b:d1:f5:87:f1:9e:7f:2f:fb:9d:d2:0e:ae:33:
e4:b9:56:38:06:9b:74:02:b0:29:9c:c5:03:f6:21:ca:24:da:
9c:36:2f:a8:ed:d9:df:86:7b:af:5f:53:d3:70:9a:c5:bc:12:
a8:f8:84:54:0f:a1:5a:68:15:25:a7:c0:02:11:e1:38:96:15:
4e:3c:88:98:4c:33:64:71:a8:d3:33:d9:a5:51:e1:a8:1e:38:
ee:33:93:56:13:ea:f6:19:0b:24:2e:3b:b1:0b:54:17:1f:66:
cb:8a:b2:49:21:3e:60:9a:e2:28:08:7c:fe:7f:02:a1:49:a6:
e0:1e:f8:a2:af:76:62:45:4f:ed:fa:c8:e1:af:d1:e0:30:78:
88:a9:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:37 2025 by rpki-client