Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
File: 40420dc4-9d4c-3850-9245-08633abd44d4.roa (raw, json)
Hash identifier: KZ0DZg9VphSA50BIylxy5GyVWMgKhAFcjjFQuPyxohE=
Subject key identifier: 76:3E:A8:03:3B:92:EB:98:C6:8E:10:85:05:2D:3D:25:1B:CA:4D:08
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD1E0A8B06CA0BDBDD940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d1:e0:a8:b0:6c:a0:bd:bd:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5a783039-a333-4e30-930c-680540994bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:b2:fe:ea:e3:41:aa:0d:b3:e8:f0:7e:2d:
ce:32:27:33:47:90:aa:2d:64:7b:b2:d3:af:4f:ce:
3f:af:b0:47:af:43:00:30:56:ca:0c:06:6f:db:d4:
cf:ad:07:e5:1e:cc:ea:30:79:09:8a:02:ab:74:44:
29:07:6a:97:02:3e:b5:0f:50:35:ef:5b:36:11:a2:
72:ac:1e:07:ca:85:09:d4:95:62:64:e0:44:a6:cb:
d5:ca:48:da:8b:aa:42:f0:b1:f9:98:e9:5a:56:eb:
1a:62:ad:4d:0b:85:21:7e:c8:5e:0c:be:42:97:4f:
9a:97:52:81:6c:e3:f7:68:02:b4:fd:77:f7:91:aa:
1e:f9:30:a5:40:e0:9b:47:a4:49:72:a9:01:62:40:
f5:c7:3d:1b:6a:cc:3d:3d:2a:34:4e:f3:89:71:3b:
1e:eb:5d:1c:ad:c0:5a:7d:b3:53:bf:9e:a3:d8:ad:
89:38:15:fc:91:00:69:7e:b4:22:86:4c:b9:a2:35:
af:4e:89:05:95:28:bb:b6:ad:b1:f0:24:89:d4:9f:
70:c1:1b:3c:34:3c:d4:2d:24:89:32:64:c2:71:40:
06:da:a7:c3:09:04:ee:57:4b:87:74:8a:1d:92:f6:
a2:d1:cb:ca:45:f0:c1:13:91:fb:d3:09:08:51:07:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:A8:03:3B:92:EB:98:C6:8E:10:85:05:2D:3D:25:1B:CA:4D:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6e:a1:78:25:7f:95:4c:b2:3e:19:46:09:03:5f:7d:dd:9a:
2a:19:cb:3f:93:4e:7c:df:4a:ef:58:37:d5:d4:b0:41:42:a5:
0a:a0:35:cf:23:23:e6:22:26:82:1c:4e:0b:d6:7f:8b:b1:22:
80:e3:80:a5:ba:2f:da:c1:2d:3a:87:c4:5c:4e:3b:20:da:db:
5e:6d:a3:3e:6e:aa:55:a2:43:43:af:39:4d:41:1a:5e:b8:ec:
24:f0:d8:81:8d:9b:41:a2:6a:ff:63:96:c7:f3:8d:61:d7:0a:
f0:ee:98:76:b4:7c:b9:37:f3:c2:70:97:91:e0:78:c9:33:5a:
0c:fd:f2:c0:1e:f5:12:6d:f4:2f:5f:78:62:f9:fa:91:06:aa:
7f:47:c1:98:e1:4a:05:29:0f:5a:cc:51:d4:36:5c:57:de:6f:
28:95:6e:59:7c:ac:78:5d:e5:a5:76:36:1f:6d:f5:b8:64:29:
df:2e:1b:50:54:3c:fa:9c:38:2f:13:33:19:90:c1:4f:cd:52:
ef:36:37:f3:18:72:c5:da:1b:78:49:55:54:12:3d:ac:8a:00:
4b:6b:10:6f:b4:95:7e:65:13:98:c1:0d:10:da:66:c4:1d:b7:
5e:a1:fc:c7:e4:e3:fc:8f:3a:8c:04:7d:fe:75:82:bb:f1:96:
28:56:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:37 2025 by rpki-client