Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa
File: 444d8605-e43f-3a45-9171-1e19616c6a5a.roa (raw, json)
Hash identifier: Ibk/YY/UJrdg4/0jehkhMOGX7EuI337QB/E+KDiC4xY=
Subject key identifier: 26:A0:B9:C6:7D:EB:19:58:E3:B7:02:BC:8D:50:0F:F9:DC:6C:DD:99
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7C4E58E9999F88668B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7c:4e:58:e9:99:9f:88:66:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ce632998-9646-4615-b9a2-afb9e4d4da72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:ff:77:2f:0e:34:95:d1:a4:2c:ee:7d:cd:
3e:e8:13:de:a4:a3:30:f7:4a:3a:7b:4a:59:95:48:
94:36:5c:51:8f:ac:c2:2f:50:e8:b2:9f:ea:25:38:
44:58:e5:88:21:3a:76:d9:c3:fa:45:83:13:40:de:
14:38:db:d6:84:44:5b:93:c3:88:39:72:b1:c2:65:
1c:ed:b9:c1:d9:db:5d:3c:cb:77:60:6b:06:c0:c4:
4f:ef:f8:b0:2b:b0:16:6e:1a:f1:fb:57:f0:b4:f0:
e8:4d:38:31:89:1b:9c:73:f3:b2:6e:a6:c3:8d:b3:
b4:2a:49:46:12:48:c1:63:9f:f9:5f:61:b9:69:06:
b7:d6:c3:8b:7c:11:84:d9:f1:89:c5:87:05:66:34:
9c:44:29:7b:3c:fc:71:2b:75:ca:60:d2:37:6c:32:
37:00:23:82:10:c0:f9:ad:ee:d5:62:1c:75:74:97:
cd:f9:3d:8d:54:62:64:d3:4d:34:45:c5:9d:f7:34:
26:98:a4:70:3f:65:1b:dd:f8:26:3d:79:b4:d9:cc:
20:4b:a8:87:17:54:c8:75:b9:79:9c:f7:8d:8c:9d:
8d:8b:60:af:ea:3a:23:0a:5c:6b:01:ce:c1:3a:8a:
b2:57:ac:4b:a0:df:f7:90:db:09:46:99:bc:58:bc:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:B9:C6:7D:EB:19:58:E3:B7:02:BC:8D:50:0F:F9:DC:6C:DD:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:40:f7:11:45:68:57:23:d8:ed:5e:73:4f:d2:3f:ac:1e:cd:
45:bc:3f:ec:61:4d:54:09:d1:be:4d:f2:f8:03:96:43:17:c9:
e9:33:ab:bb:f0:20:bc:c0:10:42:ba:1d:81:45:e5:ad:b3:06:
7d:70:61:69:54:7f:dd:b6:09:f2:b5:c1:46:75:b4:fe:be:11:
0f:ca:78:30:5c:b2:a5:a2:fa:b0:22:9f:05:a0:f7:33:f0:79:
15:dd:cc:03:03:04:e9:60:7e:5d:d0:b5:65:8f:87:a5:6e:41:
cc:2f:4d:39:a6:3d:e7:f9:49:c8:03:d0:ad:aa:e8:a8:a9:c0:
c1:aa:1c:bb:6c:33:a8:a4:c3:f9:d9:cd:59:25:d8:fb:e0:6e:
00:c9:fe:c7:b8:67:00:fc:10:85:7a:0c:5f:ad:50:81:ad:3e:
20:24:90:c6:53:b7:97:60:7f:a4:48:57:06:fd:5e:d5:1c:03:
df:53:d9:69:7f:2d:dd:da:1b:84:ad:ca:ea:a4:30:70:7b:bd:
af:a1:02:75:5d:5b:6a:73:a4:11:aa:7c:9f:a4:33:af:0f:c2:
12:52:25:13:e9:c4:fa:33:6c:7e:e9:92:b9:2f:69:bb:ff:69:
8c:93:f0:99:3f:b7:f8:a5:4b:42:36:38:f9:78:f1:52:e9:9d:
a1:e6:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:39:35 2025 by rpki-client