Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
File: 5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa (raw, json)
Hash identifier: NwzJIp5zRI/nNt0N79Zu+13NhX0Q/PYP9BuLsl0JheE=
Subject key identifier: CD:30:0B:DD:F1:CC:C1:23:13:9D:E7:B1:6F:DC:D4:2E:EB:06:AF:FC
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0D7909DBC082A7B62680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0d:79:09:db:c0:82:a7:b6:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3e9ccc79-14dd-4355-9c5d-fdb9865608bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:02:6a:67:bf:e0:1c:a4:19:a1:7a:d0:04:
ec:0c:81:7d:6b:43:22:bb:63:2e:49:bc:65:6a:36:
b5:a0:74:8a:cf:34:48:b9:e2:40:72:e4:ae:0b:84:
d6:f9:b0:60:23:3d:d7:7a:dd:0b:89:2f:12:ec:c3:
1c:46:4b:90:de:dc:f2:7c:96:66:08:e5:23:9e:96:
7e:90:91:bd:db:c0:31:f8:a1:d0:82:0f:21:4a:30:
b1:c2:52:79:45:d0:5b:da:3d:13:6c:44:7e:47:ed:
ab:73:67:78:e3:61:cd:c3:8a:55:f6:54:f6:fb:cf:
a4:47:85:74:22:22:07:05:78:97:eb:71:1f:29:a2:
28:f9:8b:a8:55:d7:82:e2:19:1d:c7:ae:66:88:4c:
67:c7:cf:58:52:68:37:25:8f:10:6c:db:17:cc:7c:
f9:14:f7:a6:2b:cf:27:52:35:bd:2a:17:17:a8:00:
df:89:88:80:d4:53:d7:08:a2:16:43:08:31:56:d9:
40:04:4d:c1:e1:72:74:bd:38:cc:b9:3f:bb:ca:86:
67:a4:88:fc:58:9d:63:3e:96:eb:f5:cd:cc:d0:c3:
a5:7f:06:91:a4:12:69:bd:e3:63:03:c8:2c:08:4a:
0b:af:94:e6:44:8b:18:57:96:48:bd:d3:d1:e2:22:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:0B:DD:F1:CC:C1:23:13:9D:E7:B1:6F:DC:D4:2E:EB:06:AF:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:02:5e:6e:1a:5c:f8:53:36:e6:15:e9:a4:e9:8c:64:ab:41:
78:e2:e4:e4:0f:b1:77:56:73:cd:cc:62:51:92:95:5f:06:ab:
6c:18:78:f0:f3:0c:23:83:f7:bc:ab:bb:2c:47:0e:b9:38:a9:
96:da:75:a8:83:b6:14:96:d7:75:e8:1f:d0:3e:6b:59:24:bb:
e8:ac:a4:56:80:b3:4b:69:27:dd:31:f1:60:9b:15:ac:5b:d3:
fb:0e:c2:2e:e3:1c:d7:e8:37:8a:dd:49:02:45:1d:02:34:3b:
a5:de:dc:f6:90:63:89:45:86:e9:4d:e5:75:b7:27:ed:a9:32:
f5:ce:73:8d:d6:e7:26:5b:76:fd:53:5b:06:93:7c:7e:7f:54:
d5:9a:19:f2:3e:2f:b5:87:9e:d0:fc:4e:7d:74:2b:7d:25:43:
2b:59:98:5b:84:2b:25:a0:0f:eb:ce:5a:f4:82:33:66:91:9d:
52:91:4d:f8:2b:cf:f6:40:56:e8:ac:c0:c8:e3:f7:53:b2:6a:
cd:3b:0d:57:99:3b:b4:34:bc:8c:dd:33:2d:f7:ca:b2:73:65:
ed:3e:ef:f1:d0:45:04:42:fd:db:32:e2:30:6c:b5:41:e1:d2:
2b:c7:fc:68:8e:a5:b4:c6:a3:3a:ee:ad:1d:7d:5b:24:e4:d9:
32:f8:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:41 2025 by rpki-client