Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa
File: 5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa (raw, json)
Hash identifier: FvxctEzDkW6gV2WIs9Qw+2wst5Vy+BVDYnfEYiT3Cwg=
Subject key identifier: 8F:46:30:2F:96:99:77:EE:10:72:CC:4F:FB:58:A6:89:73:15:F0:C6
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7625F1CD06D7D242FC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:76:25:f1:cd:06:d7:d2:42:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=9445c75a-75f4-451c-9779-f300382f861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:e8:49:5c:ba:7a:a3:74:c6:88:ae:c4:d0:
5b:ea:ec:86:af:c7:ca:27:a3:a5:d3:65:d4:5e:91:
c2:fd:2c:6c:83:1a:ae:d8:73:9b:9c:e6:ca:a6:52:
5e:f6:04:71:84:29:38:85:73:69:8f:a0:82:17:ad:
4e:1b:c5:95:9d:7f:94:ed:9c:22:78:66:10:fa:fe:
66:8c:a1:d1:70:4b:65:0a:a6:3c:55:37:bb:71:36:
af:5f:ad:41:af:cc:af:bc:54:25:d4:f2:7a:bd:e1:
26:a9:f2:e5:2d:c1:23:7b:db:92:b8:1a:30:a2:62:
82:75:f4:3a:f2:3f:f7:41:6b:da:96:38:81:d1:da:
10:d1:69:96:5c:a7:82:6b:9f:68:28:f1:45:03:19:
72:c0:6c:74:7f:37:21:b4:ed:bf:63:40:13:d0:90:
18:ee:2c:31:d0:7a:5c:e5:d5:bd:6c:38:13:1d:b5:
cb:98:93:ed:88:b3:d9:d2:c8:74:87:0c:f9:c6:f5:
50:58:d3:e6:89:c9:cb:b1:05:a5:7c:d0:40:ed:de:
24:91:c7:8a:bb:fe:03:01:0b:01:7a:97:1a:55:50:
1c:e7:d1:ef:f6:96:e1:5c:63:81:46:df:05:00:70:
68:99:7a:28:bf:67:87:74:92:af:4b:c7:2f:15:56:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:30:2F:96:99:77:EE:10:72:CC:4F:FB:58:A6:89:73:15:F0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:85:dd:67:b7:88:e4:64:f7:1b:8e:82:28:ce:51:d9:c7:22:
14:47:80:fd:22:6b:f2:8b:42:84:06:ad:1a:d0:ea:34:47:38:
5e:f9:f7:f7:f5:a7:e5:b1:89:96:5c:79:3e:19:83:aa:8d:0b:
f5:47:84:72:39:36:0e:5c:29:66:de:7c:a8:bc:cf:26:36:e2:
13:a4:6a:10:2d:8b:42:04:96:7e:50:cb:6e:36:54:a9:65:47:
98:67:fb:3e:b6:cd:a1:de:bb:81:91:24:de:3e:a0:3b:c9:af:
b8:c0:16:79:f5:ff:ef:48:94:cf:c5:2f:9e:57:3d:5a:d1:7e:
ea:ed:8a:33:3f:e8:e4:a1:a9:8f:4c:6f:ba:e3:9f:a1:e5:e4:
27:14:07:c6:ef:b4:e5:f6:7a:5b:4e:19:66:16:9e:69:19:9d:
74:ab:5c:60:64:85:f9:1a:ef:26:39:d2:9d:3b:52:e1:85:37:
e0:6b:e9:e3:bd:d6:c1:f1:6c:91:15:dc:68:b1:bd:7d:64:10:
90:54:cc:56:7f:5c:59:5a:a4:e3:c6:69:8d:3e:d1:d9:2c:0f:
e7:26:c0:06:2e:a1:22:cb:9e:1e:bd:52:9d:25:5c:7e:e6:d9:
0e:56:a7:dc:f8:1f:4b:47:67:52:50:36:f8:e7:2f:f7:27:4a:
19:5d:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:03:15 2025 by rpki-client