Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa
File: 612d23fb-4960-3992-9900-1108e1d14c07.roa (raw, json)
Hash identifier: bQU8UMMdVHXrK77MgIfjGBrMJI4Pd4P3TT5JRXZxx7w=
Subject key identifier: 70:A6:85:E1:BD:FD:05:9A:57:37:3F:E7:69:60:65:2F:A8:AB:99:79
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B097AA1A281A517217900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:09:7a:a1:a2:81:a5:17:21:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6538cbc9-e5af-4024-8302-4a5cd6e1375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:da:d0:d5:82:4a:5b:e8:c7:29:76:87:e4:
81:62:9f:b1:8e:9f:5f:3f:68:bd:9b:9f:83:b9:6e:
56:30:5f:d4:15:e6:02:ca:dd:8d:7f:26:ff:79:8a:
2b:44:04:e7:23:a2:a6:fa:cc:12:f1:4a:1b:ac:49:
9c:d3:7a:0b:e6:fe:a6:ac:e0:9a:8e:a4:b4:98:51:
6b:a1:63:bc:d3:80:c3:7b:bc:ed:fb:a1:30:a2:96:
c2:2d:80:29:4a:c7:86:42:ec:12:a3:d1:7f:a6:ab:
2d:2d:26:b2:34:b5:9c:0a:e7:95:80:98:f1:8a:22:
7a:c7:7a:97:e8:71:ee:aa:e9:5d:11:9d:73:60:d6:
b2:8b:2d:54:53:86:0d:36:b8:5c:9c:b3:08:20:5d:
b9:dd:c1:03:7a:22:a9:84:4d:7a:2a:e0:2c:18:04:
0f:c2:ef:94:30:0d:10:ce:fe:37:06:a2:20:e8:4e:
4e:8c:3c:3c:37:a1:1e:47:43:49:1f:21:0e:1f:ed:
aa:20:be:ca:71:5c:1d:85:5e:26:20:18:03:5e:fb:
22:09:1e:65:95:e2:45:6f:c4:28:d0:0d:17:a0:79:
81:1c:96:ec:dc:74:a4:0c:b5:68:45:d8:50:58:fd:
64:63:04:ca:8b:c9:16:4f:18:5a:17:aa:fd:7c:d1:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:85:E1:BD:FD:05:9A:57:37:3F:E7:69:60:65:2F:A8:AB:99:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b3:cd:cc:7a:ef:7d:3d:c3:9a:e1:53:a8:d6:52:91:a4:58:
f0:34:03:73:89:be:de:f3:3b:ac:c5:77:39:bc:89:b8:73:44:
23:e5:5b:a0:8d:d7:52:7f:74:97:28:67:16:2a:ee:4d:68:4c:
e2:6f:9d:1a:70:79:2b:aa:90:8b:16:0f:0c:b1:ef:9f:c3:bc:
51:43:ac:8f:25:6a:55:af:f8:50:57:b1:08:75:91:17:e9:b1:
e8:c2:3c:c6:da:d3:30:01:b5:93:bf:ec:d8:19:c7:13:79:17:
43:bf:63:04:74:ba:51:a7:64:52:fb:cd:bc:1f:ae:ff:55:70:
ff:6f:01:5b:1d:ec:e3:15:c4:65:97:5d:90:75:24:14:37:cb:
14:e6:d7:7d:d0:c7:bd:a6:09:8a:af:25:e2:a6:2c:66:a6:93:
3d:46:83:6d:50:5b:da:d0:91:4a:eb:b8:be:35:69:fc:73:27:
d1:23:b5:db:c6:1d:f1:34:8f:66:64:23:a2:88:35:1d:1d:11:
16:80:eb:09:ee:83:81:c2:96:ad:63:64:51:41:cf:81:31:01:
3d:cf:58:a5:2a:b8:f1:5d:22:83:bc:77:03:46:5e:4e:66:98:
11:ea:d7:2c:6d:6b:3c:ec:73:d8:3e:d7:6d:99:91:d5:37:96:
72:3c:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:53 2025 by rpki-client