Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
File: 669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa (raw, json)
Hash identifier: KZ3nTPBaiv3TY1OfibzirR6bEsaN0wikENzCQCKMUWg=
Subject key identifier: D6:EC:47:C7:0F:FC:39:93:94:98:79:6E:9C:60:BA:BF:EB:77:88:1B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0AA5D500C25F85C7CCE8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0a:a5:d5:00:c2:5f:85:c7:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=24e2c2cf-99ec-4938-87b7-1497d9008675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:a3:7e:f7:85:fb:81:f5:76:85:f8:6a:98:
2b:62:75:ca:18:59:88:24:92:7d:45:ff:a4:22:b4:
07:13:06:42:b8:3d:43:e0:7f:c4:55:b8:0c:ac:8c:
e1:1c:6a:0b:1f:c5:da:88:0c:73:5e:45:ce:1d:df:
37:28:c9:87:a1:4e:af:8a:b4:b4:b5:64:a3:f8:a1:
b6:71:3a:d1:71:ed:b5:d1:29:c5:bb:fd:20:b7:aa:
f7:ec:94:e6:dd:e1:70:f4:c4:f7:42:79:fe:7a:c9:
fb:23:5b:6f:6c:d1:ac:31:5c:0d:68:49:b1:63:8e:
d0:67:48:1f:df:43:80:49:aa:ad:9b:e0:2b:30:d3:
cb:81:f9:26:29:5c:55:91:f9:21:d7:93:ff:99:de:
3a:cd:44:f2:2b:e7:f9:66:87:17:bd:15:36:57:87:
8d:87:6f:c8:8d:42:dc:12:a6:13:ea:23:86:4a:5e:
47:67:4a:b5:1a:7b:c8:c5:f5:8d:03:2f:7c:3a:d8:
b5:42:5b:e2:80:5a:13:d9:37:29:c3:1f:5a:f6:eb:
15:86:76:68:af:83:d5:0d:9b:78:fc:67:8b:44:6f:
2a:f9:5e:6f:e9:b2:a4:c2:86:32:1c:4a:b0:ab:0f:
d2:3e:51:c6:9f:73:7e:ab:c6:d7:e8:1a:cd:90:0e:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:47:C7:0F:FC:39:93:94:98:79:6E:9C:60:BA:BF:EB:77:88:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/669ba9e5-5cde-383b-bb6f-1c56fb5060b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:b5:c2:66:02:07:3b:3b:ce:50:29:10:0f:c2:78:dd:35:5e:
e6:e1:4f:ee:55:b8:05:89:b4:63:48:0a:42:61:58:1a:ff:ac:
6a:5f:2c:24:69:f0:e4:f9:50:dd:5a:6e:47:56:f0:e8:74:39:
22:6f:3e:4c:8d:ae:24:1f:2c:39:70:8b:6e:51:55:b7:c2:3a:
14:2d:5f:13:ea:52:ce:f9:55:85:ed:71:a3:a2:e6:dd:00:f0:
b0:7f:be:c0:a3:e9:2f:e7:5b:29:75:d7:9c:61:77:6d:07:49:
9f:5d:28:c4:0e:a3:88:c0:db:72:61:7f:de:9e:8b:96:8a:3a:
1f:d7:e9:57:ee:f1:f0:79:69:26:2b:49:d7:f0:f7:72:cd:64:
df:dd:41:6e:ab:d4:21:d8:f9:23:ac:a5:ba:1a:5b:82:a5:29:
53:af:39:ff:64:3a:2a:5d:82:4b:9b:4d:09:49:ff:13:62:24:
9c:c4:ec:07:90:f9:b5:2a:69:e3:11:0a:ff:8b:77:cc:06:d7:
3c:a4:c5:5c:95:ec:40:18:b1:88:4e:e0:49:4a:8b:25:8b:8c:
53:1a:af:cd:9a:b8:c7:53:75:48:0c:27:30:25:55:13:85:1a:
a1:e6:43:3d:25:6b:d2:be:dc:6e:6c:fe:5e:41:41:78:99:c6:
91:bc:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:19 2025 by rpki-client