Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
File: 68f42845-cc20-3621-b523-10070dd8ca9f.roa (raw, json)
Hash identifier: mZt3dyGJHW6B3oKkPuILHAn9iy6tZDJ7TB/dBfxQHoQ=
Subject key identifier: 25:23:60:8E:0A:3D:4D:00:BD:41:76:3B:E5:F3:20:32:26:33:66:DF
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B063596B7B1F1DC320908
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:06:35:96:b7:b1:f1:dc:32:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7795bfa9-7ad6-405b-a942-3851006c9a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:97:87:5b:90:f6:ae:82:4d:d8:56:ae:72:
29:72:16:57:99:d4:a1:4e:6d:69:2f:9c:a7:02:45:
9f:d0:05:62:0f:59:fc:77:8f:c7:d5:e1:a6:21:92:
34:11:d3:ec:aa:18:36:ea:31:58:a3:f4:08:55:46:
da:59:97:30:f3:4d:f6:52:7d:6d:24:5e:db:a2:60:
27:c3:37:1b:66:35:60:10:bf:e6:06:18:2a:e4:4b:
de:4f:ee:32:76:d0:b3:9d:7f:3e:ff:95:10:1b:b5:
20:2d:0b:1e:ad:bf:ff:d6:e5:3f:48:ec:29:bc:8e:
e8:13:ef:c2:d8:ac:45:40:d0:e9:2f:a9:32:bc:75:
16:00:0f:91:14:56:3d:b9:af:05:75:48:77:e2:7d:
ed:b4:1c:1f:c4:ce:5a:b3:1c:84:9e:2f:7b:1b:b4:
11:bb:7c:37:f7:e5:34:67:e3:5e:ea:5b:f9:a8:e7:
8d:38:b0:a1:d2:c2:b8:8f:eb:5c:ce:20:85:b5:3c:
a6:dd:22:42:06:59:a5:8e:3c:e1:68:41:31:3c:1a:
b5:b0:32:59:6d:de:95:71:95:1e:04:69:f6:cd:cb:
46:5e:ed:df:29:96:48:e5:72:4e:07:1a:15:13:b2:
b1:c8:96:c6:1d:46:cb:1b:19:68:59:f1:16:fc:f9:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:60:8E:0A:3D:4D:00:BD:41:76:3B:E5:F3:20:32:26:33:66:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:df:72:2e:69:68:af:e8:0c:89:02:74:8f:a2:76:e8:59:da:
e7:5b:42:b1:45:54:af:c6:30:2c:00:b9:76:f1:e1:a5:3c:d0:
5e:57:96:2a:26:74:14:e7:e2:3e:bc:10:0f:9e:25:7d:10:08:
cf:df:3d:89:20:00:1b:10:d1:5e:91:ea:6e:77:aa:b0:75:f6:
3d:04:a7:97:a4:3f:7a:16:b1:07:87:f6:38:f9:56:a1:aa:1f:
72:f9:6d:7f:37:c1:3e:2e:5c:1b:0a:57:5e:6e:32:18:05:c0:
4f:e4:20:2f:a9:f7:3e:94:29:d6:d5:82:02:1e:74:b7:2c:8f:
14:c8:49:11:39:40:a9:47:41:20:0f:4e:eb:ca:93:0d:59:c8:
de:49:cf:31:21:26:fc:c3:65:58:4a:49:21:76:3e:86:c9:d0:
55:a0:67:d1:9b:ac:36:27:34:8b:4a:5a:1a:ec:21:47:b9:65:
fa:0b:57:7f:bd:25:f9:4f:61:62:43:29:52:4a:38:65:0d:63:
4e:27:29:c5:0e:b1:5a:eb:30:8a:bd:55:c5:52:49:4f:9b:d6:
a3:f9:71:82:73:6b:f5:aa:74:d3:92:54:5b:a9:8e:98:d4:04:
f8:1e:13:89:ae:7f:6b:2e:ca:5a:64:35:02:75:ed:a1:6f:72:
a1:1b:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:59:30 2025 by rpki-client