Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa
File: 6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa (raw, json)
Hash identifier: D6uJorj3rXfd4kxCekX72etk0sUtdNUXUYGeqZIf7kA=
Subject key identifier: D4:72:BB:08:92:46:47:DB:78:6E:7C:90:07:5E:52:2C:32:9E:C4:A3
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7358BC0CFF3E29F56CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:73:58:bc:0c:ff:3e:29:f5:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3f057200-bf7b-41ca-a26d-9b21e0b9afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:a4:18:a5:d2:f9:f1:85:4a:95:cd:f4:fa:
0e:4f:af:4d:56:ac:0f:b3:37:25:b0:32:5d:6d:18:
40:85:14:fd:d1:f4:91:8f:98:f4:e2:59:1c:72:d7:
b1:5b:fd:94:3a:5f:bf:4e:83:d7:35:e2:0c:c8:dd:
c7:85:1e:b9:9d:82:b8:75:e7:4f:e7:a5:59:89:8a:
03:dd:23:70:21:ab:eb:26:79:c0:aa:83:22:d5:4c:
eb:05:36:7b:3a:de:54:77:49:f3:c5:50:ff:5c:e2:
86:a2:83:21:50:64:56:75:88:2b:96:65:74:b4:ab:
0a:4e:da:5b:94:3e:64:00:f6:3a:c8:94:fa:dc:df:
2d:86:90:ba:89:03:4c:cf:f8:50:d3:3e:2c:c7:90:
2c:bc:c4:1f:20:0d:92:63:9a:56:3b:3f:51:da:1d:
0b:6d:77:f7:1d:05:23:f1:fa:fb:85:82:56:9a:8e:
99:92:6b:cc:96:3f:8d:be:af:98:47:49:cd:94:67:
7d:a9:c0:65:9a:53:0a:e7:7a:7b:e6:87:e4:46:44:
73:18:ff:3f:a4:a7:f0:fc:91:70:8e:44:3a:c2:46:
c8:11:f7:ba:a9:17:47:74:5f:d7:61:1f:08:43:8a:
5d:4a:95:ec:f9:0d:06:50:81:30:b3:e0:ce:ed:bd:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:BB:08:92:46:47:DB:78:6E:7C:90:07:5E:52:2C:32:9E:C4:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:e4:a6:b7:45:ea:f6:c4:c0:47:28:79:43:a7:19:71:77:84:
48:da:03:06:e1:c8:7b:68:b3:0e:3f:20:b3:1e:b6:c8:7d:ae:
76:d6:06:ff:5e:58:96:b0:f6:3c:6e:57:1e:c5:7a:a1:65:af:
89:0e:09:c1:29:98:a7:18:4c:57:3f:a6:bf:54:7d:16:33:8c:
1a:be:2f:4b:01:cb:c6:55:9c:f0:be:97:82:84:3e:3e:e7:b9:
3a:1b:cb:95:58:2b:6f:92:1e:9a:fd:d8:a9:18:13:e7:dd:4a:
a4:ba:28:b9:84:9c:41:cc:61:4b:95:5b:f1:fa:73:ef:08:73:
76:00:ca:e3:78:43:e9:e8:2b:33:cc:f8:35:08:52:d6:cc:e6:
08:a6:91:02:ab:09:1b:8e:05:c0:1c:0d:3d:5a:c0:e6:7f:33:
81:09:ff:6b:b9:c1:8c:b5:36:45:fc:80:9b:e6:2d:8f:fb:05:
c9:8c:f3:b9:54:f7:23:4e:eb:4f:ea:16:01:76:45:64:37:7a:
23:6a:2f:82:7a:24:9f:9e:a7:31:7a:4c:82:d5:76:49:9a:1a:
06:ac:a7:92:6c:01:c3:6d:6a:44:5e:eb:cf:01:b7:cf:d0:7f:
75:1e:93:a0:b3:b2:8e:ec:7d:aa:e9:ee:d8:73:e3:d0:0b:2e:
a6:a2:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:43 2025 by rpki-client