Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa
File: 7094c99d-de74-3c33-9177-33bb5817299b.roa (raw, json)
Hash identifier: nwAilv8fQ+LRVl07WdcG/AALdT87YduZTmYZhaXd1tg=
Subject key identifier: EC:F2:D2:93:73:FE:94:91:FA:73:63:8E:B6:FE:27:94:D8:A2:8F:5F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7BA760E449595BB1C3A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7b:a7:60:e4:49:59:5b:b1:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e2eb327d-0eef-4189-9616-c2f088910ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:fc:13:cf:be:a5:c0:85:bb:80:cb:47:24:
52:d6:ae:9f:e8:c4:14:6a:d1:d1:bf:65:3d:ce:b3:
ce:3a:97:bc:99:4e:b4:79:1a:5a:2c:74:7a:25:fe:
36:15:b3:cd:bb:9b:02:f4:5e:27:96:d7:03:3e:9a:
78:3d:4a:7e:d6:8a:d7:d8:d3:fa:ac:70:ed:d2:f6:
cd:be:ae:1f:f1:e6:c5:32:17:d1:c7:90:cd:ed:75:
9a:05:b3:e8:a9:66:05:97:ff:90:10:f4:a7:d7:55:
b0:ea:88:3b:3d:3e:51:b5:d5:fb:bc:fd:b8:ca:9a:
7a:6d:f5:29:0e:dd:e9:60:1b:31:eb:42:40:0f:a3:
a2:4c:4e:a9:5f:49:90:5c:c1:7a:af:f0:b2:87:a3:
0e:ff:f4:3e:87:77:0e:50:ea:5a:5c:71:ea:fb:83:
98:ec:b3:e6:cd:c4:7c:38:67:aa:40:69:be:d1:0a:
bf:fa:1d:23:e8:15:f0:04:60:a0:f4:d7:c4:39:06:
36:c6:d9:c3:36:f5:b6:19:5b:39:34:e8:da:1f:ea:
2f:93:eb:c1:73:1a:1e:ab:7f:6d:6c:41:65:4b:47:
bf:00:64:64:b3:cc:d4:60:0c:02:e5:4c:65:55:c5:
91:ff:b3:4e:13:03:46:4c:7c:aa:6c:37:c1:ed:c0:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:D2:93:73:FE:94:91:FA:73:63:8E:B6:FE:27:94:D8:A2:8F:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d6:4d:d1:dc:c9:91:26:1a:0a:6a:14:b1:12:50:19:75:b3:
72:db:41:fc:09:f6:d6:25:da:b3:cf:62:66:21:50:d3:e4:ac:
63:04:37:ae:98:a0:a9:53:1d:a0:cf:77:1b:9e:22:b0:97:80:
0b:49:6f:85:2b:38:1b:1a:e3:2b:95:2d:24:d9:bd:51:86:bd:
7d:c5:43:f3:73:c1:f9:49:aa:11:75:14:93:36:a2:c9:1f:98:
1b:36:c3:eb:8d:df:47:a4:88:cf:2a:7a:ea:a5:82:60:44:4c:
e7:30:9e:47:6b:fd:57:70:30:c4:81:15:6b:9b:a1:e3:c6:f2:
38:8a:cf:ee:6f:58:4d:e8:c7:29:d3:29:9e:03:96:ff:6f:45:
03:17:9a:e7:5c:08:a1:19:d1:56:37:e7:c6:c8:f8:86:88:f0:
61:e1:58:56:4c:b1:bf:2e:f9:a3:96:2f:14:8a:74:6f:7a:ca:
7a:29:f5:61:60:b1:7c:13:fc:8a:ae:93:25:bc:53:12:5a:ae:
6b:21:b0:7d:0e:b5:34:08:25:bc:15:88:57:32:90:7a:fc:7c:
27:fa:e7:6f:16:08:ca:d9:4d:57:9e:61:5b:17:96:00:41:2a:
ff:d2:ad:70:73:2e:31:08:d3:8e:42:96:f2:24:29:16:ac:3b:
ee:50:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:20 2025 by rpki-client