Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7339a836-5290-3792-a067-226c504a7359.roa
File: 7339a836-5290-3792-a067-226c504a7359.roa (raw, json)
Hash identifier: 0+5S++S5AIDfAQbRn6I2RO87AomKz58HqNSaE+QFGME=
Subject key identifier: 2F:EF:4C:63:FB:54:5E:45:E1:23:FC:B3:38:63:76:6F:51:4A:47:F5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0A1521B2EC1A3814BD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7339a836-5290-3792-a067-226c504a7359.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0a:15:21:b2:ec:1a:38:14:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7582811c-07af-4f4d-9cdd-3b9e1f9b26a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:f6:b2:8b:72:fb:5e:53:2c:e9:c3:fa:b5:
50:08:95:e1:82:c3:63:78:f6:25:df:c0:42:9a:6f:
ed:d5:eb:9b:55:16:06:89:78:5b:c9:38:75:8b:d3:
41:e9:f5:88:bc:dd:a9:17:1f:3f:74:9a:78:eb:81:
56:f0:78:d1:9d:9f:c4:6c:a9:f9:3b:22:e2:e1:e1:
00:09:f5:49:62:45:0e:80:c7:79:33:8d:d9:3e:f8:
2f:79:a7:ec:0a:6c:e0:5b:ba:7d:1b:2e:2f:76:2a:
c4:2e:54:2c:13:db:fa:80:f4:46:18:92:88:a8:79:
12:d3:15:46:c8:ce:07:23:9e:28:f4:39:03:f7:5e:
e5:84:8d:97:a4:df:40:11:7f:e2:de:24:fd:2c:ab:
47:d1:61:d7:92:88:f3:48:f7:ed:0b:e4:41:d5:f2:
ed:9e:1a:eb:e8:4a:8f:54:06:9e:97:5c:e3:bb:34:
c2:eb:5b:93:29:5a:2b:96:dc:ac:73:78:3d:ff:22:
32:78:30:10:65:1f:8a:a0:38:96:8f:40:74:0d:9d:
3f:05:19:41:a2:09:d7:c8:90:1a:0f:2a:13:68:ab:
07:e9:63:95:0e:6c:e1:d3:73:27:6b:95:2c:6a:1d:
8f:f7:76:7f:3c:f4:d2:8c:85:73:79:f4:56:5f:94:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:4C:63:FB:54:5E:45:E1:23:FC:B3:38:63:76:6F:51:4A:47:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7339a836-5290-3792-a067-226c504a7359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:66:ef:12:15:30:b3:dd:d3:4a:3b:96:a8:70:35:40:8a:1e:
c0:91:45:62:74:27:f8:40:ee:87:69:d8:6a:a8:cf:e8:c4:a0:
42:a6:e8:3c:fd:de:04:89:a4:23:01:be:21:58:ee:f2:a2:42:
8c:25:50:92:32:dd:99:90:ee:d2:27:79:1c:32:48:d8:7e:c8:
31:82:0d:b3:91:b4:00:25:95:91:37:1d:51:a4:36:f8:83:6f:
3d:ed:27:5b:d6:7c:ff:28:d9:81:8a:76:b1:d9:6e:53:79:1e:
ad:d1:89:06:03:ea:5c:15:9b:8f:72:4b:44:ed:61:20:7c:be:
b1:1b:9f:c0:67:a6:d6:b9:38:c3:df:1b:f4:5c:66:a6:c6:92:
71:d0:a4:ef:7d:74:7b:cc:8d:2d:dc:4b:e8:ef:43:bd:00:95:
fe:43:b5:22:13:08:0d:ef:3b:1b:71:b8:14:e8:ff:71:f1:1b:
8f:eb:a4:c8:09:c7:c4:4a:3c:c5:99:f0:ef:98:0a:ff:a3:57:
9f:b2:84:fa:05:f0:3b:b5:08:75:22:a5:9b:fc:4b:30:f9:50:
c7:4d:e8:41:96:d3:74:59:fd:b0:60:c6:81:05:53:c6:14:63:
0d:39:43:cc:23:5e:64:2a:1b:35:0d:81:7d:42:12:9e:47:e1:
14:e7:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:15 2025 by rpki-client