Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bd8564a-766c-39ba-bba6-20b7faf9a523.roa
File: 7bd8564a-766c-39ba-bba6-20b7faf9a523.roa (raw, json)
Hash identifier: 66m+c9/xhxZk03yIk8/so0x9uMZp17B4W8gN8C6dFOc=
Subject key identifier: 9F:60:39:58:E4:D1:85:AD:FB:51:23:F3:55:1A:3A:EA:C2:CD:9C:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0B6AA1375031D57A8880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bd8564a-766c-39ba-bba6-20b7faf9a523.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0b:6a:a1:37:50:31:d5:7a:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=97da4bca-2b91-494a-97da-a82468ecb039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:25:fe:94:5a:7f:40:3f:6e:77:4a:01:5e:
5f:e5:11:24:95:95:05:26:4e:ae:ea:66:53:3e:17:
f2:4a:98:35:1a:cc:33:d4:34:1c:d2:d9:ed:74:09:
20:15:f0:ed:09:2e:09:12:92:09:38:ba:f9:88:77:
a6:b3:c2:af:8b:16:50:04:b2:5d:95:24:e3:a1:0b:
6b:08:ee:9f:f5:fe:1d:e8:ab:68:62:b4:91:07:37:
49:d3:87:c6:74:5c:48:ad:b3:ae:80:89:28:cf:ba:
7f:65:70:6d:33:b9:51:3d:76:e3:38:81:c8:68:81:
29:e7:70:c4:13:03:0f:03:8b:94:f8:4e:6b:cf:65:
21:bd:dd:9c:0e:e8:13:e2:8f:9f:c4:0a:73:2f:2c:
19:b3:04:18:06:ef:76:10:54:30:62:06:42:c5:21:
fe:61:3f:d6:fb:0e:a5:65:32:4a:81:3f:a5:64:7e:
ce:9c:61:de:e4:4f:14:e7:37:3c:d0:48:05:78:b6:
43:d0:16:c4:cd:46:23:21:c2:40:31:d9:46:f0:99:
fc:03:d7:91:da:a3:0c:16:05:4e:fe:5f:53:30:91:
20:1a:59:10:a1:2e:31:90:41:c2:d3:17:aa:30:93:
f1:dd:cc:76:ad:89:5c:8d:38:6d:7c:d7:e0:0f:74:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:39:58:E4:D1:85:AD:FB:51:23:F3:55:1A:3A:EA:C2:CD:9C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7bd8564a-766c-39ba-bba6-20b7faf9a523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:ed:7b:0c:8b:97:3a:f6:9a:e5:f9:1a:cd:15:1f:ca:a4:ae:
0a:ba:38:a2:12:6f:99:98:8d:df:a4:66:d7:d4:1b:34:ce:36:
d6:ab:16:34:91:04:34:ea:5c:e1:ae:72:e3:fc:e7:22:93:7f:
58:dc:5f:e2:3e:ed:41:2f:3f:0a:57:d0:43:a2:f0:46:63:ec:
c0:93:e8:19:e3:1d:76:67:f1:58:55:ed:2e:08:d3:6f:fc:ac:
9f:55:ba:62:d1:13:71:a9:a0:0b:fe:3a:6a:7f:c2:a4:6d:db:
bd:de:7b:f8:b5:09:c2:7a:2f:88:ef:4a:dd:87:8b:18:cc:7b:
85:6b:e9:22:2d:cc:08:f0:36:98:69:fe:2a:db:29:53:86:5f:
62:e1:9e:58:7f:28:49:d3:d8:71:c2:6f:cd:55:ae:86:9d:6a:
1b:ae:ea:1b:96:9e:4f:0f:4c:5e:c0:cc:bf:43:0d:40:56:8d:
2a:e2:9e:ad:8a:1b:73:15:14:0e:ac:2b:41:f0:09:30:b3:19:
36:bf:1d:91:1c:ef:5c:b8:ef:7c:c0:0f:7e:d7:99:b9:4e:f6:
05:58:8c:02:55:b3:19:e0:d5:eb:f3:92:7a:ec:01:c8:30:10:
e5:1b:ee:23:23:17:eb:46:78:95:5f:89:b6:74:c0:da:9b:1e:
a0:c6:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:22 2025 by rpki-client