Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa
File: 8121e307-0662-3011-9f73-836d87b97545.roa (raw, json)
Hash identifier: BwzAlIlovqKXzDtdPV1qsR8LDaA5obpg8KcHm556Tbc=
Subject key identifier: 6C:74:F4:D1:3C:D6:15:EB:D3:6D:E5:49:9B:C9:D1:93:20:71:0A:26
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B11ADA141C457D2087700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:11:ad:a1:41:c4:57:d2:08:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=74fabee7-b025-4cd2-b01d-53f813af37d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:8e:c9:43:b5:44:21:9b:b4:c5:6e:5e:7c:
4c:b1:31:f9:10:6f:b1:0a:8f:b3:82:ab:76:f4:c8:
fa:43:b7:d1:14:c7:7a:80:d4:f5:45:34:61:07:63:
6b:cb:4c:89:d9:62:f7:a6:18:55:ad:4b:6a:c2:be:
6c:25:12:49:6b:59:9c:63:12:23:0c:05:16:fe:33:
17:5a:7b:65:48:26:5e:c8:e5:10:ea:81:a8:f2:3d:
1a:46:fd:09:48:e7:59:9a:54:cc:55:08:9b:78:73:
8f:5f:f3:d6:f6:a9:d8:8a:32:40:0b:7f:9f:e9:43:
e0:78:1c:5f:3c:36:e7:bf:e9:ae:ea:93:9d:ea:3d:
a0:85:59:37:83:08:67:b4:c2:80:85:44:89:d9:3b:
bc:e3:c4:f3:66:3d:04:0a:6e:12:7b:a0:2e:cf:c2:
4c:62:e3:89:94:f6:d6:e8:ef:80:b4:e8:63:57:f2:
fe:42:7c:8f:38:51:41:3d:5b:6f:ab:b5:21:80:9c:
65:dc:cd:a4:7c:85:3b:ea:e0:72:77:9d:cf:dc:36:
11:23:c9:67:70:c1:ad:15:8e:d5:4c:3b:83:30:cb:
51:01:97:3d:68:bb:41:3e:9e:29:31:af:f1:23:09:
87:3a:d6:06:3f:9b:87:b6:60:60:fb:94:e2:30:5f:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:F4:D1:3C:D6:15:EB:D3:6D:E5:49:9B:C9:D1:93:20:71:0A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8121e307-0662-3011-9f73-836d87b97545.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:ec:64:3b:56:83:ba:82:35:fc:68:ea:3d:76:a2:fa:1d:94:
65:7b:3c:a7:a7:2f:2e:82:bb:9c:96:76:2f:aa:d7:bf:34:c6:
87:53:1a:4f:8b:76:91:f4:2d:14:48:00:23:37:26:01:a3:d9:
26:de:ae:d2:db:19:5c:62:91:66:bd:e0:df:35:ca:41:8a:ce:
d5:2f:3a:0d:e9:2a:d5:0e:56:fd:34:b7:28:d7:7e:83:59:ed:
7e:53:27:e6:8d:4b:e2:3f:67:97:28:21:75:6a:a5:32:1d:33:
1e:ce:87:54:7c:1c:f6:ae:39:4b:68:e8:08:b4:49:05:0d:8d:
e2:86:87:e4:fb:c2:46:cf:88:1b:f7:fa:21:0b:f4:f7:cf:d1:
a9:e9:2f:62:c4:58:54:d5:1e:3e:e1:12:e4:4b:b8:f3:9d:4e:
ee:7f:c8:17:d8:30:57:51:b8:b7:16:7a:68:33:82:de:56:6a:
a2:97:5d:91:84:26:05:2a:f8:9e:41:14:b5:56:c1:7e:cb:00:
45:2a:47:34:07:7e:39:0a:67:6e:91:61:a6:6f:9d:4b:cd:68:
69:9b:df:a1:c8:21:04:b5:3c:0e:33:38:48:db:71:4d:f3:d8:
da:46:aa:82:ba:98:32:eb:28:df:83:f9:42:4c:50:96:08:52:
6e:fa:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:45 2025 by rpki-client