Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa
File: 8b4de3df-8b2e-3f11-838f-cc4776dec817.roa (raw, json)
Hash identifier: 86NFmGHXeJYZHkyiNMx2i6xD7JqtuxoZMatskDB+UiQ=
Subject key identifier: 4B:BA:79:0A:28:8B:03:6E:22:78:C5:F4:9F:69:7D:27:DC:9E:E5:F8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0A34038E0D279CF18900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0a:34:03:8e:0d:27:9c:f1:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=65218ead-efc5-4c9d-bf12-bb66f71f6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:03:b7:47:a2:5f:70:4b:14:5e:a7:c0:40:
4a:7b:2d:a3:4b:bd:70:c5:38:48:d6:59:d1:c2:7d:
f0:65:3c:e7:0c:de:d0:ac:99:98:8f:77:93:36:3b:
ec:60:d1:86:07:89:21:3e:71:8a:8a:e2:36:06:ec:
9d:5c:15:65:aa:89:07:30:65:bd:b8:89:db:01:b8:
2c:0b:67:f2:e4:0d:8a:d7:c7:e3:3b:e7:c7:8c:2c:
29:68:de:8c:2c:10:cd:a2:30:75:97:0e:be:ad:8e:
94:93:e2:e7:44:e5:e0:f1:72:28:8f:03:44:16:34:
80:dd:81:a6:80:7b:34:d6:08:9f:e6:cd:45:70:ef:
d1:c7:c2:d8:e1:23:da:43:52:de:5b:db:9a:87:ad:
54:3e:a6:af:31:04:70:8a:a7:a3:c4:75:c1:6d:91:
a7:f6:40:ad:49:19:d6:81:ea:15:cf:54:12:fe:7a:
f8:d2:c8:bd:f7:e2:aa:c5:65:9a:3b:c8:f1:22:ad:
89:e5:3c:46:20:dd:52:5d:ed:49:0d:7c:be:4a:1e:
90:b2:cb:33:0f:e8:18:47:c3:a4:af:eb:66:a7:ca:
65:12:1d:6d:c6:d5:9d:05:d7:79:24:f7:5e:81:b2:
7d:7b:5d:52:56:0d:14:4e:48:66:5d:ec:40:32:71:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:79:0A:28:8B:03:6E:22:78:C5:F4:9F:69:7D:27:DC:9E:E5:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b4de3df-8b2e-3f11-838f-cc4776dec817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:90:4f:41:30:42:0e:86:88:2c:fd:c0:60:00:3b:de:b4:a1:
e2:72:da:41:72:ed:79:f3:9c:ce:24:f4:59:28:11:3c:f8:0b:
dc:49:29:3d:db:6e:42:27:a5:b3:66:3c:a1:9a:8b:0a:e8:28:
e1:44:93:f0:4d:ae:f5:47:df:7a:b5:a8:d9:80:d2:24:40:f0:
c1:ff:6b:ec:c3:0c:e9:cb:5d:21:2e:b2:08:96:88:bf:47:15:
73:ed:dd:fb:a7:54:f8:0e:15:a0:77:ed:d3:6c:d7:96:73:8a:
6e:e2:87:25:8c:b1:dd:e8:cb:a8:57:7b:52:78:db:6c:11:df:
2b:d5:9d:ef:15:47:67:fb:54:38:6e:7a:60:6c:07:18:83:c9:
5c:9c:2c:34:97:5c:3c:0c:51:c2:68:2c:38:57:57:da:a5:36:
40:11:a1:b0:5a:fc:8b:7f:c5:cf:88:e8:29:b3:80:b6:9f:82:
47:54:08:51:cd:76:5c:f9:e0:fe:6a:9f:4d:17:48:fc:1a:53:
6a:c6:a7:6c:e8:03:46:2f:76:1e:a2:c1:c0:a9:4b:28:96:0c:
07:8a:56:66:a6:57:29:bd:58:37:a4:4b:0d:6a:52:cc:33:1c:
a0:0f:e3:c1:45:e0:0a:2a:91:4f:8d:ca:1a:0d:b5:e2:93:e0:
cd:56:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:15 2025 by rpki-client