Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa
File: 92548fef-f4d5-356f-ba3d-7a5589ed7919.roa (raw, json)
Hash identifier: n2c2CUWYhlmi2O0vIcChamMy/mWFEeKnDmcGJZoPl74=
Subject key identifier: 45:26:32:61:40:04:C5:F9:59:2C:AE:6B:97:58:E1:AA:8D:3D:AC:ED
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B11D0D9EAAEDDEB46F0A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:11:d0:d9:ea:ae:dd:eb:46:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c251b2e4-be17-402c-8818-53ef777c705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:38:92:38:42:1f:59:e3:f4:f4:f6:4d:c3:
48:d4:46:45:b9:ee:79:28:96:a0:35:f5:b9:ee:36:
24:dd:2a:ed:77:26:ab:44:ae:16:b5:e6:a3:3a:4d:
79:88:a6:1a:f3:42:57:d5:4c:82:e4:28:23:ba:4b:
1e:76:25:75:90:53:d3:22:87:4e:9f:7e:25:3d:03:
6a:25:d6:6c:e5:20:51:d5:82:de:d6:60:55:0d:19:
d6:4d:92:62:8f:99:8e:64:ef:d7:f1:a6:07:97:60:
8a:44:08:18:5e:98:70:de:42:26:76:75:fd:c4:16:
47:fa:e4:7e:a4:f0:fc:aa:7c:8d:46:a6:86:25:60:
02:1e:b8:4d:08:20:0c:c0:56:b9:d1:65:d5:be:1d:
dc:b7:bd:1f:f3:90:97:1d:cb:a9:65:57:18:92:98:
30:64:fd:93:75:be:0a:bf:2c:9a:05:e1:10:4c:39:
7c:c3:cb:b6:25:70:71:c0:26:76:9f:67:67:45:fe:
18:63:37:ea:09:3b:e1:e1:1f:79:2e:ce:a7:dd:df:
bc:70:5a:62:b5:b1:6a:3c:52:25:de:99:db:cc:0e:
fa:a1:2e:0c:42:5b:e6:f8:7c:e7:bd:75:65:b7:d1:
16:25:69:cb:38:e1:ef:69:63:e3:0d:3c:09:45:45:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:32:61:40:04:C5:F9:59:2C:AE:6B:97:58:E1:AA:8D:3D:AC:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ed:75:78:67:01:c0:66:d1:3f:e7:02:36:df:42:8e:1b:4e:
94:be:2f:8e:fb:a4:64:4c:c6:02:75:1e:ca:c4:cf:f6:78:22:
b4:7c:5f:51:b3:86:00:84:a6:17:08:e9:91:c9:e5:03:8e:c4:
77:b1:5d:0e:e6:a6:30:53:e5:8a:d2:60:c4:6f:38:d3:c0:e4:
45:29:f1:9c:74:a8:84:6a:0a:17:db:9c:43:fc:ba:29:27:6d:
6f:d6:c4:2f:6b:e5:c7:91:8a:ba:c2:a3:86:0b:d8:3e:37:d4:
b3:0b:6d:4c:27:90:3f:d6:b6:d3:a4:2e:24:dd:ec:b2:d2:ee:
de:e8:9e:16:a3:da:98:39:71:9b:af:02:4b:da:a4:35:61:a8:
82:34:e1:20:87:22:7c:a0:1a:e4:ca:86:34:b5:ae:a0:11:b7:
4a:18:e8:02:7f:73:3e:16:aa:82:4a:a1:af:90:bf:a4:25:78:
98:32:df:96:fa:5a:2f:c2:c5:e9:f9:a8:d0:37:90:2f:88:28:
a1:fe:ff:25:5b:96:cb:9d:ea:9d:ef:e3:2f:9b:bf:23:f3:9d:
f2:29:b3:b6:71:b4:d8:e5:70:a6:8c:0c:63:c5:2d:32:2c:37:
e3:0d:dc:cc:b8:d0:58:e5:d0:fd:d9:ba:97:9e:3f:f5:0d:1b:
fc:5e:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:21 2025 by rpki-client