Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa
File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json)
Hash identifier: tpjVDbvTF+GJD2RbKYaQcfiaKJhu+fDbJl9J9DPeIgc=
Subject key identifier: BB:87:F6:68:FD:8C:45:47:5B:7C:E7:C5:E7:15:A4:F3:22:C5:FC:B0
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B06C884706384272C68C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:06:c8:84:70:63:84:27:2c:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=21c51736-ba55-45bf-90e1-cef27d4c1fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:f1:8d:53:6b:29:72:53:b5:d6:e9:df:35:
4d:49:50:d1:b4:64:a4:15:a6:fd:90:ef:fd:67:ff:
5b:0e:95:d5:a7:ed:b9:26:2b:4e:55:02:ba:70:b1:
6e:c3:48:97:3a:db:08:8e:28:89:2e:4f:cc:1b:57:
04:65:83:24:a3:ed:f1:40:f4:67:88:8d:36:29:85:
18:9f:14:f1:fc:ed:cb:16:10:73:b2:ea:7f:8f:19:
d1:31:7b:23:c9:c2:c4:32:97:7b:51:dd:89:2e:72:
88:5f:75:ea:7f:34:0f:ab:da:2d:15:62:b5:31:dd:
2a:03:2c:8e:34:e5:0a:b5:cc:ce:90:e3:00:32:0d:
7f:84:c7:bc:e5:e4:2f:6f:10:54:ae:32:06:96:d6:
b9:73:ba:e9:c5:2a:09:69:cc:51:21:d6:2e:a8:88:
30:63:2c:d4:28:91:57:93:29:eb:60:cb:de:7f:d7:
e6:a1:10:a7:05:df:da:15:c3:f7:6c:51:b9:8d:18:
54:3d:04:b7:a4:56:7a:f2:1e:57:5f:ea:14:8f:61:
38:ac:73:b0:d2:17:46:3f:74:52:8e:85:c1:d3:26:
85:f9:9f:d7:14:6f:bc:b9:f9:32:0e:b4:42:e7:7f:
04:bc:ce:ec:67:81:fc:b7:08:14:f6:98:c8:5e:13:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:F6:68:FD:8C:45:47:5B:7C:E7:C5:E7:15:A4:F3:22:C5:FC:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:97:63:97:ee:2e:99:ba:38:df:8d:58:b8:1c:ef:de:b2:0d:
d9:cb:39:d5:33:26:bc:81:69:f8:0d:f0:e2:06:b3:8a:e7:e9:
2b:c2:27:e8:8a:9c:c4:4e:09:68:a1:37:a9:2f:50:5a:1f:ef:
b7:bf:63:2d:3f:d0:9a:8c:6d:d0:69:78:3c:12:de:89:a5:74:
9e:0d:4c:09:4b:db:46:62:ff:eb:ab:d6:1e:9d:00:6f:1d:0e:
be:47:20:0d:c5:7f:72:36:57:a6:51:c7:d3:61:41:79:db:cb:
9e:e6:ac:02:26:3e:83:d6:31:46:14:9b:cf:c0:d5:4c:2e:fc:
7c:20:37:a9:e7:43:6b:13:69:26:29:c9:a0:c1:87:0a:28:1c:
2e:51:4e:9a:c1:2e:e8:60:be:de:5c:62:cd:c9:ab:98:c0:f8:
66:85:db:48:61:91:a8:1e:07:ff:39:30:9f:06:fe:3c:a2:23:
fb:da:e0:a2:28:75:e6:a8:da:0d:3c:82:b0:8c:19:c6:f7:97:
96:ae:33:43:47:b4:fa:80:7c:54:f9:28:1e:44:cf:dc:3a:95:
60:e5:e1:20:f9:d2:80:8d:20:94:62:0f:53:16:b8:29:a0:df:
2b:8c:b4:7f:ca:79:b5:f8:d1:d3:92:ce:5e:fc:17:f8:44:c0:
c6:48:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:12 2025 by rpki-client