Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
File: a6cb1347-1871-37e3-b974-20f869f40c52.roa (raw, json)
Hash identifier: FvNXFtngdN25w3Tsa1JaGZShSMdLvX6sfyj6De0SYQU=
Subject key identifier: 4A:F0:BE:B9:0D:B0:EB:E3:C7:1E:B2:4A:FD:80:94:BF:72:10:95:E5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0BDF2AFCFAAE696E5CB8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0b:df:2a:fc:fa:ae:69:6e:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=227db34d-82a2-46d8-a869-38e48959be01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:58:0b:8f:6c:bd:f2:8e:ee:8c:8a:b5:d6:
d0:6d:b6:de:13:49:a9:a4:e4:c1:36:70:3c:2d:ff:
0a:68:c8:51:f4:ba:4e:74:c1:31:07:d6:4d:f6:7a:
fc:4f:91:a1:16:e0:b9:dc:84:5a:bd:78:c9:69:05:
4f:e4:3e:59:7c:72:36:a3:b4:25:df:f0:c9:ea:6d:
72:90:b6:4e:33:3e:1b:e1:8f:c3:70:d3:db:23:4b:
82:27:df:71:5e:20:e8:26:bb:c8:b7:1b:c2:67:68:
ba:b3:0b:af:bc:e9:96:dd:6c:8e:6f:23:f4:b8:c8:
54:f3:f2:28:2b:ec:da:ca:de:37:bf:56:86:7a:d3:
ae:09:2c:da:61:d4:d8:b1:23:79:15:92:13:47:ff:
5e:78:d3:ef:c7:96:fb:03:d2:7a:e5:6e:f8:71:67:
48:e4:9b:b0:74:67:9f:5d:f2:3d:b2:67:1c:d6:2f:
06:58:ae:86:5e:77:b2:02:bf:06:5a:fb:41:d4:7a:
49:64:e0:a7:00:0e:91:b7:85:96:cc:5c:33:be:4f:
c9:d7:77:ee:15:ad:bc:37:e2:48:46:f5:10:ff:12:
ef:a2:06:8b:c5:c7:33:5e:7e:88:ae:48:66:ca:1c:
05:55:2d:b1:dd:af:85:5e:61:7f:dc:91:41:36:99:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:BE:B9:0D:B0:EB:E3:C7:1E:B2:4A:FD:80:94:BF:72:10:95:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:28:30:5c:8d:36:2d:5a:3d:28:6c:b5:39:07:b7:70:b2:87:
8b:85:81:ad:1a:e0:ea:8f:5f:75:5d:0f:c3:2a:5d:d3:ad:4b:
49:11:cb:72:57:28:8a:f7:85:46:df:99:9f:fd:ed:50:cd:0f:
e6:c2:cf:85:c6:66:44:1d:bb:fa:54:30:d9:72:60:ac:fe:81:
45:b0:e2:19:71:24:c3:73:d1:89:ba:a7:a0:3c:87:5f:6d:75:
74:51:da:a1:85:70:fc:3a:43:22:89:73:2a:d3:7f:85:e0:ad:
9f:11:06:cd:cb:74:87:8d:df:af:48:72:af:bf:ba:30:c1:c8:
b2:36:40:c7:7b:9b:c8:a8:b8:d2:0b:cb:49:32:49:aa:49:e3:
0e:8f:57:83:e5:8b:2d:23:62:74:bc:11:6a:f0:9f:83:3e:20:
b9:98:d7:0e:11:a6:14:78:df:bb:a9:d5:b3:cc:94:b2:14:b4:
1a:fc:d0:bf:c3:03:d2:4f:57:7c:56:cb:12:cc:84:c8:eb:8d:
35:ab:4f:24:4a:d9:79:37:51:93:ad:5c:ef:79:2d:b8:56:21:
4a:87:4c:6c:0f:7a:2d:2b:c0:4d:0a:fc:26:dc:f8:12:da:c4:
78:7b:cf:0e:d0:ca:65:98:40:f6:59:2a:a2:d1:aa:fc:41:fe:
b0:d8:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:28 2025 by rpki-client