Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
File: ac356b71-f897-35d7-9961-f79dac30925d.roa (raw, json)
Hash identifier: sbJVNNnbAhtE9AEfLOGkCA0TCS4yd4Bnu/+C5noHMUU=
Subject key identifier: A5:FC:BF:C9:21:1D:04:04:78:6A:CE:4E:C7:05:05:3B:A9:D7:33:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD0FAD2EBF259DFC7D980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d0:fa:d2:eb:f2:59:df:c7:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=1ed1a1c4-6733-4a96-b543-3d814802c9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:41:fc:0d:66:c5:05:4c:41:18:4f:0f:0a:cf:
79:9a:fc:3b:5d:03:93:85:79:13:ee:ca:c5:ca:d5:
88:23:00:04:a2:a6:29:b5:b5:9e:81:f8:29:1b:31:
11:f6:34:e4:4c:eb:e1:0c:c3:68:f6:c2:ac:9c:f3:
6c:25:4b:43:bb:ae:28:41:b8:18:47:3d:6c:d6:e6:
9c:67:9e:55:14:ce:90:00:79:e8:66:29:74:c4:93:
34:de:2b:5d:15:fa:65:83:1a:01:8f:8e:82:23:8d:
aa:f8:02:e0:8f:bf:6c:6d:55:c6:df:25:b2:a0:e8:
e0:4f:b6:4f:ca:73:10:c1:a1:17:82:27:33:93:1c:
4a:32:85:a8:99:1c:c6:4c:96:86:91:66:ef:6a:ea:
46:bc:e7:49:92:7d:26:1f:80:f0:82:54:52:55:91:
e6:71:02:94:27:50:1c:ad:fa:ba:8e:dc:c5:2e:2f:
1a:2d:a5:3a:f6:d2:bf:f8:5f:53:ff:2a:85:9f:72:
67:2d:d5:4a:5c:64:4f:2e:02:5d:37:b6:c1:56:9b:
d0:a1:18:1e:16:48:9c:05:b9:f7:a2:e2:24:bf:90:
43:ad:b8:0c:b9:5a:e2:fb:50:dc:59:f6:f5:0b:f3:
04:56:97:c6:be:ae:98:35:4c:f9:b1:f8:c6:6c:03:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:BF:C9:21:1D:04:04:78:6A:CE:4E:C7:05:05:3B:A9:D7:33:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac356b71-f897-35d7-9961-f79dac30925d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:77:64:2a:05:4b:3e:44:fe:8f:7c:ae:bf:ac:9c:f7:62:bb:
e3:df:9a:07:4f:51:92:7a:c6:10:e1:f8:32:ed:83:9e:d3:d2:
8b:95:f9:22:e7:0c:2e:53:b5:6b:1c:7f:10:52:db:83:7f:77:
bf:c5:8e:5f:26:47:2f:d9:38:62:45:ef:0a:b7:23:7e:31:af:
f6:eb:70:da:16:37:6b:28:3e:84:b1:34:bc:f1:d1:e1:60:31:
3e:8f:ea:fa:56:f8:2e:8a:89:2b:c5:d3:8a:9b:34:3c:c8:30:
59:4e:59:98:1a:72:ba:ed:d6:43:75:a7:e3:a1:64:ce:ee:e1:
07:f5:b0:c4:c6:9c:81:f3:9f:1a:9a:0d:29:94:2c:9d:51:d4:
30:28:20:09:43:e1:05:23:67:b7:cf:62:46:20:72:5f:49:4e:
b7:f0:e7:60:a4:fc:e1:17:94:e3:87:e8:e6:88:a1:3c:64:0f:
8f:cf:91:09:6a:6e:3d:ae:99:9d:f8:76:d4:51:db:3b:61:88:
dc:92:f5:6a:78:f4:40:63:8f:3d:42:8f:f4:55:fd:a2:77:bc:
1f:a7:18:e5:24:8d:c0:00:c4:cf:c9:aa:60:70:17:6a:df:f3:
08:5f:76:5d:72:7d:bc:d8:10:9b:6b:34:96:62:b1:f0:3a:bd:
6c:04:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:06:29 2025 by rpki-client