Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa
File: accc052b-3a70-35a4-bf57-4f48b06ee41b.roa (raw, json)
Hash identifier: 9EZXAmq54DcKbCtPzlEEugM6gOdquStalE/Tiz3s7ow=
Subject key identifier: 1D:32:13:BD:18:8D:6B:9C:53:A2:08:B8:BF:AA:83:AA:A3:B6:CB:39
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A79BD4FB9411C5854C4D4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:79:bd:4f:b9:41:1c:58:54:c4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cc42d295-7d43-40f8-80e9-3075acec7db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:87:42:8e:5c:45:37:14:61:07:00:92:3d:
83:32:b4:eb:83:ea:ce:62:1e:51:7f:b4:d1:a4:94:
aa:49:59:a4:8c:69:0d:82:43:c8:b2:b4:8b:e4:23:
60:db:bd:0b:df:59:c7:21:6a:09:93:46:70:b4:18:
8e:1a:2b:82:48:b8:b1:f1:0e:a8:1b:28:48:99:b1:
5f:f5:71:d1:89:2f:41:cb:ea:76:10:10:be:99:84:
b6:d5:29:4b:7e:0f:89:ee:93:9d:c2:ae:a2:49:6d:
e3:dd:30:42:b8:fc:55:ca:46:d4:38:21:b8:db:30:
4f:97:9f:91:48:e2:1b:20:91:4a:95:75:fe:bf:de:
2b:1d:fb:38:a8:0a:7d:b9:a7:c6:3f:bb:d6:56:68:
dc:9a:ca:3d:97:61:43:61:cc:4e:2f:95:1b:f3:05:
89:26:e9:a1:a6:56:ad:c9:aa:65:85:28:81:55:86:
4d:da:05:1f:0a:77:19:5c:7c:33:1d:9c:96:b8:54:
33:69:2d:ac:12:d1:cc:13:49:00:20:a9:47:c3:4c:
12:e4:12:86:93:cb:2e:0d:2b:12:ec:b5:ff:d2:d3:
3b:cf:2b:c1:94:7a:75:1b:cd:de:b6:18:0f:27:48:
71:ea:e5:78:c0:39:72:d3:6b:f8:63:a8:46:52:37:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:13:BD:18:8D:6B:9C:53:A2:08:B8:BF:AA:83:AA:A3:B6:CB:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/accc052b-3a70-35a4-bf57-4f48b06ee41b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:26:fb:c8:33:67:21:94:ac:2f:c3:fb:2a:e4:5d:76:07:de:
a2:fb:bc:54:5c:1f:b9:48:35:b5:17:79:40:f7:7b:d0:fd:ab:
2f:8d:b1:f5:7f:f0:fa:2a:15:e9:ca:01:c2:fe:bd:ce:82:10:
4f:db:8c:e3:ea:cc:82:60:9c:65:f8:d7:5e:db:e0:c4:7a:b9:
b3:c4:43:45:9d:01:62:ca:21:c9:47:79:e5:a0:ea:0b:1f:d7:
dc:7d:a6:b1:ed:05:6f:15:52:57:21:0a:53:c4:9e:d7:8e:58:
dc:af:4b:63:d1:50:48:b0:9a:91:cb:87:8e:5e:0e:17:f8:ff:
93:75:fd:54:8b:36:5f:38:78:2d:f2:2e:bd:df:cc:8a:d7:b4:
ed:b4:fe:b8:f5:ca:37:9f:d8:c5:2e:fa:27:4a:d7:cc:61:c6:
53:92:06:56:0e:ec:f3:b0:fb:a7:ca:d6:db:58:e0:42:fc:7c:
09:80:cf:9f:08:65:bd:f8:f9:7c:04:50:05:4a:91:28:2a:62:
66:77:b9:40:56:ca:c6:c7:6f:13:10:b1:c0:98:0a:60:0f:fc:
41:66:c8:1b:49:c5:29:2d:d5:15:3b:95:f9:d7:57:54:14:2d:
ec:66:bf:e4:10:39:ed:94:0f:44:66:63:02:94:c4:75:b1:8c:
b1:bf:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:07 2025 by rpki-client