Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af4a61d3-92bd-32ca-a3f1-c31fe238c790.roa
File: af4a61d3-92bd-32ca-a3f1-c31fe238c790.roa (raw, json)
Hash identifier: ZKWSRxCyc0fJmv7/JXUzvFQiGXj8g97RajNSQj/mLPU=
Subject key identifier: DB:D5:E0:B3:D5:75:B2:35:3A:27:37:F6:DC:81:21:71:B2:79:16:45
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A6E4101F9124916B29080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af4a61d3-92bd-32ca-a3f1-c31fe238c790.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 162.72.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:6e:41:01:f9:12:49:16:b2:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=99a6807b-359d-4ad7-9ff6-6544836d36df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:7f:e4:05:13:15:95:3c:da:78:49:09:c2:
03:95:a1:db:8b:c3:82:0a:1c:5b:9b:27:e1:8d:c7:
ea:3a:fe:e7:1a:8b:ca:df:63:af:bc:b4:5a:04:20:
cc:3d:08:67:20:c8:72:77:54:be:60:f3:8e:84:59:
8a:6b:61:04:cc:04:7f:d1:84:ce:7a:df:7b:cd:43:
25:29:28:91:7c:ce:e0:5d:54:ca:27:4a:4f:9b:1b:
d4:79:20:d4:eb:3d:93:55:68:6a:c1:39:95:5f:81:
56:fb:83:85:64:57:6f:11:55:e7:0d:6b:45:ca:54:
1c:4e:82:ca:ce:9f:2f:71:f8:50:b9:74:71:1e:e8:
dc:e5:9f:46:fe:11:05:41:27:8a:94:74:45:00:3c:
41:63:7e:e4:9e:e8:59:f4:e7:ea:66:dd:d2:d3:41:
1b:fa:76:b2:22:00:9e:43:07:e2:00:3e:e2:fd:81:
25:52:6f:f1:a2:e8:b7:cb:06:c9:3d:d4:c8:8f:40:
86:0d:c8:c4:00:4c:d3:20:07:8c:f1:00:f5:c1:04:
b2:b4:dd:40:80:34:2f:40:e3:1f:e8:29:e5:07:1b:
1a:0a:c0:ea:4d:68:f9:9e:dc:dc:a7:80:c6:f4:de:
f1:b7:74:cf:90:bd:d5:de:58:8e:07:11:c4:be:5b:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:E0:B3:D5:75:B2:35:3A:27:37:F6:DC:81:21:71:B2:79:16:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af4a61d3-92bd-32ca-a3f1-c31fe238c790.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
162.72.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:68:c5:9d:25:78:e8:05:4b:1d:2b:cf:7e:d6:52:55:56:c3:
89:d4:de:b4:d5:87:e2:d3:00:56:36:a7:8a:41:42:1a:bf:ca:
33:c7:f8:6f:af:54:a7:e0:3a:6e:8a:b1:6c:d7:84:11:69:66:
88:17:90:55:35:b0:d0:32:2a:51:5f:6c:ea:72:ed:1f:7c:d2:
16:ae:f7:db:81:05:de:b0:b5:e0:84:d8:68:42:21:c6:fb:cb:
f4:6a:5f:64:0f:7b:d6:ec:e1:1e:1f:e5:6d:b5:ef:92:77:8d:
3c:1d:84:9e:6e:ed:f2:4c:a4:ef:1b:fb:81:5d:96:ec:e0:e9:
b6:a7:bd:91:b8:6c:61:9b:52:1e:80:c5:fb:79:53:25:1c:7c:
fc:ee:72:b3:b6:74:c5:74:b8:bb:4d:b1:f6:7e:bb:35:22:d7:
7f:c1:16:2f:8a:48:78:24:ff:d8:c1:46:8f:4e:df:02:7f:2a:
da:81:2a:8e:65:77:ff:76:66:3e:02:37:af:a0:80:bc:73:4e:
44:92:0e:97:79:d0:7f:af:41:3b:15:0d:08:8b:da:04:ee:c3:
37:3c:dc:9d:34:7a:ea:29:56:03:ea:bc:32:c8:ed:2c:32:3e:
50:32:ab:a3:50:da:2f:c2:2b:9d:3a:7f:29:c8:45:89:e8:e2:
19:71:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:07 2025 by rpki-client