Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa
File: b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa (raw, json)
Hash identifier: rasqCcPMioG9HgXPfvy06yjU89W5fOn4nf0vP9smOzU=
Subject key identifier: D0:F2:F8:B0:A3:6B:C0:AC:7B:FD:9B:9B:DC:1E:E8:48:CF:6B:FB:72
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A37D0AA8486877224B200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:37:d0:aa:84:86:87:72:24:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=dc60d541-cd3e-4114-8863-c9574e014c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:51:c1:a7:57:74:87:30:68:c2:3c:0b:62:
17:8a:b2:ec:64:fb:9e:36:43:48:41:24:83:a4:e2:
f3:61:e2:e4:2c:d0:a1:87:38:36:18:13:f8:c0:57:
aa:1b:4f:6f:63:1e:07:b0:15:47:1f:56:41:4d:6f:
39:a9:56:45:49:44:89:ba:66:bf:e4:bf:95:46:c6:
d2:2f:7b:9a:86:41:6a:64:e3:a3:ab:1f:e2:e0:75:
dc:fb:a4:2c:1f:a8:17:0c:db:a8:0f:45:f8:42:17:
0d:2a:f6:56:00:91:c9:02:fb:34:d3:47:fe:70:8c:
08:45:fc:09:43:b7:18:81:69:ea:87:59:e9:8e:0d:
b9:fb:32:fd:f1:5e:6d:7f:3a:41:f6:ae:b5:e6:8e:
96:6c:da:86:0c:27:92:8e:9e:51:f4:01:02:bc:a8:
14:e1:aa:27:fb:6c:cd:3e:58:36:4f:d4:a6:93:54:
4c:5e:06:7d:24:11:fa:c0:cc:71:73:d5:ad:7c:a4:
30:44:3d:0b:50:74:2b:13:6d:8a:b9:b5:c2:dc:90:
52:8d:bb:e1:73:b4:d7:2a:9d:d2:43:4d:a4:94:c7:
b9:64:29:74:c0:81:db:e3:14:47:2d:ff:ca:c6:1f:
7e:0f:a2:0b:47:1c:52:a2:bc:1e:b6:4e:76:f0:1d:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:F8:B0:A3:6B:C0:AC:7B:FD:9B:9B:DC:1E:E8:48:CF:6B:FB:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:ed:77:8c:db:0e:2e:d1:d2:fb:9b:fc:7c:36:91:c3:df:13:
8c:bd:1c:a8:54:db:96:83:67:ab:9d:e2:c6:90:d4:b7:3c:b8:
da:e1:2f:c9:ea:af:cd:44:e6:2b:70:78:94:3f:38:9d:23:72:
a0:42:03:96:f3:69:f1:6c:ed:56:0f:eb:91:8f:cb:c0:85:18:
aa:20:5a:df:d2:de:70:2c:4e:30:80:ea:64:37:7d:4f:17:21:
a6:93:b0:53:d7:4a:22:fb:94:52:10:bc:77:d5:05:84:09:b7:
04:64:7d:a3:1f:4b:8d:8f:31:c1:1e:f7:17:3b:f1:52:5c:20:
89:9e:07:37:62:de:5a:35:c5:44:cd:4b:68:b1:33:e6:85:8e:
87:7d:75:96:ea:98:c2:f0:36:a7:dd:10:de:20:4f:91:8b:86:
4c:78:7e:82:10:05:29:3d:57:c9:09:24:79:f8:3e:3c:18:b2:
55:51:db:db:f1:f1:ed:0e:bd:b8:a4:54:78:28:02:29:88:2a:
32:a5:72:9f:48:6b:86:60:c4:9c:03:04:ff:ed:c5:0c:03:c4:
25:00:e2:c7:98:20:a4:e7:ec:a5:3a:4f:56:a9:f0:e5:b2:aa:
e3:51:b8:88:2a:ea:d2:c7:09:80:b5:be:64:2a:0d:37:cb:13:
69:fc:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:11 2025 by rpki-client