Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa
File: b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa (raw, json)
Hash identifier: RcSycFf+J/5kinfWRnHZ45jlh3O44viqLZANt+cbLSI=
Subject key identifier: 14:5B:CC:B2:74:66:4B:9D:73:70:B7:CD:43:0D:1B:A5:59:88:C4:92
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A78F9A5DA2D17E7C85300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:78:f9:a5:da:2d:17:e7:c8:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8cadf8f1-db4d-43e5-b5a6-48c0831d6704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:4d:2c:47:2d:66:5d:a9:18:f1:56:87:6d:
a7:77:72:af:fd:40:e5:48:17:b4:a9:bc:70:87:76:
d3:d7:91:d9:58:3e:e2:d6:c5:0f:9a:b3:a2:8f:1c:
6b:05:37:b5:65:5f:01:03:11:7e:26:0e:28:0a:5e:
5b:87:77:97:68:01:4b:f3:a8:57:a8:b1:d4:12:ea:
5b:5f:a5:20:95:8a:c2:60:e3:fe:80:ba:9d:e1:be:
f8:be:fc:e5:76:04:62:16:31:cb:7a:3d:43:b4:71:
d9:9e:0e:23:96:28:06:07:99:8f:ed:5c:e0:73:ca:
79:63:bc:47:5e:ae:a7:be:14:6e:4b:96:83:41:99:
eb:42:00:30:5f:d8:76:5d:93:88:4d:15:cb:58:93:
01:c1:b4:43:b1:16:ae:47:d8:7e:a3:96:d4:fb:6f:
cd:12:21:0c:4f:df:0f:02:d4:08:ee:a5:de:2f:cb:
ea:c9:a4:3e:32:e8:c9:70:db:5a:01:47:2b:ab:5d:
9a:a2:6c:7c:2e:f4:c5:8e:0a:83:10:06:37:a2:87:
aa:a9:03:37:14:d4:5f:b6:1c:a2:1a:eb:ad:b7:d4:
b9:f6:81:b8:e7:56:2d:3e:26:72:93:56:44:45:67:
cf:1a:e9:04:be:59:0c:7d:f6:eb:f2:f6:33:9c:b2:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:CC:B2:74:66:4B:9D:73:70:B7:CD:43:0D:1B:A5:59:88:C4:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:18:dc:06:01:99:fe:40:0b:b5:f1:0c:ab:d7:84:e8:c0:95:
32:00:37:66:de:00:5d:ee:21:6b:7c:96:81:eb:5f:f5:b0:ea:
ac:58:7e:95:77:34:0e:5e:8f:83:c4:ef:92:a9:89:d9:27:1d:
be:24:ab:b3:c0:ab:a5:a8:5f:6f:81:0a:a4:3d:cb:50:62:50:
72:69:3b:4a:d5:cc:24:c7:83:9a:6d:cc:27:ff:e4:2b:f1:ec:
2a:05:ed:fd:15:44:d0:4a:8f:f6:56:84:c1:a3:6b:6d:dd:65:
83:31:b7:0d:77:ff:60:94:94:0d:92:f3:26:cd:08:a1:45:bb:
eb:f5:74:49:a6:b4:09:0e:b4:00:3c:54:53:a1:04:13:66:8f:
88:c0:16:d6:14:65:cb:77:ef:ef:e7:7a:81:fe:84:d0:04:a3:
3e:19:c8:9b:11:4d:5c:bb:74:30:cb:11:18:3e:e2:c8:0e:a9:
83:1e:34:f0:30:cb:a5:67:a6:0d:f9:25:08:37:00:9a:45:26:
e7:67:02:0f:fe:ed:47:cb:24:28:26:95:74:b5:9f:66:30:b4:
39:ba:af:2e:44:bc:96:39:1d:b6:81:46:62:ad:00:64:b0:48:
2a:a5:7f:bd:2e:a3:8b:47:32:2b:fa:a6:43:b6:00:28:61:17:
8e:a3:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:11 2025 by rpki-client