Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96dd1ce-4790-3710-8a9d-80edf42c1a8e.roa
File: b96dd1ce-4790-3710-8a9d-80edf42c1a8e.roa (raw, json)
Hash identifier: XCzautGWxlQWJnK2xUiGsSIeT3NLf62HV/aAGTjMQaA=
Subject key identifier: 64:7B:85:A7:3A:9F:43:45:C6:19:F9:C3:52:1E:7B:4C:BD:E1:AD:5E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A72DA6B5F45FBF03AD700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96dd1ce-4790-3710-8a9d-80edf42c1a8e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:72:da:6b:5f:45:fb:f0:3a:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f0280dfa-0e2b-4df1-9c88-0259fc925f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:5e:fb:8b:fa:31:f8:8f:55:f9:5c:b9:8f:
e9:92:9c:fb:85:ac:00:e0:86:14:86:2c:ae:c3:0c:
fe:13:e3:50:bb:e1:7b:87:ff:cd:8a:fa:62:40:13:
11:98:20:bf:0b:fb:c2:dd:1e:27:52:b2:e9:8d:62:
83:de:68:7f:c6:7b:0c:cc:14:56:c2:d6:63:76:0e:
14:2f:88:fd:c3:68:a5:7c:e5:5d:a7:65:36:16:f5:
cf:61:84:69:69:ba:a9:9b:f6:fe:c9:6d:4a:e0:8e:
19:9f:a1:f6:18:8b:68:f3:ca:d7:7a:44:bf:7a:c0:
3c:dc:48:8a:72:2a:17:03:2a:8e:89:e9:cf:2b:da:
f4:a8:68:d7:a7:d2:f6:8a:82:73:cc:4f:54:26:69:
11:9b:f7:94:44:b0:79:34:57:20:12:1c:93:21:6e:
af:00:2e:b0:08:2c:06:25:52:06:5f:b7:81:85:a7:
24:a1:7f:a5:6b:a6:7e:0f:e7:e6:5a:56:3f:6e:c5:
3d:dd:df:1c:a2:97:74:d9:73:82:17:30:5e:15:b1:
2b:c0:a7:ce:bc:4e:7f:f0:8e:5a:fe:62:04:7c:e7:
fd:2c:eb:00:da:50:59:6f:a5:fa:75:51:bd:10:fb:
28:73:2c:fd:64:0c:e5:e2:a7:69:d3:36:4d:75:82:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:85:A7:3A:9F:43:45:C6:19:F9:C3:52:1E:7B:4C:BD:E1:AD:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96dd1ce-4790-3710-8a9d-80edf42c1a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:ed:ce:54:40:1b:25:04:9a:15:e3:c0:a9:3e:47:bb:0a:21:
5b:a5:6c:af:aa:af:4c:13:5f:99:1f:a0:ae:1b:c2:4e:fc:e7:
f4:18:c3:f3:4c:7a:bf:7b:e4:e9:23:ee:ee:60:04:8d:45:bb:
02:ef:31:33:88:7c:0c:e2:f1:bd:ea:49:7e:fb:4e:bb:70:71:
04:9c:67:d0:c5:80:8a:a7:27:b6:e3:df:9e:b7:a0:87:45:0c:
8c:08:89:e4:1f:00:e4:ee:74:a8:d2:cc:ed:c7:6d:ab:e4:9e:
00:13:08:d9:62:47:f7:11:5f:b4:66:ec:00:72:42:82:3b:cf:
23:d1:09:69:79:ca:26:9c:35:e1:36:7f:f3:84:e0:47:67:30:
68:6e:92:00:1b:8d:b0:64:9d:15:4e:a3:f4:ae:f6:b6:70:37:
a0:2e:7e:62:25:a0:e7:1d:0c:67:0e:01:cc:0b:b9:b0:ad:22:
99:f7:e5:9a:75:ff:f3:8e:56:05:b2:90:fb:f0:5a:3b:1b:58:
21:c2:6f:a7:54:d5:4d:2a:ef:19:81:5d:3c:ec:5a:9d:c8:35:
5b:54:70:1a:c1:2d:23:ac:e4:39:b5:ee:6e:64:17:4a:7d:12:
6f:3f:4b:8c:d5:ce:07:1a:e0:70:29:86:5f:97:88:a0:c4:9e:
f9:3d:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:14:52 2025 by rpki-client