Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa
File: be55dd29-53b4-3391-846b-2b9a27ba2450.roa (raw, json)
Hash identifier: iYQy3GM17hhO65qq0TfLGxqH+vgmvfDNzQ+cSnGMJQE=
Subject key identifier: 4C:AC:7B:CC:8A:A2:BE:C7:F6:0E:13:49:08:4D:CF:20:7F:C7:E4:98
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B1085A5D62489E79B9140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:10:85:a5:d6:24:89:e7:9b:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=3dc0d321-c35d-45ad-a0da-d759392b1c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:77:cc:86:34:41:c6:54:5e:c1:2a:b2:95:
7b:87:78:f3:e9:31:16:d9:a1:8d:33:d0:58:eb:f1:
98:a8:00:13:73:3a:3a:17:3e:5f:2c:0b:0f:04:42:
09:71:9c:fa:5e:ec:cb:67:cd:bb:66:03:68:60:31:
dc:92:36:7f:90:97:4c:f3:71:d4:a8:c9:eb:2f:08:
80:55:fa:a1:6a:12:6f:28:d8:e2:e8:fd:5f:59:82:
86:38:2e:b0:fd:ca:10:24:a9:fd:fc:2a:84:c2:1d:
fb:99:1a:26:b0:72:52:0b:5b:70:7d:8f:5f:4d:be:
a8:18:bb:16:a8:7d:73:41:79:c9:8a:0c:94:94:b8:
b6:f2:e6:82:27:78:11:f3:67:5e:42:e1:a9:61:91:
bf:38:80:e3:cc:38:06:ce:1a:c2:61:1e:7b:a2:e5:
f4:18:2d:47:84:8f:81:05:be:d4:e1:ea:e7:48:49:
42:05:9b:50:1a:14:46:f8:f8:df:e3:48:41:36:69:
ab:99:11:ad:ff:f1:c0:dd:32:66:aa:fc:70:98:9b:
93:fe:13:d9:55:1f:11:ed:d2:fd:e4:e5:3b:b3:16:
52:8d:0e:1e:86:f8:0b:b3:61:41:db:89:ad:27:7c:
5b:bc:3d:6f:af:5f:32:73:f1:15:37:9c:59:de:ba:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:7B:CC:8A:A2:BE:C7:F6:0E:13:49:08:4D:CF:20:7F:C7:E4:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4b:9c:9c:dc:67:fc:f3:26:0d:63:c5:2f:56:5b:81:ba:98:
4c:14:95:ab:a9:57:e1:4c:92:29:4c:fa:20:c0:b3:66:7c:33:
90:6a:ae:df:23:2e:16:f6:3a:df:3f:31:32:79:43:18:63:0a:
df:df:7b:48:7c:b1:73:f8:2a:d8:ef:2f:42:32:e7:c7:8a:dd:
d6:7d:94:bb:da:66:bc:d8:ec:05:22:17:d7:64:77:d4:1c:83:
c2:ee:ca:b0:4e:e5:95:2c:5f:d3:1a:49:62:08:71:46:11:cb:
05:3c:52:ee:2f:b0:45:8b:53:e6:f9:cb:29:72:c3:d7:cd:69:
88:ae:6a:d2:1d:55:54:f8:a2:5f:f7:52:c1:10:59:4d:11:ba:
ba:0d:ae:75:a3:5c:1a:fd:26:9f:16:21:84:db:bf:24:82:b1:
50:06:8a:d8:9c:c7:54:ce:c0:ff:cd:f2:62:b8:70:a7:6e:48:
1a:60:4f:d0:42:ae:10:59:a5:6d:b0:a7:d1:a2:e2:60:11:24:
f4:ca:5e:c6:fd:d6:df:da:9f:73:b1:3b:61:79:df:80:d6:6a:
c3:70:0c:de:bc:a5:43:da:a1:f4:c9:48:79:ef:e8:a9:84:38:
e2:6a:b0:b3:69:94:ed:fb:47:51:72:d4:e8:7e:d8:57:39:b4:
fa:c3:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:54:45 2025 by rpki-client