Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
File: be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa (raw, json)
Hash identifier: 5HeTFYOEwbDADKAyV3Vk2kINHDUOBOuFQb1BiZ6RSm0=
Subject key identifier: 5F:52:E1:C5:BE:97:BF:8E:40:EF:A3:20:B1:9B:03:FF:D4:34:70:46
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACF0CF69DC1A457B117C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:cf:0c:f6:9d:c1:a4:57:b1:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b25e61a4-2214-44fe-a603-b407f86831eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:79:19:de:58:e5:05:0d:74:55:f2:9c:5f:
54:d8:c9:69:48:46:e0:25:5c:59:8e:a5:ee:6c:9c:
61:2e:19:8e:bf:a2:da:9e:3d:f1:ef:e0:f5:6b:69:
7c:03:7b:b2:a1:4b:60:81:eb:b1:16:d5:cd:82:c4:
bc:42:78:54:67:93:24:83:39:fe:a7:db:62:c1:83:
b5:5a:01:06:a1:76:52:03:3f:64:fd:f2:63:49:71:
07:0a:c4:79:39:18:07:6c:df:14:a2:e2:a2:a2:ae:
d2:eb:54:ef:af:97:fe:e0:99:ab:16:32:67:20:ac:
4c:94:72:94:16:d1:44:31:80:57:fc:26:91:51:29:
8e:05:43:f9:ed:7d:cb:82:7d:2a:b6:88:4c:fc:f1:
ff:4c:80:7e:5b:46:9c:4e:b3:60:ab:27:bf:fe:c2:
83:09:2c:b9:53:0d:b2:5e:ad:11:35:ae:f4:31:bb:
c7:96:29:95:0c:88:c7:42:82:45:88:60:7a:23:2b:
e9:b3:ca:41:c6:4d:b3:82:dd:93:3a:66:5c:a5:eb:
a6:e9:89:dd:d6:da:60:1e:5a:49:df:6a:9d:5f:34:
15:9e:17:de:83:40:28:32:bc:b7:fc:dc:c6:98:51:
4c:4b:ca:c4:61:89:c1:c1:34:cf:47:e8:87:24:ed:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:E1:C5:BE:97:BF:8E:40:EF:A3:20:B1:9B:03:FF:D4:34:70:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be596ea9-5fc9-30f2-a2c6-60174c9e0181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:d0:ab:eb:5c:09:68:50:7b:bb:c6:45:eb:86:07:ba:38:3b:
df:1b:c7:ce:3f:db:8a:89:bb:d9:dd:7e:09:5d:67:d7:d2:20:
33:04:83:d3:42:14:ff:7e:41:07:e6:bf:1b:3e:cb:6d:e9:e8:
e6:10:68:df:7e:a9:59:c1:03:2a:f1:11:52:96:91:58:04:51:
21:16:ab:6e:41:b9:8d:af:9a:31:d5:ae:2b:0c:98:0c:9b:11:
35:05:99:ec:61:f0:ad:61:0e:3f:31:8f:36:6f:ed:d1:61:20:
43:84:52:38:2e:b6:21:3b:47:4d:7b:fe:de:60:e1:cf:d1:3c:
36:52:f2:9b:80:dd:6a:90:80:87:85:ad:92:3b:0b:5a:39:4a:
e8:76:8a:58:79:a7:f0:bb:18:08:c1:bf:62:78:42:4e:a6:ee:
23:44:e6:65:de:8e:36:48:ec:8e:1b:48:bc:10:27:70:5b:89:
46:a3:bb:d8:51:7e:5e:69:46:65:85:d3:74:24:0b:94:99:92:
54:6e:e3:0d:1b:0e:1d:4d:1c:79:d0:de:ff:6d:d8:60:c7:20:
48:4d:0f:b6:a3:35:7f:cb:5c:05:e2:19:d3:37:bc:68:8d:36:
48:c6:a9:2d:8f:3b:9f:54:86:a0:53:50:66:71:fa:06:14:ab:
f9:a1:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:25:34 2025 by rpki-client