Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
File: c6053582-ce66-3bec-8a0c-1f7b92837dec.roa (raw, json)
Hash identifier: KOCd/7q0bS8P1zPnGgcgsYLlYvuWXRhW228ON50W4X8=
Subject key identifier: F4:2D:A6:80:11:51:49:71:FF:9E:DA:62:44:CA:E8:36:93:2C:08:7E
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A72B7B6E885CF5E9D6EE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:72:b7:b6:e8:85:cf:5e:9d:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=18bbbcf9-0041-4647-b2ba-327f33a48efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:56:19:ce:3b:70:ca:81:c8:b7:a4:82:18:
9d:a7:1d:ee:63:4b:23:5b:12:d4:3b:39:06:ae:fa:
6c:2f:ba:9a:86:37:15:90:25:4d:94:88:b4:16:8d:
41:9f:d2:a8:ec:65:8e:26:00:4e:33:ff:b3:0b:d6:
ff:15:cc:a8:41:ae:93:be:45:f8:74:c1:d2:da:a8:
fb:21:34:8a:27:10:64:b8:1c:36:df:b0:89:15:14:
f6:a0:b4:80:ae:85:cc:47:97:67:ab:99:92:72:b5:
95:bb:f4:62:ed:23:c2:c0:52:e5:26:b1:3b:d1:84:
65:9c:73:34:60:49:25:a8:ce:7d:5e:89:60:f4:aa:
a4:10:41:94:64:05:2b:12:ac:fb:f1:5d:d6:9b:33:
4c:38:d3:5a:8f:3f:73:07:ec:20:6a:20:be:6a:f5:
70:32:b6:b1:3b:8d:68:5f:78:1e:eb:95:3c:c8:7a:
00:e6:62:57:73:fa:8c:6d:78:dd:10:81:58:33:f8:
2d:b7:67:cb:3a:0f:56:c1:8f:f9:f7:15:9c:95:53:
22:9b:7a:68:3f:f8:fa:aa:c2:9f:66:83:17:f5:42:
8b:5b:64:8b:d3:fa:27:60:bb:c6:7f:08:12:d6:72:
6e:14:7e:3e:05:79:86:75:c5:bc:55:d9:9d:80:24:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:A6:80:11:51:49:71:FF:9E:DA:62:44:CA:E8:36:93:2C:08:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6053582-ce66-3bec-8a0c-1f7b92837dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:27:6b:21:9e:6e:cd:c5:cd:2c:de:02:fd:5a:a3:88:6e:7f:
6d:cc:35:8d:78:b1:21:a5:c5:f1:1d:41:90:4f:28:ea:69:bd:
b6:86:20:15:76:ca:ba:4d:13:95:d9:96:58:17:a7:72:16:48:
44:c2:03:e9:f8:3b:99:48:eb:b4:66:28:86:7a:e0:c7:33:9f:
d0:0a:f0:a8:96:ff:05:1f:0c:92:f0:35:2b:b3:a0:82:dc:76:
b0:ec:80:51:62:7d:ae:94:51:7c:5c:2d:de:d7:00:18:40:2f:
1f:eb:f3:ce:fc:a1:97:1d:8d:a0:a5:76:1a:c6:87:2f:f5:1d:
6b:5e:92:1b:30:55:c5:9f:04:c5:bb:f0:3b:5e:f0:75:60:cb:
d4:60:7f:5f:b3:88:6e:54:98:98:dc:c6:d1:17:7b:ab:f0:f2:
d7:47:54:2e:a2:c4:3f:93:0c:a6:47:89:84:6b:de:42:b4:78:
61:b9:ba:65:6f:b4:7c:f3:61:77:b3:a9:f2:5e:81:ad:5d:d6:
b0:f1:56:55:fc:bc:a3:88:d5:13:2a:83:77:b1:a4:cf:29:95:
7a:7e:0d:a3:75:2e:ad:de:a3:33:c1:a0:48:80:1a:6a:58:5c:
d6:5a:32:bc:62:49:ca:ec:4b:56:22:83:e0:1c:38:80:32:b5:
a1:50:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:03 2025 by rpki-client