Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa
File: c67c5e05-0821-3e49-89d4-7a79dd570356.roa (raw, json)
Hash identifier: AijjH9pibkeAMdRWQnbCbPDfEEOlxthGakmSgzNxJac=
Subject key identifier: 8D:C0:AF:15:11:E4:A8:66:BB:C7:C6:BD:C6:C4:78:52:19:9E:98:E8
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A3717CD80B8CA6EBEA380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:37:17:cd:80:b8:ca:6e:be:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ef76da3c-8ce0-401f-b072-f349b20b5af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:54:b7:a7:c0:20:5c:e2:a9:01:63:6d:71:
3c:1e:04:b5:01:d0:c2:7e:15:d0:55:56:c3:16:60:
1c:c3:dc:89:33:4f:e6:43:83:64:a5:45:d8:d9:87:
9f:8b:57:ec:e6:8c:d1:59:ac:03:da:ba:97:68:a9:
f4:b9:1c:50:3d:be:5d:b4:b9:82:5b:63:29:4e:49:
87:6c:13:57:2a:b2:d3:46:fe:3b:f9:3c:a1:eb:b6:
1b:b4:84:7e:15:3a:a3:98:14:05:a5:97:05:3d:cc:
a7:ef:8b:7b:2c:fa:37:78:17:64:4f:bd:c5:3c:a8:
a0:6b:d4:37:30:73:70:52:2b:3d:c9:00:da:f8:59:
1d:3d:18:53:09:8b:92:7d:09:69:ed:14:7c:bc:1e:
8f:67:02:06:c9:aa:b9:b7:2d:48:c9:01:0a:29:52:
17:be:1c:2b:bb:7a:7e:af:3d:aa:ab:cb:43:26:93:
08:86:bb:bd:19:ed:84:6f:2d:e5:06:83:c0:4d:c6:
22:b7:58:fc:ca:95:08:40:d0:2c:9a:df:91:94:4b:
91:46:c6:6e:f0:2d:f4:e2:dd:77:00:9f:1e:7a:33:
50:11:e0:9f:59:16:43:4d:e4:d3:5a:6a:79:99:67:
fd:b8:0f:f7:60:8b:77:f4:f9:df:8a:ba:65:76:3a:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:AF:15:11:E4:A8:66:BB:C7:C6:BD:C6:C4:78:52:19:9E:98:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a9:f8:42:dd:99:af:2d:be:94:73:63:e6:65:0e:5e:18:7e:
c8:1f:0a:23:46:0b:54:67:4a:0c:08:66:c5:3c:bd:70:32:8c:
b0:bf:d4:32:94:a6:65:06:5e:14:16:e4:dc:4c:a9:6d:9d:8d:
63:3a:ec:c6:94:76:1b:81:07:cb:80:50:e5:95:eb:64:6c:75:
78:7a:f4:3d:62:51:a1:0f:a6:ba:b3:79:44:68:b4:38:00:72:
c6:cd:f5:09:e3:ff:53:7f:6b:82:d8:e4:6a:c3:5e:dd:83:88:
07:01:b7:c9:ac:58:53:e8:9a:b5:79:e0:ce:ea:0b:db:50:f3:
ab:2b:c4:11:af:a0:7b:fd:e3:b4:1e:0f:19:61:36:dd:ae:fa:
a6:d4:f2:b1:54:c2:63:7a:17:32:83:cb:8e:02:c8:3f:90:57:
28:35:93:12:33:45:8e:99:da:88:33:23:8d:2e:b4:73:db:f9:
cb:13:c0:7d:88:0f:f1:91:45:bc:50:63:f9:e8:e5:5a:58:98:
6b:bb:fb:e2:b3:45:0c:7d:7c:16:89:ad:19:13:0d:96:e5:08:
65:36:7f:d9:67:75:27:21:4c:a3:3b:3f:84:e5:cd:bb:b5:10:
14:88:a9:3e:76:30:2a:70:48:8e:7c:52:98:5d:16:f7:3c:8f:
90:c0:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:33:26 2025 by rpki-client