Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb14198e-30c2-398d-a6cf-feb0179c29b6.roa
File: cb14198e-30c2-398d-a6cf-feb0179c29b6.roa (raw, json)
Hash identifier: PhfDZSzDZcPWu1J21pf0juk+G/4xs1H0Cr/gIQEj43U=
Subject key identifier: DC:9D:52:12:EE:C0:A5:B3:33:6A:DA:F6:D7:22:E5:51:7D:63:0A:1F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ABE1B9CC2EDD419B51980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb14198e-30c2-398d-a6cf-feb0179c29b6.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 16491
IP address blocks: 75.104.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:be:1b:9c:c2:ed:d4:19:b5:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=a999bf60-0c9d-4f57-a198-4d1d88abc4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:5c:82:e9:d6:d9:e3:50:5a:01:9c:7f:48:
f1:cf:2e:81:95:d2:1d:6d:54:b3:c2:c3:9f:8c:73:
17:87:d3:36:b1:45:6b:93:e5:ef:59:66:0f:50:83:
52:d8:3d:38:37:5b:2d:92:41:be:90:87:d6:86:4c:
b8:a3:26:2e:34:ff:65:c2:db:56:48:e1:74:fd:96:
43:dd:84:a4:9f:37:8c:8c:61:3c:3d:f2:35:15:5b:
80:70:f9:38:eb:47:a3:41:ae:ea:c5:05:6e:04:dd:
85:9a:62:74:f0:76:8a:85:de:6b:59:6e:f0:0a:16:
38:d5:b3:4e:59:1f:dc:04:21:78:06:fd:69:f3:e9:
b5:7f:76:94:0f:9e:85:0d:29:6e:61:20:bc:ca:a4:
7d:e4:a1:64:5a:5b:d3:74:18:c8:c3:23:1f:44:0d:
f7:0f:49:67:66:21:08:22:03:43:25:cc:35:e8:67:
d6:23:eb:75:a1:94:7e:18:de:e2:b0:21:fd:8f:95:
a9:32:f2:3b:0b:e5:f3:73:1f:08:6c:54:59:bf:0c:
6e:77:b0:8d:17:2a:08:a2:ab:de:9e:7b:de:6b:ce:
e8:0b:6f:de:cd:af:30:2c:f8:18:5c:15:5b:d3:fa:
13:ec:3f:c7:35:88:de:ec:1b:7b:33:82:6c:01:74:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:52:12:EE:C0:A5:B3:33:6A:DA:F6:D7:22:E5:51:7D:63:0A:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb14198e-30c2-398d-a6cf-feb0179c29b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.104.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:57:9a:68:ae:cf:c4:b4:01:da:5d:c3:0b:e4:4b:7b:25:60:
74:8e:aa:05:9e:df:44:88:89:18:f5:7d:80:9d:12:1d:e6:f2:
66:51:46:9d:cb:d8:df:b3:8c:96:38:7e:9f:36:7d:a0:d7:b3:
71:f0:da:22:79:3a:4b:f1:a8:50:ed:eb:3e:d0:3b:88:48:7e:
60:52:ac:66:a6:65:d9:7a:78:11:50:c0:e3:03:2e:4f:9b:39:
00:1d:c1:f5:bb:28:55:3e:da:22:37:ba:2c:71:76:2c:5c:5a:
03:d5:a8:ef:c2:16:be:95:ff:d8:07:e6:ca:5a:f0:5f:3f:17:
30:2d:21:22:48:e7:95:0f:b7:7c:b5:69:a0:51:8b:05:2e:c6:
e4:d1:50:3e:bd:0a:85:0a:03:c2:d6:ac:7d:52:c6:4d:b0:c0:
a1:34:bd:ca:21:df:3f:a0:05:31:2e:bd:62:b0:17:cb:e4:07:
81:69:06:f1:20:2b:55:75:dc:c4:ff:cc:fb:ca:cc:6e:1d:15:
9d:af:aa:0b:5c:39:3f:1a:ac:92:f0:cc:56:32:bd:1d:55:de:
96:be:76:43:82:08:c4:e3:39:b0:59:50:0e:2c:76:3e:06:bf:
ee:2f:70:a8:62:23:52:8a:18:ab:34:b0:dd:ab:48:4b:b9:1e:
fa:f9:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:34:05 2025 by rpki-client