Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa
File: cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa (raw, json)
Hash identifier: kTCFhBbQl7YnEI4l3aTPF37N9EpLuE6Voh3ihY3hyGo=
Subject key identifier: 4A:47:30:B2:AB:B8:1A:07:5F:40:BE:2F:89:D8:C7:15:33:3E:71:4B
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A71CD8AEF18345AB53840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:71:cd:8a:ef:18:34:5a:b5:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=11d0aa4d-6297-4d27-8356-f9d6dacf05e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:87:1a:47:f1:ed:c5:c3:87:3a:a6:4d:23:
cb:36:9d:ac:70:43:88:d7:42:1e:6c:27:1d:f4:74:
1b:81:cc:c2:eb:d9:2f:3a:5d:d3:d1:73:ba:e2:19:
84:9f:1f:40:f6:e8:92:ae:80:0b:87:e3:47:c5:f9:
4c:15:d2:a8:1c:46:ab:42:eb:ad:4e:ec:24:fa:b9:
b6:85:02:b2:bb:3d:52:41:2f:6e:91:65:b7:0d:92:
e1:14:25:ee:16:d2:75:84:5f:04:e2:9d:0f:e4:a1:
cd:05:ec:d1:91:80:41:a8:14:8f:ba:f3:ea:64:e0:
ca:32:79:e2:68:8d:bf:e6:d3:d4:4d:21:41:ec:15:
4f:51:d9:b7:2c:10:54:50:5a:9d:47:9c:23:7d:3e:
c7:9a:19:e9:96:4a:80:7c:1d:da:00:5c:6c:9e:6c:
c3:51:7e:a4:15:7b:8c:eb:4e:c0:a7:e9:65:3f:f5:
7e:0b:37:d8:c5:fa:26:5a:7a:6f:f3:f9:d7:7c:19:
e6:17:56:4e:57:69:7e:5f:9e:1b:88:33:79:3b:58:
f0:6c:37:04:c5:d6:e2:66:48:a0:e4:9a:cf:3a:d8:
48:07:4f:95:aa:62:64:60:ec:c0:a5:60:02:ff:9c:
a1:ae:31:63:be:5d:a7:bf:da:e1:ed:de:75:3b:dc:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:30:B2:AB:B8:1A:07:5F:40:BE:2F:89:D8:C7:15:33:3E:71:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ae:d3:d6:1f:8f:4c:4d:74:28:dc:8f:e4:a2:4b:6e:0d:5d:
64:7d:59:a8:47:30:3d:5a:4f:ef:d5:4a:15:7d:a9:a6:75:72:
e4:37:4a:88:9c:3d:28:23:13:e9:f2:6e:b0:32:67:cf:14:54:
74:a7:89:dd:96:38:a8:fc:16:89:fd:30:6d:27:84:8a:7e:33:
22:d4:6e:db:76:ac:83:56:23:05:da:ff:cc:89:7d:26:c0:b3:
73:5c:89:52:21:93:26:0b:20:ad:17:99:7a:26:a0:01:61:85:
4b:b9:bc:4d:36:ea:f3:f3:f9:42:6c:c5:75:51:ae:33:c2:fc:
7d:ec:e6:5c:3f:47:e8:b4:f2:d9:74:91:d0:b1:cc:53:7e:4e:
32:65:82:03:c5:f4:e8:d7:8c:53:70:ec:c0:0d:24:17:98:41:
23:fb:fb:9c:0d:15:cc:e2:08:16:37:80:48:65:a7:7d:47:7e:
66:1c:bf:53:5d:53:a4:d8:31:0c:56:8b:33:f3:3e:47:90:9d:
e8:e4:47:f1:f0:36:29:c1:f3:2b:8f:3c:25:2c:a5:78:1c:31:
8e:9e:75:95:4f:8a:27:66:1f:8e:1f:30:80:ad:4e:38:2b:80:
00:a2:3b:53:fb:6b:d7:23:6e:d8:2d:47:a8:cf:f2:ac:7b:e0:
cc:a4:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:10:00 2025 by rpki-client