Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce12de86-12c6-3c4a-a3fe-5c5e67adbb5b.roa
File: ce12de86-12c6-3c4a-a3fe-5c5e67adbb5b.roa (raw, json)
Hash identifier: /CCrmGdFRI3E35uT5Ei4sn8OM+13G5XXR9V1DN1XG84=
Subject key identifier: 13:A8:70:23:65:60:CF:AB:60:49:1C:B5:1A:DD:51:55:48:90:79:D1
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACDE355CB6EE3F65CD620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce12de86-12c6-3c4a-a3fe-5c5e67adbb5b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:cd:e3:55:cb:6e:e3:f6:5c:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e4da6374-92aa-47b8-9e06-c871db664739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:89:46:66:ea:fe:15:72:cb:38:cf:e2:da:
e7:e7:f7:44:92:d5:1f:b2:aa:f7:03:b4:a9:9c:bb:
45:fe:4b:bc:ea:67:e6:87:ae:eb:e0:26:44:b7:b0:
92:6e:47:a5:cf:d5:2a:3a:81:29:53:96:69:e3:b9:
56:7a:a9:86:0a:aa:c8:97:ef:a3:21:98:0c:72:36:
be:a4:aa:85:6d:6a:a3:c2:ad:9c:9a:65:d9:22:62:
47:4b:a8:cb:94:98:c3:f8:50:f8:7d:e9:80:2f:aa:
75:51:89:45:6c:94:4c:33:7a:79:2f:ff:60:e8:0b:
88:aa:c1:18:aa:9b:bf:55:90:9b:ae:12:6b:6f:75:
b4:94:0b:6d:38:e4:ea:98:28:ae:d5:e3:d8:50:b4:
9e:f9:d6:1b:21:86:cd:03:c3:1f:87:03:01:17:60:
dc:af:1e:e6:03:bc:0d:6b:96:36:27:b7:7a:78:20:
c8:bb:66:33:00:1d:f1:cd:e7:6c:d0:5e:ab:36:fa:
b8:57:e7:83:7d:72:0c:19:e2:8d:f8:40:e0:e2:e1:
14:ff:ec:14:12:05:6f:e0:7c:38:5a:88:50:d6:67:
1c:90:33:83:04:18:aa:54:5e:87:67:20:7b:13:b6:
3a:08:e3:f9:2d:2b:e9:55:c5:97:03:50:ff:0f:0d:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:70:23:65:60:CF:AB:60:49:1C:B5:1A:DD:51:55:48:90:79:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce12de86-12c6-3c4a-a3fe-5c5e67adbb5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:ac:b5:d2:18:40:e4:27:73:0e:f9:96:4f:24:83:76:6f:3c:
4a:99:d6:7a:b1:78:e2:42:d1:b2:cf:59:40:72:4c:7a:19:a0:
45:c5:84:81:9a:a1:b2:aa:32:00:35:1c:7f:8c:51:9d:f7:f0:
e3:56:df:ad:6d:92:a8:ec:57:98:86:9f:09:88:16:50:bf:5c:
b8:df:fe:b0:04:c9:5c:0a:74:f3:31:b2:5e:a7:26:b2:be:6f:
66:a1:db:8e:0c:aa:c3:33:20:29:2d:94:e4:84:3a:42:69:a6:
16:c4:79:44:32:44:07:3e:a2:4c:96:d3:12:b7:fc:50:69:ac:
13:01:30:db:c0:82:17:0a:48:c5:8c:3e:c6:f9:f9:af:20:ae:
44:af:5b:3c:54:30:81:b2:44:27:00:ae:a0:87:c8:2b:3b:55:
67:53:85:07:0b:a7:c9:9c:3c:f2:0b:9a:4d:9d:a9:18:b6:fd:
75:77:a3:44:ea:29:56:a6:41:07:df:fe:a2:14:83:29:0e:a8:
e7:be:94:7e:1e:54:3c:8a:69:6e:1d:c6:97:fa:39:9a:bb:50:
b5:fe:dd:aa:a5:bb:9a:af:e8:9a:e6:9d:5b:20:8c:6c:05:f4:
cd:3f:1a:d9:9b:d9:ee:dc:36:fe:7e:15:7a:75:95:98:18:82:
46:ac:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:00 2025 by rpki-client