Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
File: ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa (raw, json)
Hash identifier: Kdv/W1QPYikDPX7k/yQwAVacS7NgfvGUTXZe1CBgFcg=
Subject key identifier: DF:02:12:71:C1:99:27:4D:53:E0:A9:A6:16:19:64:EE:24:54:7E:74
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD36676F3C30F35731500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d3:66:76:f3:c3:0f:35:73:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c43f9669-1da1-49e4-b21f-b35775827fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:9f:04:e8:c9:7d:1b:03:da:b2:a4:34:de:
68:f9:33:e3:a8:ae:d9:27:d9:b0:68:b9:21:3e:52:
fc:93:67:92:50:4c:c9:aa:5b:09:f7:83:6c:5a:6c:
21:55:10:0e:6a:08:02:07:99:c3:d6:35:3c:05:6d:
35:96:26:54:9e:a5:4c:de:a6:c1:4c:cf:84:40:39:
a7:78:d7:2d:8f:aa:d7:0a:e1:4c:67:25:5b:f8:f1:
10:18:0c:ba:ee:9d:68:cc:35:90:f6:46:80:9e:ed:
d2:4f:bb:08:3c:41:f7:b3:58:45:1d:16:6f:3a:f6:
a9:49:0b:d0:10:0e:dd:a7:cd:9b:ec:fd:b9:fc:91:
aa:3d:96:de:a9:e9:92:3d:e8:74:be:95:94:19:d7:
09:22:d5:79:2b:2e:f9:cb:e0:96:40:42:f9:8f:99:
2e:13:04:0a:4a:eb:68:ad:0f:85:df:9a:7e:15:94:
b3:a2:57:cb:60:c5:4c:a6:36:cb:ab:5f:f5:d6:73:
cf:5a:36:09:6b:a1:e4:d4:d1:98:5b:67:89:5f:d8:
f3:df:44:d4:66:e2:b0:26:c3:f5:96:50:df:79:97:
ff:35:97:6f:53:8d:fc:7e:d4:9c:b7:f3:d2:21:43:
71:2a:8e:f2:83:3a:d2:17:3b:9c:1f:04:15:b7:5c:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:12:71:C1:99:27:4D:53:E0:A9:A6:16:19:64:EE:24:54:7E:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce1d6dbd-c80e-35bf-a6b1-5eb445c82945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:db:a8:71:63:a9:77:91:e8:c4:f9:04:26:8c:98:da:0c:fa:
07:06:c0:bc:15:ee:fa:51:64:c1:c4:42:ea:c0:f6:f9:cd:bb:
1a:21:f2:6b:54:23:4b:88:5c:95:89:a3:0f:38:56:fe:d6:8e:
d0:f6:40:9b:87:f7:1c:23:1c:4c:a6:2d:b9:54:4c:b0:0c:b5:
70:c3:71:78:6c:51:ba:73:fa:c8:00:ca:03:98:eb:4d:bc:c3:
c5:3b:8d:a1:e9:6f:c4:a1:f2:b2:b9:b7:cc:93:a4:05:0e:93:
ed:d9:b9:32:22:54:3b:37:57:48:b4:14:47:bc:4f:c9:68:ea:
6d:37:64:1f:da:f3:b6:fc:06:1a:95:4d:38:ca:30:88:25:da:
c7:e4:8f:b3:b2:84:90:b2:69:53:e0:58:e8:59:d3:d2:d4:9c:
bf:12:37:08:8c:98:f3:e9:4c:75:29:80:63:f6:94:d9:37:f2:
74:3f:69:7f:63:05:1a:a9:2f:17:81:01:d7:46:03:19:0f:36:
64:fc:51:2f:9c:51:0f:3f:68:f1:5d:eb:45:6f:68:7f:fe:01:
ac:44:4b:67:0a:bb:97:69:eb:60:fc:f8:af:9c:81:e8:d4:0f:
22:75:31:4d:20:3c:bf:a2:38:9b:47:3b:ad:ff:3e:61:3b:c8:
74:ca:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:10 2025 by rpki-client