Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
File: d197b3d6-542b-36cb-baa2-2b0446a590d4.roa (raw, json)
Hash identifier: R0mVNHjrT26K+wWBkkscoyaLulG6YaOMQYfW2hazstA=
Subject key identifier: 6E:7F:57:C9:E5:6D:3A:84:4F:59:DB:54:90:8E:48:E8:D7:A2:23:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62AD0E492AA4D7B9149D220
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:d0:e4:92:aa:4d:7b:91:49:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=fffccbf4-2a6f-444c-af38-ba0d9c4ef832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:8b:7f:e2:38:70:73:09:e6:e5:ad:d7:45:
0d:f5:9c:8b:0c:7d:e9:54:58:28:8e:bd:db:8c:5d:
8a:9d:de:b7:2e:a1:76:c7:38:90:e2:8d:71:29:d7:
7d:1b:0b:38:82:25:43:31:1e:d8:b3:9e:84:20:d5:
7e:18:38:79:e3:93:f3:c2:70:ca:2d:b7:52:60:4d:
7d:d0:f8:36:d2:72:35:4c:39:c1:bb:b4:2e:34:b3:
aa:58:2f:55:27:c5:63:03:a3:71:89:2c:7f:da:c1:
e4:c3:5d:36:99:aa:33:74:b6:5c:bc:00:38:4d:5f:
f7:40:f6:f6:85:85:49:06:2a:72:f4:9b:ab:32:02:
57:de:92:a9:f1:5d:7b:58:1f:3d:40:16:53:60:12:
de:79:3f:61:b8:bf:ee:0a:a7:b4:6b:3e:5b:cc:e3:
19:39:b8:33:87:98:c6:f6:02:1a:2f:c6:96:35:4b:
09:5d:3d:3d:88:d7:ad:34:d4:e3:3c:01:86:c6:40:
12:6b:4d:ef:e0:02:04:80:fb:13:fe:b7:71:59:6f:
c1:ed:0e:b4:ac:95:c6:d4:3f:e4:a3:f2:e4:00:a6:
7a:1a:fc:52:88:82:c2:d7:b8:c7:64:df:50:09:1f:
29:e0:ec:5c:23:17:47:7e:b0:74:43:ea:92:48:c4:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7F:57:C9:E5:6D:3A:84:4F:59:DB:54:90:8E:48:E8:D7:A2:23:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:28:7c:d0:a0:fa:60:a7:6d:30:8c:68:c6:95:7b:24:20:c7:
2a:7a:29:f6:a5:7f:d2:e4:33:8d:f4:4d:16:67:50:d7:91:de:
1f:d9:2d:e0:5c:48:db:e5:91:ac:2b:ef:b6:f9:99:88:a1:36:
11:ea:26:c0:6f:f9:97:5e:a2:0f:0e:08:c1:b8:6a:2d:d9:e6:
9d:42:af:7c:f7:8f:e1:0e:57:e8:db:54:d1:c0:a4:af:d6:9a:
94:41:be:35:b9:90:d8:80:e8:8e:81:7f:a9:55:10:03:d5:fe:
53:44:5b:50:8e:f2:6d:5b:fc:7b:b9:0c:57:7e:56:9a:13:fc:
17:d0:8a:45:94:1f:9f:73:dd:5e:13:7f:eb:6a:3d:e0:81:2c:
c7:fb:7b:f6:66:49:0b:cc:69:55:09:7d:31:05:45:1c:c6:d3:
3d:e9:8e:ed:0e:9b:e7:5a:7f:58:25:3d:07:94:32:95:1b:b4:
e3:9d:df:5f:1e:1b:d8:f7:59:a0:a0:b4:71:20:4b:21:f4:d4:
f2:d9:22:08:2f:dd:be:13:e8:d3:21:f6:4a:4d:94:70:8a:86:
fe:4f:bb:23:1c:48:5c:39:7a:51:ff:df:bd:13:20:cc:0e:3b:
cf:44:ff:93:fc:69:19:c7:ae:00:b4:05:35:a2:1a:1a:82:a9:
63:81:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:20 2025 by rpki-client