Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa
File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json)
Hash identifier: 4uWNcl9YmR29hvBEEWxR4XgpWPTRslp+3SG4giGKfqE=
Subject key identifier: D3:8E:DB:99:33:D8:7C:BC:C9:10:3B:C1:1D:E7:B8:2B:26:87:21:29
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A410EEAC93F5A19ECDA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:41:0e:ea:c9:3f:5a:19:ec:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b8b9ff81-971e-4849-a444-0f73abf2237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:db:41:98:5f:05:d0:ed:d0:b1:ba:c5:dd:
a5:f3:12:05:e4:aa:64:28:23:20:f0:8e:3c:b3:26:
03:1e:07:8e:05:76:a2:d4:0a:a0:e6:5e:ff:72:6f:
e5:7e:b7:d1:03:ee:67:73:a6:bf:87:af:f6:7c:65:
e8:53:c3:51:a1:38:a8:69:97:46:03:f8:f5:53:d2:
18:f6:a5:e3:1c:22:e7:4f:24:bd:d7:b2:36:35:f4:
ad:89:ee:fc:d0:f5:43:cb:b3:3b:b9:55:b8:bc:2f:
c4:19:c4:2a:53:87:d3:dc:8b:47:98:93:23:f5:1e:
5d:7f:c4:a3:a3:c6:75:f9:1f:8a:46:61:38:14:cd:
23:f2:3c:46:62:4a:8e:b2:74:cd:8b:c2:03:f7:9a:
07:1d:b9:cb:d9:06:26:e7:97:c3:34:8e:6a:3f:93:
b6:6c:af:a6:f2:f5:42:b6:f9:d9:26:ea:2d:03:11:
06:f0:8d:8f:49:62:a9:aa:96:58:e0:21:17:5b:82:
da:7b:7c:b6:78:9c:65:45:27:37:df:cc:f7:b9:29:
49:30:4f:9d:c0:29:fa:10:33:9e:5c:ef:e3:e1:52:
c9:5f:97:d0:48:d2:6d:58:f5:d3:19:de:af:69:33:
d8:5c:6d:b6:ae:da:b5:84:37:68:a6:7a:df:54:a8:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:DB:99:33:D8:7C:BC:C9:10:3B:C1:1D:E7:B8:2B:26:87:21:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:0f:b5:0f:0a:c8:80:fc:08:a5:ee:3d:47:50:73:2e:95:80:
aa:ed:11:20:5c:a2:30:ce:e4:f1:c2:f3:f1:71:63:21:b8:8e:
95:95:c5:91:68:84:76:fe:48:b0:f8:7f:8d:08:a7:d9:7a:84:
8e:63:b1:ab:b8:1a:ef:fa:ac:20:4e:65:ab:29:28:67:f9:55:
fb:7b:c5:5c:c5:7b:36:68:aa:d5:09:e9:df:03:35:37:60:67:
ed:d9:ff:b7:ba:11:ee:4d:b5:4b:55:08:db:13:e0:2d:a3:50:
83:0c:96:76:ed:71:a0:cb:7a:ed:99:6c:ab:7e:a4:b1:67:bb:
98:30:df:b4:c0:bb:5c:e0:86:92:a2:71:1b:4c:b1:2b:6a:24:
ec:35:71:94:8b:64:e5:b6:14:4b:47:1f:50:c8:01:e3:cf:40:
97:36:ba:92:1b:7d:e6:5f:27:2d:17:1c:70:bc:85:b8:2c:49:
8d:87:ae:8f:4f:22:f2:14:94:62:0b:8d:a6:e5:7d:4a:25:12:
01:ab:37:04:c7:c5:e9:76:3a:2a:7c:90:64:8c:68:b3:fb:02:
43:c0:df:32:fc:d2:62:cb:a8:2c:2d:63:40:32:ea:80:3e:ee:
b5:3b:6c:d8:6f:c0:94:dd:63:0f:f8:ac:78:43:6b:15:74:c9:
30:9d:6d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:30 2025 by rpki-client