Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
File: d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa (raw, json)
Hash identifier: qlkspINBMCRr9qwoXpdn2uwYa8q+qAZTyI7soQ5Phhk=
Subject key identifier: 3D:3D:31:29:A9:47:51:EA:7C:A4:4F:B8:7F:09:13:EC:69:A1:E8:44
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0985FC26D5EB89C339A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:09:85:fc:26:d5:eb:89:c3:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=fe1d2a70-09e4-41ff-86e5-22e8f9bdcae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:ee:90:e3:95:de:ea:d1:8a:37:94:0f:7f:
35:d8:e6:72:a8:1f:55:74:33:14:6e:cf:53:0b:2f:
20:be:36:5b:a0:47:22:f7:f8:27:9d:fd:a8:49:fb:
76:8d:e9:1b:82:03:ed:3b:64:82:7b:ba:c0:5b:7d:
cf:9d:17:91:ce:a7:f7:9c:9b:ef:65:1c:23:2b:f4:
8a:97:92:c2:c5:33:21:f2:b4:1e:fb:37:bc:3f:06:
a9:fc:c7:09:5f:97:b8:0b:22:2b:6f:29:70:c6:e4:
aa:f6:d5:b7:d0:ee:2e:9d:81:1c:52:b1:6c:6c:a7:
d6:45:e6:ba:ca:f0:2a:1c:b9:88:55:d1:81:3e:69:
40:28:b1:9c:85:80:9e:89:7b:14:b9:65:1f:da:e3:
88:98:f4:9e:30:6b:a3:0f:0a:a6:27:0d:99:dc:12:
3c:90:e8:a2:f8:7d:dd:3c:d7:be:0d:05:b6:17:53:
01:8a:0e:2d:d6:48:9f:d2:85:63:1c:e8:8e:81:13:
cb:c9:ca:09:18:df:f8:15:f1:a3:d2:09:2c:f6:9f:
3b:02:e0:f9:f8:f4:60:b5:da:70:67:82:3b:e9:df:
59:ac:bc:73:a1:cd:65:62:2f:8d:13:95:fa:f2:bc:
ab:b9:8b:29:c9:7c:27:5c:30:56:64:4c:77:90:26:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:31:29:A9:47:51:EA:7C:A4:4F:B8:7F:09:13:EC:69:A1:E8:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:dc:40:58:3b:44:47:49:f9:f7:4d:ed:70:35:01:a6:1c:25:
42:e2:25:71:21:e2:47:40:2d:69:90:36:59:ea:6f:c9:10:60:
4e:ce:14:c5:63:a5:2a:e8:87:30:5f:10:00:2d:61:a6:47:18:
8e:e4:8a:1b:d0:22:7a:ba:7b:31:1a:8d:5a:0d:91:97:14:84:
e8:da:00:68:3e:71:79:da:f8:8c:8c:09:40:39:a6:89:ce:dd:
56:e7:2f:3d:dc:f2:3d:ff:c5:7d:11:d5:d4:5d:7c:0a:be:6c:
1f:e1:a0:56:65:a5:16:c2:8a:06:5d:76:a8:dc:4b:4e:ba:30:
1b:ba:1a:f0:9b:79:93:38:1c:f4:10:45:9d:de:b7:52:86:b1:
c0:3a:da:31:cb:d4:55:5c:4c:ff:ad:06:9e:8a:dd:20:a7:59:
81:74:79:cf:5e:69:a3:72:32:ce:f1:ee:85:f4:d3:e8:2f:2d:
db:2d:5f:4f:ba:e3:a1:9e:c6:6a:d7:29:1a:a4:10:66:0f:85:
b9:29:ec:4b:3e:88:be:fa:03:14:a3:f6:0b:7e:c9:76:85:ad:
33:40:b4:46:ac:f9:ab:d4:fe:7e:10:52:b0:66:46:71:41:37:
9b:5c:3a:00:77:bb:86:d5:82:14:f3:31:8c:c9:44:ca:43:2b:
01:5e:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:20 2025 by rpki-client