Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa
File: d631bacf-f167-3d32-95f7-ea899b955d67.roa (raw, json)
Hash identifier: i5uNfAF9t9xLWcuiVlvJf28xnoLIGT6fZAVb3+eNrGQ=
Subject key identifier: 23:0B:6A:DD:BF:20:BE:45:E3:9A:E0:9F:4F:CC:68:62:3B:6D:E3:F5
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B092356E2109965077EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:09:23:56:e2:10:99:65:07:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=01a62e3d-00a3-4961-8cb1-1aa36427b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:80:8c:f9:f6:7b:74:47:ab:33:fa:73:cd:
d4:24:f6:3e:2b:bf:45:f4:51:e4:50:51:f4:53:e9:
39:1a:11:79:48:e5:af:24:23:96:97:a0:13:25:18:
fd:60:06:be:5c:9f:08:47:3e:46:1f:35:37:01:35:
8a:ed:87:77:4a:ef:57:05:64:a9:a2:ba:90:db:54:
a4:fc:ff:d1:51:b0:ef:cd:6a:3b:5f:cd:ad:2a:80:
46:3d:54:30:c3:6a:30:f2:d1:68:fa:29:0d:c1:3a:
10:44:03:2d:73:02:53:4a:69:70:9d:63:ba:2a:cf:
88:13:de:d2:dc:3a:ed:28:de:68:a4:30:a0:23:39:
4f:59:ce:6e:4a:2c:73:ec:4f:7f:91:c6:18:a8:e4:
4a:98:50:37:ed:a9:bd:c1:23:6b:22:00:af:3f:0d:
78:5f:1f:20:1a:6b:fc:1f:05:a1:22:a0:09:e4:0a:
14:12:bf:f1:1e:38:8a:ea:41:13:8b:15:a2:53:ee:
e5:5b:90:da:37:ff:33:db:19:4e:30:6c:43:f5:1a:
a0:bf:61:6a:a3:db:99:69:6e:63:42:29:33:40:a2:
83:15:79:63:8b:e7:d8:d1:a7:05:ac:5c:9e:b4:66:
98:0b:5b:39:f3:48:4f:db:7f:8b:03:66:a2:2f:bd:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:6A:DD:BF:20:BE:45:E3:9A:E0:9F:4F:CC:68:62:3B:6D:E3:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d631bacf-f167-3d32-95f7-ea899b955d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4b:f9:4d:91:92:4e:26:41:0f:3c:d2:35:bb:49:6b:5b:c5:
02:78:c2:0e:47:64:71:95:de:ac:0a:4a:9e:52:e5:fe:c4:78:
20:af:5b:40:a5:e4:00:3c:0e:50:02:51:e3:e4:72:4d:8c:a2:
51:de:b9:63:82:19:0e:80:0f:07:ef:f1:a6:e4:c2:45:0a:5a:
e1:71:d4:05:55:33:bb:ff:e6:7e:d4:5e:a9:66:e7:a9:c3:d5:
53:b8:ea:7b:26:0e:3a:1d:11:98:ec:c8:ea:89:03:76:3e:c1:
c3:68:c5:51:7a:10:11:fa:83:77:1b:4e:b7:6c:6a:93:ee:22:
c2:b9:08:01:df:79:85:74:5a:b0:a5:a9:20:54:17:37:3c:37:
6d:f0:b0:e3:5b:44:24:5f:94:16:99:d0:13:2e:fa:db:d4:73:
69:0f:51:5d:c3:a6:b8:38:e4:4f:3c:28:bc:4f:9d:65:08:75:
6b:16:38:7a:47:0d:d4:0e:23:e0:01:9b:af:88:7f:4d:d0:87:
c0:7b:27:f7:2d:ba:16:8e:5b:45:02:a6:28:59:d0:85:59:f6:
95:3d:76:73:ab:97:88:21:19:aa:c1:d8:8b:5c:fb:13:f0:f3:
79:19:47:ab:08:37:12:e9:50:fc:5a:96:63:1d:32:5d:cd:95:
13:47:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:36 2025 by rpki-client