Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa
File: d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa (raw, json)
Hash identifier: MLXMfIxErd1lRxCPK9ISC4TfNM+jSDquWuySf8ALH6U=
Subject key identifier: 76:31:91:8E:65:6D:E1:0B:97:E9:7E:6F:C7:C2:E2:DA:D9:45:64:1F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A420DB26BBF330B496FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:42:0d:b2:6b:bf:33:0b:49:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=42a3bc28-e24e-439c-9fdb-ed838a51961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:bf:3c:75:a1:f3:50:68:f5:2c:f6:ee:ce:
f8:89:eb:a9:1d:e2:8d:15:da:55:62:66:93:03:77:
52:e7:38:32:84:02:b7:3a:fd:2e:d6:20:43:4f:c8:
aa:84:be:35:79:4e:d7:1f:97:1f:41:bf:67:32:8c:
4a:cc:d6:fa:e8:94:65:f0:c3:98:4e:f9:8e:1e:24:
48:3b:33:ae:cd:88:5d:e8:92:3d:38:16:e2:7d:44:
76:15:77:ea:f4:fc:75:b6:3c:c5:e6:d7:e9:33:86:
52:b9:91:df:f1:1f:96:99:c2:24:3f:af:c4:90:1d:
c2:e9:eb:0b:8d:1f:9e:e5:65:2d:29:85:44:1f:1c:
e0:03:fb:48:32:61:06:81:ad:52:4c:ed:8b:5a:5f:
60:f7:a5:58:ca:1b:d1:86:dc:50:ba:32:2a:40:a3:
86:4f:08:a0:2a:95:48:71:e5:53:f6:d0:c3:2b:3d:
6e:08:3a:ec:3c:c5:0c:78:2a:ea:f2:02:5f:05:1b:
7b:d5:72:bc:38:0d:5c:0d:81:a5:dc:55:32:0f:53:
a4:a7:c6:ab:63:b1:e2:6f:71:fb:83:a7:c2:3d:7d:
ab:a9:56:36:42:a3:69:52:c9:80:1b:23:f4:97:aa:
27:da:28:80:8b:5d:7e:dd:c7:78:ac:7b:49:3c:c4:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:91:8E:65:6D:E1:0B:97:E9:7E:6F:C7:C2:E2:DA:D9:45:64:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:96:f8:1a:1b:ad:52:e6:75:45:40:bc:d1:07:4a:78:bd:a5:
99:16:be:a0:86:fb:38:4c:d2:a9:c5:02:92:ac:ff:ee:ec:38:
6b:44:7f:71:0d:9e:f4:b7:47:60:19:78:07:6f:27:c1:f6:fe:
d1:db:e9:3e:dc:3f:b8:67:7a:f3:0c:57:41:37:49:c4:07:e8:
b7:35:61:08:67:6b:3d:d3:7d:2d:eb:0a:12:46:20:11:52:df:
84:a8:e4:0b:a5:24:ed:8b:ab:d7:11:a8:cd:35:5b:d3:fc:27:
f3:b7:18:3a:c6:f2:c2:1a:81:25:aa:70:af:4c:c2:10:3c:30:
58:57:31:ef:2b:0e:2c:c1:09:bc:f0:d1:93:d4:3a:85:eb:5f:
a9:a8:a1:47:99:cb:43:88:bf:c6:f4:44:6a:79:af:e0:e0:94:
11:a9:81:ef:2d:5e:da:0a:66:9f:a0:a7:bd:7d:71:65:23:c2:
d9:a0:84:87:99:0c:f6:29:a4:cc:aa:2d:0b:17:f9:97:83:4f:
f4:95:05:0a:47:62:e5:d6:69:71:7b:f6:de:f1:25:ca:b4:f9:
06:ad:5c:9e:f7:c4:77:a0:1d:8b:8d:f6:83:4e:ae:21:8f:e3:
4a:c0:30:00:4a:87:7c:48:25:ac:18:12:f9:77:24:27:74:2f:
fa:41:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:00 2025 by rpki-client