Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa
File: dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa (raw, json)
Hash identifier: 4T5plSDy/R6te19mWPMT0d9Cw3yJJlZLD9XV66eliU8=
Subject key identifier: F7:E7:B1:A4:72:71:51:E1:02:13:AB:32:68:AC:7A:10:01:F1:B4:73
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62B0BEA8E67AE9BD1B58F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:0b:ea:8e:67:ae:9b:d1:b5:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=623b942e-4380-4f55-9387-bd286daea056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:ca:0f:0d:01:05:3b:33:89:9c:ac:d4:d6:
39:47:6f:42:4d:41:8d:e6:91:67:48:cd:93:57:94:
68:af:d4:43:0b:05:c3:ba:67:97:73:cf:4c:f1:e1:
06:af:ff:80:5e:1e:ef:53:9c:dd:62:a8:02:ed:96:
31:70:80:7c:c3:b1:23:56:b8:c9:67:97:f9:5f:cb:
9a:89:c6:05:66:2a:64:86:a4:79:b8:85:8b:a6:57:
1b:1f:09:63:66:0e:23:cd:63:8e:13:c5:e1:05:0d:
c2:28:2b:47:9a:18:74:c6:e4:00:fc:de:46:92:17:
6d:3b:33:96:61:14:e8:82:97:c2:b5:46:2c:4c:e8:
40:27:da:6f:65:5d:a1:5f:11:61:e2:46:bb:c6:88:
9b:0f:d4:ec:38:f2:d6:ea:94:03:a9:aa:92:a9:91:
21:48:9c:1a:17:d4:e0:c7:7b:89:d7:84:0f:f2:65:
01:6a:ae:87:1f:ee:1f:02:be:84:db:b4:c4:74:d3:
5b:87:4f:9c:e6:8e:f0:ce:ca:c2:3b:4c:f0:3c:63:
84:b0:0d:40:64:84:89:26:f9:b7:bf:07:e4:96:ff:
21:20:1b:f7:db:00:9c:4d:70:e9:46:3c:d7:09:b6:
a1:7a:b7:63:a9:b5:4e:a2:1e:c5:9e:41:62:b2:3e:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:B1:A4:72:71:51:E1:02:13:AB:32:68:AC:7A:10:01:F1:B4:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ab:61:f4:c5:13:3e:45:71:0d:f7:d3:f9:6c:03:38:b3:60:
5e:93:8c:e3:fc:d5:1d:52:8d:4d:c0:7c:e2:12:12:c5:22:18:
a2:67:27:33:c9:de:4d:39:12:ce:36:94:8e:54:0f:82:50:58:
27:7c:a8:81:e1:d3:f9:75:d0:96:a9:48:e5:d5:d4:68:30:f3:
fd:a2:9b:57:60:0f:42:83:5a:90:11:91:6c:f6:03:1e:41:36:
9f:d8:27:8f:d8:0e:a6:65:60:68:b4:7b:3d:d7:b7:69:81:30:
f5:4d:39:e8:53:22:c5:57:25:2d:a4:5e:69:a9:83:11:f0:2c:
e3:60:15:f1:8e:60:d8:db:4b:e9:21:64:dc:6c:26:b8:d2:e4:
0a:1c:ef:f4:be:96:7c:ef:a0:e7:9d:bb:f7:81:41:fa:78:12:
45:7f:4e:61:d6:50:b5:e2:ad:b8:8c:94:37:e8:1e:b2:a5:9a:
f8:08:e8:bf:10:9e:40:b0:ad:d9:54:f1:5d:93:bd:72:3c:19:
d5:72:60:53:60:4a:4c:ec:dd:28:f3:eb:ce:4c:fa:6d:1e:1e:
6c:bd:5d:e1:2e:f0:e9:b5:d1:32:ef:a9:46:8c:3f:f3:43:be:
3c:08:36:ad:ec:3b:36:2b:2b:ed:1f:19:7a:fd:6b:94:3f:d9:
2f:28:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:10:47 2025 by rpki-client