Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddf768f5-84ce-3c39-a536-6c6631dd1389.roa
File: ddf768f5-84ce-3c39-a536-6c6631dd1389.roa (raw, json)
Hash identifier: O4x8PhWiitYhb5/KySI4wyzWOa/0QfvphcpDX7qDdrs=
Subject key identifier: 4E:0F:87:3F:79:5B:2F:EE:7F:53:60:E5:F8:F2:68:D4:3F:48:90:F2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A536244FD5BCE20338600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddf768f5-84ce-3c39-a536-6c6631dd1389.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 75.106.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:53:62:44:fd:5b:ce:20:33:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=14415a9c-16b4-4f66-ad65-b85fba2c2454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:5b:32:2d:6e:18:0e:2f:e8:a9:bd:68:bc:
9b:63:ff:35:86:13:bf:0e:59:7e:c8:78:f7:86:a7:
16:04:40:27:fd:1d:a4:c5:e8:79:17:e2:7a:45:cd:
d9:15:05:4e:3f:f9:c0:af:6a:e9:3c:d2:4a:c6:19:
41:b2:17:e1:9f:66:57:57:57:4c:42:68:bd:e5:56:
4c:8c:ca:46:a5:a9:1c:fb:df:bc:6b:e5:62:e8:53:
2c:63:26:5e:f3:a6:0f:6b:c9:5c:35:a6:a2:aa:9d:
d2:79:60:c7:2f:32:c4:c9:a7:fd:fb:57:aa:03:b3:
07:e5:3d:3b:76:56:46:b5:f8:ea:2a:15:90:d4:5c:
11:9f:8c:e8:ff:c3:cd:fb:68:85:fd:8a:04:d8:3c:
34:1f:11:03:9e:48:8b:88:d8:42:d7:80:7e:4d:ff:
04:3f:a4:83:bd:9f:70:49:ef:d4:a2:37:78:d6:ad:
27:02:84:b0:7d:85:f3:a1:a5:62:af:15:56:c7:1e:
dc:39:b5:f1:b4:a9:5a:d4:d7:21:a5:2a:af:fb:69:
77:a6:94:da:2b:69:ee:7d:a6:e0:15:0a:d6:1a:bb:
5a:ce:4a:85:47:ee:b6:17:8b:26:45:70:01:be:34:
ee:c1:9e:0c:03:e0:27:d5:49:c9:59:83:74:0a:87:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:87:3F:79:5B:2F:EE:7F:53:60:E5:F8:F2:68:D4:3F:48:90:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddf768f5-84ce-3c39-a536-6c6631dd1389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.106.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:be:53:d3:8e:eb:f7:78:18:10:33:66:5a:d7:e1:6c:00:d4:
90:39:9f:1d:f7:92:ee:e8:62:87:ba:9f:8b:42:0d:33:2e:42:
bf:9f:0f:e7:96:f4:ee:75:f4:6a:82:fe:05:11:a1:0d:4d:74:
bd:93:34:a8:cc:d3:68:a8:2b:09:d9:4a:04:5f:0f:2c:01:62:
36:7c:96:d2:50:67:ae:a5:4e:42:4e:36:1c:0f:fe:1f:72:bf:
69:8a:9d:c5:c7:9e:d1:16:13:a0:62:75:fc:54:ae:55:26:91:
f9:68:a6:7a:cf:2a:5e:fc:42:66:09:45:67:8b:98:9e:11:fa:
7a:68:22:40:7a:90:aa:bb:d4:80:e8:39:cf:85:e2:60:3a:ab:
ea:65:cd:49:9b:ec:6b:80:83:be:ae:f1:00:52:6f:05:36:1e:
fd:59:71:cd:ea:4b:e1:3b:7a:7a:7c:20:61:26:42:c5:55:5e:
b4:ba:d7:7b:26:fe:7d:e6:3f:b9:bb:6f:b5:63:17:3a:f7:1a:
3a:47:1f:f7:e1:7b:5e:cb:7f:f4:40:5f:f7:a8:15:95:2c:15:
25:2d:46:0e:31:fd:6b:b2:a3:d9:29:d4:18:e5:fc:e1:68:a2:
37:5a:b6:2f:2f:c6:60:31:99:be:ba:1a:19:61:e8:48:12:41:
9d:83:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:38 2025 by rpki-client