Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
File: e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa (raw, json)
Hash identifier: hMdy3afyjj3Fo4yqQgJxmJy2kqtJc21qGnpFfBAKlxE=
Subject key identifier: 82:9D:EC:30:1F:5C:B7:35:22:B2:65:77:B1:56:DC:C9:B6:62:52:47
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACC5D045684E1157A89A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:cc:5d:04:56:84:e1:15:7a:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=cbb396c5-d24b-4ae9-ad10-e4cc920de228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:b1:c9:06:54:2f:ad:93:e8:f8:50:a8:22:
b2:1d:06:27:34:77:25:0b:fe:f6:9f:f1:f4:f6:fc:
02:ae:d1:9f:c8:01:55:d4:75:c5:c0:c5:75:51:03:
cb:2d:d1:83:cc:c7:17:b8:11:3f:92:9e:3a:2c:81:
c8:ad:41:29:ac:b7:d6:4d:6b:a8:0a:06:fa:16:d9:
d8:54:35:a2:42:f5:7d:34:e5:af:bb:34:ea:cf:a4:
63:4b:02:9c:11:2b:31:00:a8:3b:53:f7:e9:fd:d4:
47:18:b8:13:df:d1:0e:82:db:6a:8c:5b:ec:62:3e:
9b:da:88:1a:26:fa:84:e3:7f:76:54:91:10:ca:5f:
29:60:a0:2e:83:f6:2e:57:f7:5e:b0:0c:58:d1:7e:
50:b0:4b:ea:08:94:1c:cf:47:e8:cd:d9:b5:37:b3:
04:b6:02:b2:b7:dc:90:20:f1:62:1f:b6:5a:38:d3:
7e:de:f8:cb:2b:27:0e:82:22:31:03:e3:ce:49:5f:
94:0e:67:f5:01:7a:bc:40:56:51:08:b8:4a:68:e4:
55:47:ea:50:bf:d1:32:95:59:41:85:86:34:87:3b:
1b:1d:6d:be:b0:52:47:cd:85:66:95:9a:95:06:3a:
0e:77:49:85:5b:6b:84:c9:7f:98:b4:83:61:af:77:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:EC:30:1F:5C:B7:35:22:B2:65:77:B1:56:DC:C9:B6:62:52:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0850f2e-ec89-3cde-923e-7ca5bf9d52bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:12:fc:66:b4:55:7b:05:3a:91:17:f0:1e:10:15:63:6d:9b:
56:c4:be:b9:c8:66:0c:b2:e1:bb:e7:39:d2:d3:b4:c5:f8:cd:
50:5b:41:2b:a0:33:5f:9f:9d:79:14:6b:e8:dc:e9:58:b0:ea:
7b:ac:03:d9:67:f6:7b:a9:c3:10:e5:dc:8d:0b:d3:e9:28:02:
90:7d:02:1b:b1:a5:07:77:31:51:92:df:41:5e:6d:7f:14:2e:
20:a9:c5:f4:49:22:fa:c9:77:a9:5f:41:c0:e2:b7:79:1d:6d:
ae:d8:c0:15:8c:3e:5a:e5:fc:46:3e:c0:8e:7d:ec:11:67:08:
d4:a1:61:a8:27:f9:c9:1d:96:6e:d4:2b:e4:dd:cd:a7:9b:dc:
36:e0:c2:5c:7b:31:83:be:cf:61:40:fb:ba:c3:96:28:f3:a8:
74:b5:0d:7c:14:ac:94:3a:e4:79:66:8c:eb:ac:36:b9:68:48:
ac:d0:ff:de:ec:c4:df:0f:ce:f2:95:9a:7e:1d:5d:70:ca:7c:
67:35:15:47:65:8e:49:f7:34:60:89:36:59:6e:53:ba:76:17:
3f:3f:8b:bf:7f:3f:78:4c:57:41:16:52:61:72:0d:10:59:8d:
51:c7:41:50:f6:e6:c5:05:71:45:b8:a7:b3:4d:59:16:2a:b2:
51:05:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:11 2025 by rpki-client