Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa
File: e4565e84-221d-32cf-9998-00ce59776a7c.roa (raw, json)
Hash identifier: +UE1CipNR+9p4gHY78KRkqTC2OgwiYQMo2+5i4OMdaI=
Subject key identifier: 87:F7:80:CF:CC:30:88:AC:95:8E:25:EF:6B:F7:95:CA:BA:26:F6:22
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A73C15D8039DF570AAF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.242.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:73:c1:5d:80:39:df:57:0a:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5c97dd5f-e7ca-4480-918a-897e6f232ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:18:d4:42:6e:63:a9:2d:32:a4:c4:19:3c:16:
0f:30:9b:40:b5:b8:18:fc:36:0b:2e:40:7b:86:66:
b4:ad:9d:2b:c1:af:bb:3d:2f:e4:2d:06:52:82:40:
65:90:6b:99:41:2a:be:1f:62:81:d1:e3:36:07:a9:
be:fb:08:88:cc:1b:7c:54:54:05:38:1a:1f:bc:90:
55:af:fe:c4:ea:f8:3f:5f:c4:15:11:19:d3:de:c3:
2e:56:9b:bf:3c:68:8c:b2:8a:ef:dc:6e:6e:84:f3:
b0:d8:f5:76:03:ec:1a:cc:8e:ac:5a:05:b9:40:08:
4a:d3:af:0b:09:9a:62:28:f6:f7:fb:88:fd:86:2d:
a0:5f:05:ad:04:fc:99:de:7b:30:99:13:d5:a6:7d:
4d:03:ff:67:39:42:a0:c7:c9:52:1f:1c:43:3d:0c:
a5:4e:4a:a9:cf:48:28:e1:76:0a:e7:6a:65:aa:2b:
ad:7e:08:fa:d2:98:ff:b2:70:9d:de:fe:1f:5a:21:
db:04:ec:35:11:cd:71:fa:a4:98:68:1d:95:5a:6a:
c2:35:e3:4e:49:41:8f:c8:a8:78:b7:1d:a4:7f:3d:
f0:ef:cd:0f:de:99:bb:38:ad:e2:d8:ce:da:1d:d9:
a3:53:68:e4:3a:44:a9:c3:e2:ef:16:40:58:e9:23:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:80:CF:CC:30:88:AC:95:8E:25:EF:6B:F7:95:CA:BA:26:F6:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4565e84-221d-32cf-9998-00ce59776a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.242.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:49:4e:03:ea:db:4f:d7:20:d5:ce:45:45:05:46:5a:d9:e1:
fd:48:c7:f2:86:e2:1d:cd:e2:c3:a9:92:d6:99:63:74:b4:47:
89:d2:47:8b:60:af:48:ad:10:c8:2a:8a:e9:e2:d2:6e:c2:28:
ca:93:b0:0b:b2:b7:61:a7:07:80:d2:91:ce:24:5c:92:ab:0b:
6e:ce:1c:52:5a:15:10:df:35:38:f3:ef:f8:c0:ed:49:26:c2:
fb:2f:8e:be:be:21:e1:2b:69:82:07:82:69:40:f5:c8:cc:9c:
0a:73:21:48:7c:16:3b:e6:43:7c:e9:18:0b:c3:c6:01:68:d8:
cc:eb:af:e9:72:67:aa:26:91:b0:54:33:55:ca:8e:a9:83:cc:
38:3d:49:10:05:16:40:bd:d0:75:6a:c9:33:48:69:5b:e7:f1:
c6:80:19:49:b0:4e:01:94:d0:1e:d2:fa:e2:07:0f:8b:92:1b:
3d:7b:b6:7e:34:8b:24:63:47:56:ff:78:bd:98:c8:99:79:e3:
49:07:51:09:fb:50:f2:14:72:c0:4e:58:ad:59:c0:01:c4:c4:
89:4c:e2:78:ee:33:c0:16:2d:fe:5c:3d:e1:7e:cd:b6:58:77:
2c:d1:b5:50:8a:34:9f:ea:80:92:b4:fc:fe:3d:ff:84:66:e8:
ea:49:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:20 2025 by rpki-client