Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4e1eed7-5db2-32fc-826d-ee8747a03c77.roa
File: f4e1eed7-5db2-32fc-826d-ee8747a03c77.roa (raw, json)
Hash identifier: jIBTL37OhorPZPvTbCXv68IAnk8H4chTQTfVWWcngbQ=
Subject key identifier: A6:D4:A1:D6:64:25:A9:54:88:99:7E:E6:3D:92:8C:4B:F2:B3:F6:0F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62ACE17EDBBCF32DD8B57C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4e1eed7-5db2-32fc-826d-ee8747a03c77.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 70.41.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ce:17:ed:bb:cf:32:dd:8b:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=6db2a1db-1371-4316-9a30-72b14f510e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:70:8f:5d:76:05:60:1e:20:a3:4c:f6:68:
4c:20:06:a1:c3:bf:1b:17:2a:d8:a9:30:0d:e4:35:
38:4e:86:38:ee:22:54:44:42:8d:11:fa:f8:14:5b:
c5:99:d7:6e:38:df:cf:07:ef:a0:da:7e:cb:f3:19:
49:9e:e4:d9:dd:64:f4:e3:dd:a7:89:d7:c0:aa:bd:
01:d2:45:01:42:02:ec:d8:7b:b0:43:ff:b2:e8:47:
7d:d0:86:a6:f8:62:a9:bd:96:3a:97:a7:d1:78:00:
bc:d9:ab:3e:ca:80:de:33:b6:32:d0:4b:35:a1:2e:
05:0d:b7:4f:f4:cd:f9:31:e0:47:7d:36:2e:d5:93:
cc:c7:6b:f6:a4:d9:f6:f5:72:e6:f8:c4:f7:c4:28:
79:a2:be:ac:82:7a:e0:a2:cc:1d:2c:dc:ea:23:3a:
39:b6:8e:6a:6d:53:09:c4:5c:c1:cc:d9:9c:76:50:
ea:10:a7:d6:d6:ee:9f:09:b5:6c:64:8b:47:1f:a9:
0b:12:af:e3:50:aa:13:5f:5e:14:35:bd:30:24:99:
69:7f:ab:b8:b7:a3:00:94:6e:58:80:17:7b:eb:0e:
4c:2c:85:75:b9:a2:15:6d:f6:0d:49:00:a0:a1:8a:
b8:68:50:d9:25:08:cd:9d:7a:c1:7e:15:30:e5:73:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:A1:D6:64:25:A9:54:88:99:7E:E6:3D:92:8C:4B:F2:B3:F6:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4e1eed7-5db2-32fc-826d-ee8747a03c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
70.41.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:53:ae:78:ff:75:b3:80:c5:72:f1:c4:75:c1:b7:ab:55:a7:
f4:de:86:cd:aa:24:0e:cf:e1:8a:fe:56:f1:92:87:a1:19:06:
26:ba:50:87:79:ba:62:85:67:cb:4d:ee:e6:15:ac:34:9a:52:
6c:f9:2d:7f:cd:32:5d:25:a4:e0:12:02:c4:98:48:5c:81:a6:
24:3c:dc:80:50:d5:a8:79:6a:38:2f:1e:25:f8:83:f0:c7:ad:
e5:88:ae:d8:14:84:f8:fe:fe:90:cd:fb:00:7b:4c:70:83:7c:
bb:aa:8f:ea:55:b6:4f:82:95:41:66:44:9b:1f:3b:18:85:19:
1c:ef:a7:84:24:63:3b:a2:bb:d0:85:ee:88:0b:57:35:fc:1c:
19:e7:e1:13:ad:f8:55:1a:c1:b0:2c:5c:44:93:e8:35:c4:41:
5f:e8:b3:2f:01:ad:6f:2b:18:41:be:df:50:90:a8:4e:61:63:
ce:ab:f9:9e:cc:9d:2a:64:96:ac:3e:47:95:ec:92:d0:05:f5:
33:dc:df:c6:4a:64:8c:fa:5f:5c:10:f8:03:4e:ea:eb:d2:37:
bb:b3:e1:0f:cd:45:e1:ba:8d:b3:5c:61:31:cd:df:3d:1f:28:
77:8d:6c:e3:d6:49:f9:11:6d:63:31:a9:85:97:a9:e8:a7:b0:
3c:02:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:20:27 2025 by rpki-client