Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
File: f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json)
Hash identifier: 8SKkqFr7X1xPtjG4AG5fd4LrquE1L/KCyXTwnUW3PPQ=
Subject key identifier: 46:06:95:3C:72:C3:B0:18:15:9B:8B:C6:56:91:13:25:DB:E9:69:74
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A4068797187372A81B100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 72.173.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:40:68:79:71:87:37:2a:81:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=7d4bc117-95cc-454b-96f0-4cd6d544b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d2:9b:f4:54:91:c5:33:35:b3:8e:12:fa:ad:
e1:c0:ee:99:69:ad:a7:40:79:ed:0d:76:11:de:22:
75:6f:7a:04:38:e2:a1:4d:e9:13:23:0e:18:b2:b8:
39:c7:d2:cd:a6:5a:e5:0c:3b:e1:d0:32:18:1e:0c:
84:a1:ef:86:6d:e4:d1:38:70:ed:65:ce:fb:f6:71:
5b:44:38:8a:8a:16:00:90:88:da:65:e6:15:6e:ab:
7f:cd:8d:e6:43:66:59:06:d4:9e:6c:c6:30:8b:13:
7c:83:93:2f:d3:b2:64:5c:3b:6f:f8:43:25:db:a5:
7e:69:66:21:4e:5d:bf:17:bc:70:49:b2:a3:cf:86:
3a:05:59:05:d7:22:a2:80:93:be:a9:5f:d9:be:19:
6e:3b:63:11:e7:bd:3c:7a:65:39:e7:24:42:94:7d:
d4:54:00:44:e6:3a:1a:df:da:b1:47:1d:55:1c:44:
90:eb:33:82:82:8c:11:0c:b6:be:5d:83:3b:39:05:
7e:86:07:87:4d:9d:bd:e9:f1:12:be:36:f7:86:81:
fe:9b:a5:f6:49:a8:c4:75:f6:1a:0f:da:c9:42:cd:
5a:b7:70:a3:b3:a1:8e:e3:ec:d2:f6:b1:3f:90:fd:
ea:70:25:ab:43:55:1c:56:f0:0f:1c:db:f6:1d:30:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:06:95:3C:72:C3:B0:18:15:9B:8B:C6:56:91:13:25:DB:E9:69:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:a0:57:a3:67:8a:c2:24:28:39:44:a9:a8:0a:fe:06:98:fe:
1b:2a:f6:8c:fb:61:26:39:89:d9:c5:08:db:de:f4:f4:68:05:
fe:6a:5c:de:0c:af:2c:f4:cd:76:29:0a:2f:11:03:9b:0c:54:
f1:ed:78:57:b3:ae:47:a7:37:44:79:c2:65:72:c1:8c:46:47:
bb:5b:10:7e:11:34:64:2c:6f:12:eb:ef:fa:6e:da:60:5e:af:
ef:f5:aa:8f:41:f3:d8:e7:d4:da:20:71:c4:27:ed:ee:9b:d0:
7f:7f:88:64:f6:bf:e7:a3:a0:8b:7e:16:4f:9b:0e:7e:3e:7f:
eb:12:82:18:8c:4c:3e:39:70:cf:90:4a:15:e0:cd:87:2d:2e:
c8:94:d9:30:78:cf:bf:ff:2c:c5:09:52:48:46:20:54:99:04:
9b:42:a7:68:8c:a9:ba:2c:fd:83:30:27:7a:48:b4:89:5a:dc:
e9:17:6e:75:bc:c2:89:76:f8:98:e2:c2:d4:14:8d:ec:65:03:
45:c0:4e:dd:6d:e3:3a:3a:71:ae:4e:f8:16:2e:fb:f7:be:97:
fe:f1:47:83:18:ed:4f:dd:cf:02:bf:f7:33:d8:10:08:86:25:
43:9b:84:8b:84:12:c8:b7:b9:a8:46:4b:4b:f3:0c:2c:c4:69:
f5:ab:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:30:58 2025 by rpki-client