Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f962326b-b812-33b0-b72d-7ce4d8877bec.roa
File: f962326b-b812-33b0-b72d-7ce4d8877bec.roa (raw, json)
Hash identifier: dKxNvNFsEurDBsDu951cn/GaGBK+LsHtsNI5BXPb7rs=
Subject key identifier: A2:01:0F:AA:50:87:8F:0E:26:17:92:54:D7:29:0A:F9:32:9A:6A:37
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285847E62A7B9B7D8ACE83B9B72780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f962326b-b812-33b0-b72d-7ce4d8877bec.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 7155
IP address blocks: 172.243.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:7b:9b:7d:8a:ce:83:b9:b7:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b9ad0a15-cec3-4504-bf96-9f703609359e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:55:07:06:f6:bd:20:cf:63:12:4c:36:24:
6f:81:17:51:39:3d:a3:98:d5:b9:fe:79:f7:e3:82:
44:79:ef:33:01:b0:7a:e7:dc:43:d4:83:0f:e2:ba:
eb:3d:5c:61:ce:26:97:ed:40:27:77:f7:d0:02:8c:
c6:8e:e9:e6:f3:e7:9f:97:a6:27:99:20:a3:dd:ed:
f3:15:15:cf:b3:48:3e:94:c6:e3:b5:c0:6b:6f:a4:
3e:c2:16:74:3d:4c:77:29:f9:44:f5:98:b5:5d:21:
a2:7d:64:aa:82:bf:02:8a:a6:43:b7:5d:85:da:20:
d1:85:cb:cc:05:f2:8e:ba:c7:0a:20:c5:21:81:82:
24:f0:1e:fd:56:90:0d:62:1c:db:46:2c:6d:dd:74:
3b:77:a1:b5:80:be:a1:76:0c:06:91:d9:b6:ac:a8:
82:be:97:30:ef:ca:df:fa:4c:cc:78:93:9e:f4:2a:
ce:5e:75:67:93:61:8d:3b:01:dc:16:86:7a:eb:4c:
cc:99:9d:dc:53:d8:ae:06:87:f9:d8:19:9d:de:6e:
68:be:b5:b6:d5:5c:c2:cf:5e:d3:c5:7d:6b:b9:ec:
44:5c:c1:5a:88:08:48:fa:02:a5:48:7a:b1:11:94:
95:ff:f1:4c:00:1d:13:a4:07:ea:f6:64:14:54:b4:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:0F:AA:50:87:8F:0E:26:17:92:54:D7:29:0A:F9:32:9A:6A:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f962326b-b812-33b0-b72d-7ce4d8877bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
172.243.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d0:8f:20:89:5b:72:3f:b7:40:e3:cd:ad:55:97:12:88:70:
f7:17:c3:e4:93:24:3f:7f:f5:95:98:c7:69:3b:0a:61:dc:89:
a7:a3:5f:6f:db:80:21:7d:a8:03:5a:aa:7f:37:16:0d:cc:8b:
c9:0c:d4:fc:7c:13:b4:02:65:78:a9:93:38:41:02:bc:8b:78:
73:61:5f:ad:6c:87:8b:98:cd:a0:29:b3:6b:da:01:6a:f0:a7:
18:81:20:13:54:93:f6:f7:5f:56:b8:7a:a6:8c:29:18:ad:ba:
6e:97:9b:e0:05:88:47:be:59:3f:76:8c:b5:97:c0:b8:29:96:
ff:0c:0e:c6:d3:b7:67:e6:df:b8:1b:ce:b8:86:a8:6f:21:4c:
cf:15:ca:b6:ba:3c:71:e0:c9:91:89:c6:bc:6e:62:7c:f7:55:
81:4d:31:49:ab:2d:ca:da:12:0c:c4:35:06:95:5f:0d:f6:0f:
15:97:d6:82:cf:a0:c2:08:12:a1:1c:18:c6:ac:f9:63:27:ff:
3d:f7:b7:0e:e8:ed:e5:73:ef:46:f5:8c:d4:22:b8:f8:94:6a:
43:54:49:92:b6:e9:c7:18:92:40:0d:51:a3:94:ed:c8:2c:23:
f3:cd:82:96:3a:a3:d3:b0:0d:24:07:fb:09:b2:d4:41:87:28:
3b:6e:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:11 2025 by rpki-client