Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/9fb08982-f15c-345f-ba61-2f417af27d6e.roa
File: 9fb08982-f15c-345f-ba61-2f417af27d6e.roa (raw, json)
Hash identifier: z6B+qvYWaNyyoQVV5YOM1bHoXsu+yJ17Z26GOoy0oj0=
Subject key identifier: 4A:A4:DF:3C:48:37:4C:09:DC:A3:60:7C:65:26:51:AA:54:FC:9E:24
Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial: 010D0C9F432858489340A6BFDB4E23A1ECA32400
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/9fb08982-f15c-345f-ba61-2f417af27d6e.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 15267
IP address blocks: 72.18.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a6:bf:db:4e:23:a1:ec:a3:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=7f5591e2-89aa-41a8-b40e-e61e3626e840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:c1:4e:9e:d0:d6:3f:0f:2b:50:36:08:1c:
14:bd:49:fd:99:66:05:1c:8b:e8:e0:18:c0:f6:8d:
d5:f2:73:5b:59:95:0e:1b:d7:1f:e2:3e:4c:20:f4:
72:e4:aa:3d:a5:7a:5f:3d:55:ca:ce:8d:fc:b7:69:
15:84:f1:61:09:19:95:f7:02:aa:38:82:e9:56:4d:
c1:81:30:c2:a3:f4:cb:91:f1:14:cd:c9:4f:71:4c:
56:41:04:eb:77:6c:8e:13:58:9f:0a:70:2d:8d:25:
1b:dc:82:f6:4c:35:d2:7f:e3:2c:08:00:56:f6:7a:
2a:75:89:ff:90:b1:48:99:52:47:54:fb:dc:d2:70:
49:81:3d:df:97:a8:49:fe:6f:4a:49:80:3a:c2:c1:
11:07:f5:50:c8:f5:72:16:7a:70:78:c5:88:a1:d4:
3c:67:f2:59:83:a4:69:a2:5b:96:88:f5:db:b1:8e:
0e:5c:ad:a3:b0:e9:35:1f:4f:2e:9a:ef:5c:a4:8c:
c0:37:b2:e2:fc:b6:e3:df:56:dc:15:9d:62:10:c1:
b5:77:c7:04:a1:57:15:5f:76:61:a2:ff:11:bb:f5:
a6:a6:fc:cb:62:dc:dc:ab:e8:87:93:db:30:b1:ba:
c1:fa:ae:a2:7a:d3:0b:2b:a4:b1:91:d0:c1:c4:69:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:DF:3C:48:37:4C:09:DC:A3:60:7C:65:26:51:AA:54:FC:9E:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/9fb08982-f15c-345f-ba61-2f417af27d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
X509v3 Authority Key Identifier:
keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d7:c0:c3:92:66:11:6b:19:8e:29:56:9c:8a:ae:60:c2:88:
b4:e4:ab:9c:e1:4c:a7:36:f9:a7:56:d2:08:90:08:6d:a9:de:
5c:3c:b3:62:4a:3c:bd:4c:79:cc:50:4f:24:50:59:4e:64:34:
5f:54:cc:43:8a:e6:ea:a4:3f:d1:55:23:8b:69:01:79:a2:88:
1e:53:46:d9:e3:ca:2b:90:48:bf:44:1d:e0:35:df:43:43:40:
9b:a8:92:07:45:8d:cc:f3:1a:d6:8f:54:d7:4e:9e:5f:a2:d4:
22:96:0c:2d:ea:bf:92:2e:e4:06:df:cf:f0:d0:e7:34:b8:7d:
fe:be:b5:38:db:f1:7b:af:fd:cf:77:35:24:99:d9:e4:0e:13:
dc:c7:0b:56:c4:e3:c4:a1:ae:a1:d4:34:a7:d6:04:84:a3:f7:
84:43:06:4d:79:8e:cb:ad:b1:5b:9f:aa:89:ef:41:3e:9b:01:
97:7d:8f:a7:dd:e0:56:94:0d:75:29:78:00:7a:21:6f:21:e9:
b4:60:4c:cf:b0:2a:c9:d8:ec:5a:7b:d4:0a:67:58:ce:fe:2b:
cd:c0:5d:18:d1:10:84:42:9c:b9:c5:47:63:ce:fc:30:b0:a0:
bb:94:9e:66:e7:b2:97:b8:f9:fb:d6:42:fe:4a:50:0d:55:de:
cd:d9:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:53 2025 by rpki-client