Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa
File: 28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa (raw, json)
Hash identifier: k1TOjeU4qQsJcRh0mfKUJVwNvVPG1KbylxcKao7jua8=
Subject key identifier: BE:C4:18:D9:3D:92:16:B7:B5:E7:0D:7D:D9:B7:1C:24:B9:FD:33:57
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584802150AB52DFE15EEC30A9090
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 63023
IP address blocks: 72.14.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0a:b5:2d:fe:15:ee:c3:0a:90:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=ceb44ce6-4a55-4267-943b-7664d43a22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:1f:06:71:e3:52:91:25:5a:97:de:9f:9e:
1f:81:4f:05:3c:57:27:1c:db:b5:4d:bc:34:00:ad:
d9:b6:2b:ae:34:93:28:05:b0:45:10:35:25:15:73:
af:33:10:48:30:ee:0b:3c:34:a4:ac:26:e1:e1:ad:
3c:7f:81:da:ad:40:cc:f0:2d:ea:7c:81:da:3b:38:
da:6a:be:2a:9c:9a:d8:9e:13:f1:af:0d:3e:26:f8:
74:96:39:95:e8:ac:31:90:d5:63:47:30:e7:ef:e9:
bf:01:31:4e:97:e1:84:a5:bb:7e:ab:7c:35:d1:39:
3a:bc:23:91:7b:da:58:dc:23:c0:07:bb:11:0d:3e:
f1:9c:8c:8f:11:34:30:ef:8e:6f:84:75:7e:70:d2:
01:42:53:b6:88:93:84:de:ab:64:06:d7:38:4e:89:
70:34:ae:c1:77:e2:fe:47:c9:28:ef:24:52:f6:77:
3d:16:a3:b3:66:00:3b:b4:f8:39:20:e8:98:c5:8c:
e7:07:98:ba:12:f6:6a:4e:8a:97:2b:4e:9e:f1:81:
0c:f9:68:85:50:36:78:20:4b:ba:4a:f0:1e:aa:20:
03:d4:23:1f:0b:2b:22:8e:e8:38:40:a0:db:bd:08:
bf:c9:52:b3:6f:bd:39:9a:b2:49:41:40:ca:07:79:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:18:D9:3D:92:16:B7:B5:E7:0D:7D:D9:B7:1C:24:B9:FD:33:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:c6:56:43:f1:67:46:55:1d:0f:ef:38:25:fd:45:5e:d7:70:
80:65:74:f2:05:fb:99:62:07:98:e7:ff:ff:1c:3d:72:53:9c:
49:35:80:d9:18:f3:c8:71:15:47:e9:dc:65:6e:6c:1a:dc:3f:
5c:f8:16:48:77:48:b1:57:b3:e8:c2:e5:38:bb:ca:7e:46:85:
a4:ec:78:88:85:46:81:3f:ef:3c:47:c6:99:6a:f1:62:c9:1d:
48:e6:97:24:34:5b:15:39:24:ea:ee:08:04:ca:c5:7e:33:85:
c7:33:17:39:04:85:df:85:07:25:4c:d3:77:3d:0b:49:ac:1d:
79:53:1b:08:db:8e:02:4d:92:be:ec:78:aa:4a:c1:a5:ea:74:
87:23:0e:f5:c5:fe:5d:d7:69:55:4d:36:48:40:af:6a:dd:05:
5e:ab:18:89:ce:c5:3d:12:f1:79:31:14:c6:23:24:39:8b:13:
66:93:cf:8b:33:44:ad:9a:4a:5f:72:b7:5a:76:d6:1b:74:b0:
ef:66:02:5e:7e:77:84:79:3f:67:ee:b1:aa:40:d6:0e:97:bd:
8e:c8:c2:d0:11:1b:90:0e:47:a4:46:4f:a7:2b:77:4e:28:d4:
e1:f9:df:ac:0f:67:c3:80:09:bd:94:33:3f:ca:f7:ef:ba:a2:
44:db:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:29 2025 by rpki-client