Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json)
Hash identifier: rNf+YXHrGippgg7Nzfu3kK5r7prX035nH2d/7VXdoow=
Subject key identifier: 05:61:8A:F1:64:C7:8A:06:2D:9F:62:D2:D0:5E:C6:ED:63:E7:5E:B0
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858483B4FFF7E9CCFCFCA7BD51280
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 211373
IP address blocks: 72.14.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:4f:ff:7e:9c:cf:cf:ca:7b:d5:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=686353d3-8e12-43f5-991b-978d74ba2eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:40:f2:c2:b8:8f:3b:eb:ac:c1:d0:b7:87:
3f:49:c2:cc:e5:07:b5:aa:30:04:be:01:d3:44:18:
ba:c2:80:b7:e7:64:89:2b:75:ce:f1:a6:c1:51:bd:
84:80:40:3d:66:37:96:67:c5:1e:16:3c:e0:fa:86:
f1:ab:e4:0f:f8:3a:bd:0b:6c:30:a2:ab:c5:c4:24:
f1:82:e9:90:79:29:19:7c:af:ad:80:3d:d9:93:19:
13:d7:df:3d:68:29:bd:90:1a:2e:9f:f6:39:2f:cf:
84:6f:02:bf:ef:53:1d:0f:31:5a:21:e3:2e:82:5e:
45:df:a1:67:b8:88:18:56:90:81:0f:a2:21:4a:d2:
8a:4e:0d:7e:bd:3d:91:40:23:7f:ec:d6:0a:04:24:
87:b8:08:39:ab:d0:98:d9:d4:02:83:46:bf:ed:6c:
13:9f:a1:2f:78:33:43:f0:9f:bf:89:6b:06:c7:de:
c8:e8:b1:bb:e1:5b:4a:fe:24:ed:36:05:6d:32:cd:
02:6b:4a:df:3d:a5:ba:8f:84:77:9e:6e:d9:f2:eb:
69:0c:31:70:29:8f:3e:46:82:ce:97:d9:88:66:91:
24:07:b1:bd:6d:d3:03:f6:41:4d:32:af:28:c0:92:
1a:7f:3d:0c:1e:9a:ef:a2:99:92:4b:cf:f9:86:bc:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:8A:F1:64:C7:8A:06:2D:9F:62:D2:D0:5E:C6:ED:63:E7:5E:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2c:f1:e2:16:9a:2f:d6:ca:25:38:80:4a:7a:96:11:fb:df:
7e:2e:20:e8:27:03:66:9b:d9:58:52:92:53:64:16:77:ee:ef:
73:00:22:39:7c:e7:c8:9f:ce:0f:b4:2e:7a:e3:30:1e:6a:63:
04:f0:40:df:a3:e5:17:dc:92:47:f9:26:d5:93:27:04:c7:36:
01:7d:f1:5a:3b:3e:f3:c7:39:8a:de:b0:55:5b:d7:4a:7c:b7:
6c:43:0a:eb:4c:54:b6:b0:23:16:b8:4f:79:6d:a6:c1:80:64:
12:b7:6d:6d:c4:bf:a5:cb:05:1b:61:16:a6:63:0a:0f:cf:d7:
c9:c5:c0:6a:04:e8:60:b7:98:04:ff:c9:be:e0:ab:9f:8a:42:
5a:1b:a9:64:75:df:9e:b2:6b:5e:bb:c8:39:7a:27:75:90:ca:
5a:a1:65:fb:c4:20:6f:89:97:bc:b4:ae:1b:a8:38:f3:72:d1:
5a:5a:f7:f2:3b:94:32:e4:aa:da:a5:66:88:35:20:d3:da:c1:
ba:07:eb:a8:c9:05:dc:0a:5e:ae:2b:b9:48:e3:7d:4d:21:70:
fd:67:1b:9b:05:b7:9a:b4:88:89:ca:59:fe:40:77:09:44:5c:
c5:de:8f:89:a1:89:4f:3e:98:51:32:d1:fe:fb:8c:4d:41:aa:
06:03:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:42 2025 by rpki-client