Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa
File: c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa (raw, json)
Hash identifier: oSHEpcFkaYqGuNZcRrf7qjinnVdFZXy3kSx74zYFSk0=
Subject key identifier: 7A:80:2A:97:E3:3B:05:12:E6:2E:93:B5:40:BB:45:F8:C3:6B:BB:61
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584827C5460CA62D7FB8943BE880
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 211373
IP address blocks: 72.14.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:0c:a6:2d:7f:b8:94:3b:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=5fe0af21-19c0-4532-9c9d-9bb4998430b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:48:b5:b2:8e:ce:4f:7d:29:bb:c6:59:e5:
1a:e2:5e:9a:2a:ab:dc:af:b6:ce:27:f1:66:53:55:
ec:29:06:f8:2f:93:c3:a2:9b:60:7a:3e:5e:e0:b0:
5a:c8:80:07:13:86:f9:9d:dd:e6:6b:98:43:44:3e:
29:c9:6e:41:20:ec:37:fe:7e:d5:a9:2d:19:a6:e5:
2e:33:70:04:df:5a:11:cb:ab:77:0b:d2:7e:ee:34:
8e:4b:6f:85:f6:bc:ce:8f:5b:d2:fd:13:50:0c:17:
61:5a:5c:bb:f2:0f:70:ee:f7:ec:64:4f:70:67:32:
cf:40:5b:a3:9f:3d:49:14:9b:f8:3e:4a:82:d5:27:
bf:85:e9:87:59:12:81:0c:63:c0:bc:12:a4:95:cc:
88:80:59:3e:13:f1:81:27:3a:87:dd:74:20:8a:a0:
9f:a2:38:5c:d5:02:50:72:f0:58:f9:dc:fe:76:22:
11:a8:dd:e0:77:d6:8b:8e:d1:ff:ed:6e:8a:0a:62:
8e:06:56:13:50:e1:a7:07:2d:07:a0:e1:43:a4:24:
10:78:70:c9:e0:54:ed:9c:42:a2:35:4a:28:d5:c9:
61:8c:0b:5a:93:8e:c4:83:c9:92:ec:d8:26:e5:95:
71:e2:66:83:07:11:46:52:07:14:c0:25:9c:ac:a9:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:2A:97:E3:3B:05:12:E6:2E:93:B5:40:BB:45:F8:C3:6B:BB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c47cecfe-2d16-3ba9-85b1-c17b1aeaa5b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:cd:00:23:69:1d:8f:c8:c5:e2:55:81:49:f4:2a:7e:0a:6d:
07:8c:34:9d:91:e6:5d:f3:09:8e:f6:b3:b8:2e:41:be:d0:b9:
e2:a8:b1:a1:a1:28:b4:fd:67:b3:90:35:00:6d:d2:1c:83:e7:
a0:0b:79:a1:c5:6d:9c:30:2d:01:24:66:26:47:9e:9b:bd:de:
b8:04:7f:99:42:49:77:6c:3e:31:ad:a4:7c:fc:9f:94:7b:b2:
e9:8c:41:b6:6e:4a:93:91:b5:b6:cc:b8:c3:e1:e6:1f:97:d4:
65:bd:08:83:61:3d:03:85:4d:c0:f7:8e:6f:0a:1c:7a:40:e1:
7e:46:57:b0:74:f6:2b:3b:5b:dd:3b:74:c5:83:57:84:d0:40:
09:26:99:bb:d7:57:12:88:b8:6d:82:37:48:cb:e8:eb:15:cf:
3a:99:60:12:3a:e3:4a:64:50:3f:55:89:a3:eb:18:8c:09:8c:
aa:6b:28:da:a6:0e:36:eb:28:44:b4:70:67:53:60:89:92:b3:
d6:a6:f4:9e:77:3f:30:59:eb:e2:1d:8c:09:08:cb:dc:ea:14:
6d:40:a4:29:de:7f:e9:0c:47:ce:d4:33:6b:f7:23:36:77:4c:
e8:50:d3:16:eb:e1:80:9a:43:7b:15:b0:de:ec:e0:d0:ed:c3:
6d:69:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:26 2025 by rpki-client