Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa
File: f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa (raw, json)
Hash identifier: KcFSUyg6KNbUucQBxciAlbHELrT5i5Pw4w3IPJAm/2c=
Subject key identifier: 70:B7:7A:DC:47:89:AA:6C:2B:D8:28:AA:EF:1D:C1:E2:A2:8C:55:DB
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584829814C6519D605F7E4D05C80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa
Signing time: Tue 10 Dec 2024 16:55:33 +0000
ROA not before: Tue 10 Dec 2024 16:55:33 +0000
ROA not after: Mon 10 Mar 2025 15:55:33 +0000
asID: 272370
IP address blocks: 72.14.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:81:4c:65:19:d6:05:f7:e4:d0:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Dec 10 16:55:33 2024 GMT
Not After : Mar 10 15:55:33 2025 GMT
Subject: CN=c99fe8bc-8d4e-40f9-84bc-685fa2d75fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:55:24:5f:dc:e2:18:97:a8:4f:e6:87:1e:
81:cd:ea:7f:be:77:f7:40:00:71:23:09:e6:18:4e:
02:66:d7:86:cc:da:52:21:a4:ba:44:e1:c6:8c:de:
44:ee:1a:bc:72:4a:11:1c:05:c4:55:9a:fa:25:d1:
bd:5d:01:e7:6c:c2:6c:7f:41:4a:f3:0f:dc:e5:12:
05:34:4b:7d:19:9a:fe:94:ae:7d:56:19:66:9a:55:
60:d7:14:6e:a0:b3:fc:ac:74:a3:4f:ba:d1:41:fc:
dd:4e:8e:0d:23:26:56:74:41:18:75:69:86:d6:95:
d1:ec:b9:77:71:0c:79:d6:d9:38:7f:f3:d8:30:7d:
01:8c:57:6a:c6:9b:85:2f:f8:b5:1e:27:3f:72:11:
33:c1:51:86:0e:1c:db:c6:50:1f:68:44:7c:6f:dd:
b3:83:43:ea:6a:c5:91:1d:03:21:06:6e:e8:20:09:
26:5a:f1:e8:ef:a9:6b:3c:d0:6d:aa:fd:3e:ae:02:
c0:b3:0f:90:a4:06:bc:6b:6e:8d:38:fa:a6:ec:5b:
c9:50:c8:12:cd:55:6a:53:c7:f4:5d:a4:db:88:a1:
a5:1d:44:73:98:b1:37:77:43:0f:19:f5:9d:01:e1:
a6:00:01:04:59:b6:c3:28:a1:c4:0e:f9:eb:8b:2c:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B7:7A:DC:47:89:AA:6C:2B:D8:28:AA:EF:1D:C1:E2:A2:8C:55:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f2becbea-8e5f-3dd6-bbe0-38c8315aa2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:49:d6:64:62:23:d9:9e:04:da:55:ac:05:2d:bb:08:65:6d:
2f:70:c1:34:93:16:73:1c:9a:c4:5b:58:ab:16:36:a8:23:52:
1c:70:15:84:ae:85:ba:5a:6e:5c:2b:af:15:5e:67:56:66:14:
6f:de:c1:93:9a:7e:22:38:3f:e5:dd:b7:2d:ad:c0:65:32:57:
22:ca:38:18:28:62:42:91:fa:5c:3b:d3:21:e7:22:bc:19:cb:
33:bc:d9:a2:9b:b4:d4:9f:79:20:dc:15:5d:87:7a:f2:e8:02:
16:21:b1:f6:34:1a:b2:0c:86:00:19:a2:ee:b1:d2:0f:bb:eb:
16:3f:b4:f1:ff:b6:63:6f:12:54:22:59:27:e2:4f:33:43:c0:
b9:81:a8:81:e3:38:4f:d9:fc:8f:09:7f:43:a7:2a:7b:3b:46:
db:66:61:c0:e7:0b:23:8d:fc:d9:c2:30:f2:17:2d:91:04:9d:
a1:9e:e9:2c:53:2d:ad:51:17:1c:2d:0e:ea:00:d3:7c:ee:5b:
73:28:7f:cc:06:a3:81:aa:91:04:95:40:07:49:9c:0f:fa:42:
aa:28:28:bb:c3:da:5d:8c:ee:4d:76:86:8e:23:f0:f7:93:5c:
4c:99:d4:eb:71:ee:6a:42:56:79:82:ea:bf:4c:63:5f:19:ca:
c6:a1:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:50:57 2025 by rpki-client