Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa
File: 0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa (raw, json)
Hash identifier: DdGC7tH4nPWNnBx49iRRNlzL9ZGnth2Z1z4Kj9ugbro=
Subject key identifier: 64:A7:C0:09:ED:91:E0:5F:98:6F:A6:81:45:35:5B:13:62:55:75:44
Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial: 010D0C9F43285848037B6436069F8D02506B9C80
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 72.13.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:64:36:06:9f:8d:02:50:6b:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=b48f575d-7012-45c0-8062-450b28d0e6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:01:a1:d9:c6:a6:93:89:83:d2:50:7b:c9:
a2:0f:cb:31:70:61:d9:bf:03:36:3a:69:cc:46:07:
d8:8d:33:75:f0:ad:4c:7b:65:e6:29:e2:b0:9d:47:
74:4c:87:1d:34:48:a5:8f:97:78:d4:f4:b1:0d:47:
c6:0f:9f:89:f6:77:26:94:d7:7c:00:cb:08:4a:7d:
8a:ca:b2:58:2a:6e:43:cf:7b:02:1d:d7:fb:dc:0b:
25:42:62:5d:e9:f3:3b:c5:0d:64:60:45:20:01:c9:
fc:17:df:24:ff:a1:c8:d5:51:62:49:ce:2e:83:37:
c2:08:ef:74:9d:76:d1:06:76:a1:59:9a:01:74:5e:
8e:e5:82:ea:e4:89:50:17:c3:ae:ec:3c:76:56:16:
2e:59:2c:d6:4a:7e:1e:7f:58:a6:99:eb:80:03:1e:
cd:23:77:42:52:64:bb:2d:0a:b8:bb:3d:9b:e0:df:
76:f8:bd:d3:82:6e:af:a0:b4:10:49:c5:18:97:48:
a3:04:a2:43:e8:64:16:4e:07:b5:e1:db:78:07:30:
e0:76:ed:5d:1f:5f:25:6b:75:dd:a0:ab:8e:ff:e9:
85:1d:2a:c6:28:00:a8:3c:52:aa:28:f5:5f:f1:99:
17:63:0d:06:2f:d1:16:ab:8d:c0:2b:46:43:77:62:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:C0:09:ED:91:E0:5F:98:6F:A6:81:45:35:5B:13:62:55:75:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/0417f438-d3c0-35d0-b3a7-54518b9fe85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
X509v3 Authority Key Identifier:
keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
sbgp-ipAddrBlock: critical
IPv4:
72.13.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:2b:7c:f1:6c:3d:49:a4:b2:4d:d1:fb:57:13:c4:cd:28:23:
49:70:a0:74:68:f0:0d:6d:2d:33:9a:cf:be:75:c0:03:85:c2:
d7:38:83:4d:3e:e2:ff:86:3d:49:14:ca:f0:0c:f0:f1:7b:c5:
ea:c2:84:8b:04:9e:d8:05:6e:38:ca:80:a1:1e:01:37:41:d0:
37:df:23:fa:e0:07:5a:b5:a6:cd:39:7a:4e:35:ec:bf:39:e1:
33:40:9a:be:94:7d:ed:67:69:bc:9c:92:c3:5d:05:18:50:bf:
0f:c1:33:fe:c0:d0:ce:71:f2:a2:a0:f1:40:38:07:b2:12:14:
2c:21:93:61:ee:49:c7:26:cc:31:4e:38:bf:b5:50:1b:b8:c9:
86:4f:31:11:11:bc:eb:86:dc:1b:3f:ef:52:c9:41:4d:b1:59:
f4:fb:f8:9e:28:c4:d9:81:b2:e7:49:52:46:09:29:ee:5c:fe:
9c:9e:f4:d2:d2:cb:d4:8e:f1:aa:fc:01:50:a0:44:bd:e4:84:
4a:51:f8:db:aa:04:85:67:1a:3e:42:34:2b:82:1b:62:9d:b3:
7c:de:5d:67:51:38:37:0c:b6:b3:52:a2:75:ba:ef:79:8b:48:
52:65:f9:26:40:bd:5b:e3:42:05:e1:f2:ec:8c:51:51:aa:e3:
1a:9a:23:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe2Q2Bp+NAlBrnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2NiY2ZmNjgtMjNiYi00ZDRlLWE3MDMtYmFiMzExNWJm
MDU0MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
YjQ4ZjU3NWQtNzAxMi00NWMwLTgwNjItNDUwYjI4ZDBlNmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnREBodnGppOJg9JQe8miD8sxcGHZvwM2OmnM
RgfYjTN18K1Me2XmKeKwnUd0TIcdNEilj5d41PSxDUfGD5+J9ncmlNd8AMsISn2K
yrJYKm5Dz3sCHdf73AslQmJd6fM7xQ1kYEUgAcn8F98k/6HI1VFiSc4ugzfCCO90
nXbRBnahWZoBdF6O5YLq5IlQF8Ou7Dx2VhYuWSzWSn4ef1immeuAAx7NI3dCUmS7
LQq4uz2b4N92+L3Tgm6voLQQScUYl0ijBKJD6GQWTge14dt4BzDgdu1dH18la3Xd
oKuO/+mFHSrGKACoPFKqKPVf8ZkXYw0GL9EWq43AK0ZDd2LNKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSnwAntkeBfmG+mgUU1WxNiVXVEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2Jj
ZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIzMTE1YmYwNTQvMDQxN2Y0MzgtZDNjMC0z
NWQwLWIzYTctNTQ1MThiOWZlODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2NiY2ZmNjgtMjNiYi00ZDRlLWE3
MDMtYmFiMzExNWJmMDU0LzdjYmNmZjY4LTIzYmItNGQ0ZS1hNzAzLWJhYjMxMTVi
ZjA1NC5jcmwwHwYDVR0jBBgwFoAUQTLwjOuyBIwI1/fc1CVU2Xg9GGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2JjZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIz
MTE1YmYwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkrfPFsPUmksk3R+1cTxM0oI0lwoHRo8A1tLTOaz751wAOFwtc4g00+
4v+GPUkUyvAM8PF7xerChIsEntgFbjjKgKEeATdB0DffI/rgB1q1ps05ek417L85
4TNAmr6Ufe1nabycksNdBRhQvw/BM/7A0M5x8qKg8UA4B7ISFCwhk2HuSccmzDFO
OL+1UBu4yYZPMRERvOuG3Bs/71LJQU2xWfT7+J4oxNmBsudJUkYJKe5c/pye9NLS
y9SO8ar8AVCgRL3khEpR+NuqBIVnGj5CNCuCG2Kds3zeXWdRODcMtrNSonW673mL
SFJl+SZAvVvjQgXh8uyMUVGq4xqaIw4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:39 2025 by rpki-client