Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa
File: de012c4e-185d-3ce9-b093-964f60565a71.roa (raw, json)
Hash identifier: eOncRLOAIGuT9PcEmyVGjjeGsgsniC+kK6NnF6OjYNM=
Subject key identifier: 06:8F:AA:01:C7:97:43:25:09:85:D1:6F:91:06:44:6C:63:4E:A8:4B
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD0316C5298D65699610E00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 72.15.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:31:6c:52:98:d6:56:99:61:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=633a166b-b11f-4a58-89ed-754b15289ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:62:15:b1:df:e0:3a:ae:5a:ea:ee:71:6c:
fd:bd:ee:0b:41:af:62:d7:7a:c2:0b:a3:32:a3:58:
e5:44:12:4a:e0:0c:68:26:f2:55:c1:71:41:37:89:
96:a3:ef:c0:ed:a0:5c:78:f2:64:13:84:d3:94:f5:
6d:0a:5d:c4:21:a5:cb:ba:19:58:9d:d6:14:fc:53:
72:e3:ac:a8:4c:ce:81:fa:dc:d7:18:59:7a:fc:74:
c5:12:81:4b:ad:64:13:40:bb:43:8b:b0:9b:77:16:
30:ba:3c:30:87:b2:3c:22:9e:f8:0a:52:d7:7c:6c:
7d:c0:d5:e9:7c:92:a6:a7:57:5c:a6:fb:5c:4e:b1:
62:a0:60:24:68:24:49:5b:17:54:87:0b:e5:da:16:
c2:91:a3:fb:8f:d3:27:79:34:f6:dc:dd:bc:63:48:
11:e1:de:80:26:86:31:48:3e:4f:30:56:c3:82:c5:
04:a9:6a:b2:12:8a:48:80:41:95:b7:9f:25:fa:6b:
c1:c4:11:99:4c:90:92:0d:76:70:37:b2:c5:7f:f0:
4c:bf:c8:ab:bc:55:5f:b1:ca:75:ef:bc:82:69:9f:
4a:a2:78:d9:3c:5c:4f:9b:c8:d8:3d:6d:c9:ed:3e:
91:b5:af:38:b4:26:56:95:94:dc:f1:c9:a6:6a:86:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:AA:01:C7:97:43:25:09:85:D1:6F:91:06:44:6C:63:4E:A8:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/de012c4e-185d-3ce9-b093-964f60565a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
72.15.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:86:92:33:30:d9:28:d1:e5:8e:18:ff:05:59:62:02:90:09:
3a:b5:6a:f8:53:cc:64:b2:1a:d9:ef:f4:ae:47:d9:59:9f:08:
5e:5f:d9:0b:32:17:91:43:cf:2a:ba:80:6b:3b:eb:41:c3:1e:
a6:01:90:23:d6:10:c1:04:d3:00:36:50:9b:a4:f9:7f:32:0e:
55:89:bf:2d:b4:ed:05:0f:29:6a:f0:81:35:bb:6f:eb:aa:ac:
1d:19:8f:42:ea:ae:02:d1:bd:ad:13:2b:9d:f4:d0:af:43:b3:
c6:78:03:98:7e:f1:5e:af:15:80:c1:d2:bb:eb:df:48:9d:b2:
f9:c0:b0:8e:0a:9f:d6:28:e5:97:97:43:b9:b9:c1:f5:d4:11:
b7:e2:cc:69:42:1f:d0:27:08:70:f4:63:93:b0:57:35:88:cf:
be:8b:c8:d8:76:2f:d7:36:60:70:b1:21:94:80:dd:ad:86:8c:
f1:f3:35:e3:06:b2:2e:14:03:4c:9d:fd:c6:75:c0:3b:e9:64:
34:3a:14:ab:e2:6b:5a:c2:31:05:a7:a8:13:f4:f4:bf:05:a5:
d1:95:d9:ba:35:1f:c5:5a:4b:95:08:23:f0:3d:e5:81:f8:4a:
2f:d8:8d:19:6c:59:d3:18:4e:9b:f7:a5:c1:3c:b6:98:7b:f7:
13:23:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:23 2025 by rpki-client