Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json)
Hash identifier: 9zNwuzk+4b1r/we1WoCh/xr2Q0BGi8Y0vaFLkmjfGjE=
Subject key identifier: 4E:CB:02:7C:80:0B:A8:E8:4E:85:69:E7:A0:28:12:67:39:AB:54:AC
Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Certificate serial: 010D0C9F43285848451584DBDFBF03AFA34AED00
Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 32524
IP address blocks: 72.21.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:84:db:df:bf:03:af:a3:4a:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=34d675ce-0deb-4c4b-b3e5-1ee220caf9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:38:1a:11:a2:f7:2c:ee:90:76:b3:2a:60:
f1:53:c0:af:ac:13:af:a8:b7:1b:a1:29:d8:89:fd:
a9:17:ec:b6:b6:e5:d9:8b:79:09:e0:e6:d6:c2:53:
74:0b:50:18:e5:98:ac:4f:98:99:e4:5e:1b:33:86:
6e:e5:48:e7:97:5e:12:84:64:a2:4c:e0:28:21:9b:
6c:aa:19:10:6c:06:1e:4d:88:ae:22:37:ee:59:c6:
cb:e7:0c:18:16:9d:73:b6:86:ad:3b:ed:7a:e8:87:
b3:be:42:04:ce:0a:49:17:b0:61:6a:7f:83:92:0a:
78:72:c9:10:1e:1f:24:9f:3a:cd:5f:d1:26:94:10:
a2:41:b9:dd:c8:03:6c:a2:c7:1f:a5:c5:37:5f:9d:
1f:2b:56:76:2f:ae:e0:9c:e3:20:91:05:8d:e6:69:
78:6d:1c:ae:42:b7:2e:1f:e7:47:3d:49:3e:83:dd:
d6:f6:ff:40:f5:24:b6:85:fd:62:81:95:9c:71:17:
59:18:43:f2:9c:ab:32:d1:d8:8d:8b:ed:35:b0:ce:
46:34:89:a3:7d:4d:16:cc:c0:ba:7f:4d:ef:63:12:
74:5d:cc:a9:29:98:28:8b:36:5a:47:1b:a4:ef:d5:
66:69:7c:27:78:78:79:eb:89:b4:e5:d9:30:43:b3:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:02:7C:80:0B:A8:E8:4E:85:69:E7:A0:28:12:67:39:AB:54:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl
X509v3 Authority Key Identifier:
keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4b:50:88:71:95:02:1c:00:38:fa:f4:01:a2:eb:b4:41:56:
cb:d0:d3:c6:05:78:f4:e4:f3:b9:16:e2:fa:53:fd:19:8a:b8:
43:67:92:66:a7:e6:c6:93:47:58:d0:d3:e5:2f:a7:70:91:83:
6a:68:72:f9:c0:96:4a:05:a1:59:f1:59:2d:a1:29:25:0d:54:
b4:d1:2c:90:54:be:48:c4:f2:3f:0d:c5:6f:04:7b:d7:7e:99:
ad:39:e4:39:8b:83:74:06:aa:54:ce:a9:9d:49:54:ca:37:d7:
28:ca:ba:1c:d2:1c:cf:40:a6:84:31:f1:e2:0c:63:83:6b:8d:
15:e2:be:eb:e0:9b:28:e6:3f:7b:25:e9:22:65:fb:e2:f7:80:
86:76:30:cf:4d:13:50:85:d6:24:b2:3e:19:5b:4d:7a:74:83:
8b:e0:92:85:79:80:fa:14:1f:3b:72:62:1e:60:d8:6f:7f:78:
9a:dd:c3:f5:4b:ff:75:e3:c4:89:1b:09:7f:6c:a6:eb:31:3a:
23:fc:0f:a5:93:11:ca:d8:c5:20:56:65:0e:6c:88:d9:fb:ba:
24:0a:b9:87:0c:90:b1:51:ac:b3:fb:60:65:f3:60:c3:44:64:
30:eb:cb:2c:30:f7:fe:8b:5b:b9:01:b2:ed:44:4c:f3:65:0a:
1d:51:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:11 2025 by rpki-client