Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc4cd29-7a3f-314e-af3f-7ff2ff0a53e7.roa
File: 1dc4cd29-7a3f-314e-af3f-7ff2ff0a53e7.roa (raw, json)
Hash identifier: XgEZP4qPPtDhgk25VbdSgXGuhXTG0RI6e7OqEB5IP7w=
Subject key identifier: 9F:E3:CE:00:A7:B0:04:27:9E:B8:85:29:85:3E:4C:A8:C1:78:0F:09
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858484AAAE749FF876939F39F4800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc4cd29-7a3f-314e-af3f-7ff2ff0a53e7.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 62957
IP address blocks: 72.215.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e7:49:ff:87:69:39:f3:9f:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=dc84847b-58d8-4061-a4b1-4590cad08c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:97:f8:85:c3:cc:23:97:a0:10:0b:be:a4:
e0:2d:81:76:5d:d8:6c:ea:02:b9:2e:d1:42:f4:5c:
da:0a:3b:ce:80:9d:d3:56:83:98:7d:8e:2b:59:07:
9e:bd:04:de:5b:b3:17:62:24:35:20:42:45:dd:26:
da:12:de:fd:75:4a:a5:7e:30:2b:61:ef:97:8f:ca:
6a:62:d4:69:ea:4e:e0:74:9a:d1:4d:ed:36:31:94:
3b:c8:89:78:ca:8f:9a:cc:60:67:52:4e:74:96:79:
24:e1:0b:bf:0e:ca:f7:18:3e:b8:c1:5e:f0:44:e0:
8a:33:51:9e:04:f3:4e:2e:93:e9:07:67:21:e1:c8:
6e:a8:d1:77:a4:4a:7b:dc:b1:69:78:56:92:89:ed:
bc:e7:e1:8f:f7:0c:96:ee:25:6a:82:45:ba:f3:c0:
ae:0f:e4:bb:d2:48:83:53:56:27:53:31:bd:37:5a:
9d:d8:97:d5:77:43:7e:ce:06:1d:85:c3:08:ae:c0:
e6:e5:f8:da:6e:85:9e:94:d3:f4:f1:58:5a:14:ec:
c9:20:ca:f6:3a:04:eb:4f:80:ae:9e:84:e6:01:c0:
ed:6e:e8:27:dd:78:de:6e:57:b6:19:f1:84:c0:09:
8e:ce:af:1a:b2:b4:f4:24:96:41:68:10:9f:46:4f:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:CE:00:A7:B0:04:27:9E:B8:85:29:85:3E:4C:A8:C1:78:0F:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dc4cd29-7a3f-314e-af3f-7ff2ff0a53e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.215.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d2:68:48:f3:17:ca:1f:a2:21:fc:5b:d9:90:3b:0c:48:ae:
e8:be:7d:b7:31:0c:a7:ad:68:a1:70:6d:13:df:92:fc:53:85:
e2:07:dc:67:7a:ab:30:14:f2:7f:4a:6f:a5:41:61:b2:aa:20:
36:91:6e:34:db:07:fd:ba:5f:c3:b1:1a:c9:01:67:69:04:12:
42:2f:5f:56:78:e4:1b:e2:61:68:bd:54:71:a7:20:33:b1:e9:
7d:82:05:23:24:93:4e:95:e3:93:c4:ed:cf:c5:e8:ee:77:13:
2d:bc:13:27:af:7f:65:ba:fd:51:d3:8d:2a:27:8f:84:b3:0b:
5c:f4:35:3d:b5:23:6c:5b:d7:e7:14:c9:11:cb:ec:b6:08:70:
50:3d:a0:7b:56:45:f2:a6:df:45:4d:1e:03:f0:41:4e:00:2c:
01:3c:f1:9c:67:ce:df:2e:fc:b8:2a:4d:1b:c3:71:59:dc:28:
88:37:ce:e3:92:0e:02:93:20:fb:f7:9f:a0:97:64:22:d5:b0:
62:f2:d6:1f:a3:5e:4a:38:15:4b:b7:9b:8d:89:7f:47:86:7a:
4d:41:98:9b:6e:d7:e3:9e:ee:ff:65:35:aa:12:6d:be:01:46:
24:20:ff:c3:0d:6e:5a:55:54:cb:5f:ee:4f:36:47:4f:3f:6f:
cb:78:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:03:43 2025 by rpki-client