Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa
File: 4a608b70-0ee1-38d2-88fd-635c59893e2f.roa (raw, json)
Hash identifier: JNBXRpOdkw5OR6jqAzdZgaiRVD8BmL0sk8OShu6I11g=
Subject key identifier: 3D:12:41:D7:BF:75:8A:D2:99:5E:D8:60:0A:CC:6D:AE:8B:1A:33:34
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858482D5A9C329AA13DD15054BF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 22773
IP address blocks: 72.214.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:9c:32:9a:a1:3d:d1:50:54:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=734d67d1-7d4d-4242-afa2-5c9146444504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9d:86:8b:ef:6e:17:74:ea:eb:b7:04:e7:
98:06:1d:52:ca:1f:df:d2:01:2e:71:8e:4e:58:3e:
22:c2:63:66:b4:47:9a:d6:ed:af:37:33:2c:eb:db:
17:7f:8c:40:92:0f:b9:19:a6:a2:1b:7b:82:25:96:
b2:92:65:49:22:14:6d:80:ac:3f:8a:e6:b3:38:05:
0a:f3:2b:9e:17:5b:9d:f7:d1:11:ee:db:d8:78:7e:
de:bc:a0:58:6a:4c:c5:d6:73:a6:94:fb:3b:3e:ca:
e8:45:b4:bb:98:a7:7a:ef:21:b9:41:82:f3:58:f8:
36:c1:de:8a:9c:18:80:21:16:f6:bb:f0:1a:d5:20:
70:9f:94:c0:50:c7:b3:d4:91:27:e8:83:82:9a:eb:
6d:57:74:20:f3:ba:9f:a3:c8:49:1f:51:e9:ba:fb:
5b:ec:d9:35:1f:d1:09:c1:90:4b:43:62:df:df:fc:
eb:b0:a9:87:1d:88:56:f3:9c:30:18:09:f8:0f:d3:
aa:5a:9d:74:b2:3d:b1:19:7e:47:07:18:16:8d:a5:
38:35:31:be:73:e1:c5:0a:84:04:33:c7:77:c6:6c:
e4:ed:30:5e:1e:85:be:e9:29:a3:c3:24:2d:4c:7a:
4a:be:10:bf:70:57:87:a7:aa:5f:6b:f6:60:58:5c:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:41:D7:BF:75:8A:D2:99:5E:D8:60:0A:CC:6D:AE:8B:1A:33:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a608b70-0ee1-38d2-88fd-635c59893e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.214.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:5f:a7:55:86:18:27:8f:79:a7:a6:25:48:eb:2c:90:ab:8d:
70:f0:7f:f6:d2:aa:27:7a:80:73:44:9b:99:09:d0:91:c8:84:
29:a6:ba:11:53:50:83:3b:3a:33:23:cc:01:2a:fe:9c:99:7c:
35:17:78:3a:39:72:4f:82:c1:92:0e:fe:0d:48:13:48:8f:b1:
3d:ed:83:80:8e:d9:36:6e:71:74:1f:c6:5f:e7:2e:ad:55:1f:
ce:5d:4c:bb:fc:21:ab:04:3f:08:16:2b:62:ac:f5:c2:2b:f6:
0c:e4:bc:93:37:fa:a6:e9:3d:d1:ca:d2:cd:80:f3:ea:b7:0f:
da:e5:d4:1f:b4:e6:34:b4:cd:a5:0e:a7:52:50:f0:93:a0:19:
f9:5d:03:36:bb:97:48:47:75:f0:cd:4c:f1:d3:24:6d:06:52:
d3:66:34:06:f3:0e:58:74:97:50:23:24:4e:85:58:5a:d9:99:
d5:31:ea:6a:9b:e7:6c:8b:3d:b7:e4:7b:ea:64:bf:0d:c4:87:
46:7a:28:f4:44:a7:28:6c:ee:fa:66:80:52:7e:87:10:6b:06:
f7:a2:00:44:ee:71:4f:5b:d8:d6:b7:d1:7b:39:12:7e:af:23:
a4:39:41:b3:92:81:10:9c:26:e8:aa:13:cf:33:dd:31:8a:b7:
4b:e9:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:15:17 2025 by rpki-client