Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/22b993f9-2550-3f60-b428-66aba66f5abd.roa
File: 22b993f9-2550-3f60-b428-66aba66f5abd.roa (raw, json)
Hash identifier: MpUyztO05NR+XKtuaUTcLBIiCJkmngmjMUdbf66gGXs=
Subject key identifier: 8F:7D:4A:6B:42:D0:DD:8D:D6:F2:EE:E3:7B:5F:AB:56:35:60:41:40
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584802150DBE040F6D5CF3025A80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/22b993f9-2550-3f60-b428-66aba66f5abd.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 13536
IP address blocks: 72.12.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0d:be:04:0f:6d:5c:f3:02:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=bf293e39-f379-4f97-b723-3ad73c4ccf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:20:ca:e5:74:46:43:5b:eb:6a:e2:37:e9:
d4:d9:14:d2:39:71:b5:8d:96:a1:bf:7f:ae:c2:e1:
fc:79:6b:c4:96:e8:d1:3a:b8:69:dd:8c:60:62:19:
e8:ae:90:ab:e0:fe:86:45:6a:56:2e:17:f8:07:d9:
13:5c:e4:21:a1:fa:66:b7:d2:e0:2f:2c:02:d9:6b:
23:24:0d:7a:d0:61:a2:07:28:f8:ca:c0:2d:62:71:
09:fd:53:38:f1:44:92:18:ed:ff:cc:de:05:5a:20:
dd:5b:a8:7e:69:6e:8e:6d:4f:08:3d:5f:2a:f0:c1:
39:33:66:88:40:5d:c4:d6:8c:ef:b2:05:03:d1:5b:
35:cb:3d:01:46:37:64:57:d9:ba:38:f9:5e:8f:37:
88:33:7a:cd:58:9e:0a:0f:ab:81:5e:37:a3:cd:65:
74:4f:9b:e8:6b:d2:c5:cd:80:4c:33:50:42:f4:62:
33:10:f0:d7:24:50:d9:30:55:7a:4c:b8:64:cc:9e:
4e:3d:5c:3a:55:fe:65:04:08:80:1c:56:16:24:18:
66:3d:12:01:86:0c:95:09:46:fe:bc:a3:bc:22:13:
1e:76:93:ec:3b:5d:e5:4f:06:21:74:e2:d4:e9:91:
a4:c9:c2:3e:04:21:99:c1:3a:27:b0:8f:84:be:67:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:4A:6B:42:D0:DD:8D:D6:F2:EE:E3:7B:5F:AB:56:35:60:41:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/22b993f9-2550-3f60-b428-66aba66f5abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.12.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b6:dc:a7:3e:af:dc:2d:8c:c4:1b:1b:80:af:64:d4:f7:32:
2f:d5:0d:89:d6:25:ab:2b:f3:86:d4:53:7f:6f:4a:2b:c3:bd:
85:42:07:fb:cb:23:c4:6e:ca:04:cc:d0:2b:74:bd:ec:a0:94:
fc:a6:5f:9c:e8:83:f1:d0:47:6a:2c:12:c5:62:4d:44:9a:08:
06:59:c9:3b:37:af:f5:cd:a5:4f:fc:c7:80:c3:9d:a0:bb:98:
89:1d:95:f2:bb:6c:9e:6e:18:42:f2:70:3b:7e:f9:0b:3e:17:
34:a9:9e:cd:5d:8f:2a:f1:d8:92:8c:94:71:42:75:1c:a7:ff:
53:d1:06:98:8c:30:18:1d:28:82:3a:58:0b:98:93:f6:64:b1:
13:12:85:e3:41:90:6c:31:21:64:4c:b7:80:7d:20:fc:22:84:
d4:55:ab:48:34:19:d5:d1:ad:dc:da:ee:82:46:31:0a:79:55:
2f:92:b9:7a:ca:3e:fd:05:a0:f7:c3:aa:72:43:cc:9a:69:98:
50:06:b7:b8:0b:2f:31:fc:f2:74:ee:5c:48:9c:56:75:34:f2:
e4:e8:ef:39:ed:25:d1:33:58:34:b4:72:24:ed:68:34:e3:9e:
ec:e2:fa:b5:80:84:17:e4:c0:01:7f:20:43:c5:f5:73:37:a8:
a0:1e:28:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:24 2025 by rpki-client