Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
File: b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa (raw, json)
Hash identifier: fGQFE55kAY6dNSlghJfVs41PiLuTCnX4nuzpGgJejG0=
Subject key identifier: 2F:68:A7:85:FB:01:59:83:97:0E:41:6F:F9:80:BB:46:B1:1F:AE:B8
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328584839EAB8B7CDE54FD35F6309A8
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 22568
IP address blocks: 72.250.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b8:b7:cd:e5:4f:d3:5f:63:09:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=cf7788bd-29a2-4813-b872-ae0a95eea237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:ee:bf:de:f0:6e:17:d5:c0:ff:a1:f9:b6:
34:07:72:f0:2d:d0:35:2f:d0:89:df:44:56:ec:8d:
fc:e2:b7:f4:31:b8:6e:0f:f2:d1:b2:95:34:73:20:
f2:e1:c0:29:24:bb:f3:66:f6:23:19:cf:09:8b:2d:
53:00:c5:13:82:8f:7e:dc:5d:1b:f5:2d:f7:f6:5a:
42:2f:e4:94:fd:83:9e:5a:a7:ec:ee:aa:f7:56:82:
a5:d3:e7:9c:2c:eb:16:71:54:f1:14:db:ca:42:ea:
5c:60:c6:9e:35:a8:8a:92:b5:e8:e4:3d:e5:76:2f:
9c:ba:94:fe:7e:9f:c0:1f:8c:24:b7:48:c6:0e:3d:
bb:70:00:b8:35:51:6d:80:43:9b:6b:12:48:08:79:
e4:6a:b4:d1:f8:1c:49:45:a5:ca:5e:09:35:d7:c3:
2c:b2:19:5f:40:dd:64:2b:9e:23:47:fc:10:f3:e9:
24:99:7c:45:77:b7:9e:a2:0f:b7:c3:0c:7b:45:48:
3b:89:53:7f:0b:0d:33:37:5e:dd:7c:35:a0:df:fe:
be:cb:b6:f6:66:a6:a3:8a:ce:c5:15:60:22:a7:5c:
af:4a:49:57:da:5b:0b:8e:10:42:49:1a:fb:75:65:
9c:0c:69:68:20:6a:35:f8:5f:e4:d2:a8:ef:6e:49:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:A7:85:FB:01:59:83:97:0E:41:6F:F9:80:BB:46:B1:1F:AE:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:0d:11:e2:ef:95:eb:f3:5d:af:69:dc:3e:87:bc:36:c3:eb:
90:ea:33:df:3f:80:77:e6:a3:8a:98:2c:ce:c1:2f:67:e9:ac:
e0:05:62:9b:69:22:46:f3:b1:af:56:df:97:c9:20:e9:33:7d:
67:c7:69:0a:c0:e5:cb:2a:df:46:18:c5:6e:94:77:d6:82:e4:
c0:5f:fa:ff:f3:f9:31:d4:b2:ca:d4:cf:a0:67:12:9f:6b:22:
17:c7:d9:42:60:74:07:3c:17:5d:ff:12:b7:d4:b8:24:a1:86:
ee:a3:b3:d1:9d:09:84:5e:1d:59:21:d1:c0:88:7f:55:73:22:
4c:3b:66:46:b0:8a:e5:e1:88:e3:74:16:6c:1f:50:e9:f6:7e:
4c:d6:f1:8d:aa:b2:9d:4a:6d:9d:06:55:c2:83:5e:c0:ee:f1:
23:c4:69:f6:ff:a6:65:16:af:02:63:66:3c:6f:b4:90:25:47:
f1:c8:d2:f1:92:27:18:af:b7:ed:7f:41:13:e7:b0:27:b6:6c:
50:f7:de:9e:2e:e5:47:2f:1b:d6:6e:4b:cb:a8:69:f9:70:31:
20:10:79:dc:19:20:c6:42:8d:f7:74:c8:71:44:48:7b:bd:35:
25:86:76:ce:29:db:e7:10:eb:2d:e0:19:78:d1:ad:a6:05:4f:
66:58:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:57:52 2025 by rpki-client