Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json)
Hash identifier: WflufMVVcWEsM3iZfBCInEfh0kbAQORRYJvIIkQzltE=
Subject key identifier: EC:BC:A7:0F:B6:FE:B8:D0:25:3A:B4:41:57:CE:52:81:2F:3F:22:E9
Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04
Certificate serial: 010D0C9F432858484515843797EA28BFD27FDEA0
Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 9009
IP address blocks: 72.18.92.0/24 maxlen: 24
72.18.93.0/24 maxlen: 24
72.18.94.0/24 maxlen: 24
72.18.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:84:37:97:ea:28:bf:d2:7f:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=f7fedb9c-7555-450e-88e2-70b05dacd7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:19:39:30:79:ef:c3:8d:2f:bb:34:55:e7:
af:4d:ea:63:56:f0:27:5c:fd:f9:6d:4a:63:17:4c:
95:92:f8:eb:21:ce:2a:5b:be:ed:6a:39:15:c2:7a:
c1:bc:6a:fe:95:0f:7e:ed:d9:fa:06:a2:6c:25:4c:
e6:70:4c:7b:e1:2f:59:07:c1:7f:c2:d0:85:12:4e:
e7:d3:ca:7e:62:5f:75:ac:72:c7:fe:b6:25:66:ba:
12:73:a5:92:48:fd:ae:32:52:21:c3:9f:ef:e4:82:
2c:47:d3:5f:61:06:ea:5e:4b:e0:e2:b9:83:e7:d4:
98:93:57:22:00:e8:74:7f:13:b5:af:f8:0e:b7:01:
37:c9:9a:2f:94:e9:10:f7:25:31:e1:d1:e4:92:54:
7f:36:43:ac:b3:5d:99:6f:50:9d:b8:d5:cc:9c:9b:
00:aa:21:2a:f9:b7:63:70:9f:c2:bc:02:b9:50:12:
e9:8d:bd:9a:71:69:c1:8b:db:a0:4f:c9:b8:2f:44:
0f:1b:64:db:d0:81:a5:b4:9c:b4:3e:ee:38:95:c9:
7c:53:a0:80:a2:37:35:4e:ab:73:14:ca:2d:8c:d1:
93:fd:4a:0d:18:dc:d3:7c:e1:b6:d4:cf:b5:2d:7a:
14:8e:41:14:af:f6:1e:f0:07:05:d5:f2:db:7d:17:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:A7:0F:B6:FE:B8:D0:25:3A:B4:41:57:CE:52:81:2F:3F:22:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl
X509v3 Authority Key Identifier:
keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ea:70:ca:f1:50:c3:af:d4:1c:ec:75:f3:62:26:9e:78:be:
60:3e:db:b6:24:08:1d:96:0b:ad:4a:8a:09:b0:4b:41:72:94:
2e:6a:fb:aa:2a:1c:a4:ab:f2:2d:c7:42:d3:97:66:f6:46:90:
23:b9:9a:8e:75:bd:db:25:dc:9b:ad:d6:ba:0d:aa:f5:31:96:
a7:05:d1:bb:a1:f9:62:af:fa:79:35:f4:5c:76:f6:77:b5:8a:
8a:e6:d6:0f:15:01:1d:b4:4c:b0:3b:ad:93:6c:d9:bc:ab:a6:
86:f3:2b:5d:50:31:d0:79:a3:81:a9:86:36:ab:37:17:e1:c8:
8a:d7:37:b0:6d:f6:1f:d1:65:5d:76:00:c0:ab:12:d5:4c:79:
78:1e:b2:81:e6:2e:c7:61:6c:3c:c8:34:e2:a9:79:9a:63:d6:
2b:a7:da:46:04:b7:b0:b1:91:b4:56:3e:51:fe:01:76:7f:b5:
e1:ac:f3:1d:c8:04:f3:b2:fb:6d:03:b7:d2:9a:cb:b6:76:e9:
27:7f:fb:33:0c:15:25:65:88:28:0e:50:05:f9:9a:52:d0:b6:
24:36:13:ac:cf:d3:00:02:e8:1d:33:74:53:f7:5a:14:a8:00:
75:9e:91:38:45:84:21:fc:f1:2f:c1:80:56:96:18:45:89:92:
4a:e0:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:45:51 2025 by rpki-client