Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
File: 66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json)
Hash identifier: xcVPGna7i7aOVU00vh2LaXfTeVrwEOvUA+2jUBDyEH0=
Subject key identifier: B8:73:E5:DA:EE:47:0C:76:4C:59:4C:87:44:C3:C9:19:0E:6B:8F:FB
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847DC64AE4802BA2DC89FDB4580
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 11090
IP address blocks: 72.35.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:ae:48:02:ba:2d:c8:9f:db:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=c216d57c-cb00-410c-9010-174930799bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:ba:d6:c0:4c:62:46:70:7b:79:34:65:a2:
6f:0b:af:02:ee:0f:d2:74:43:e4:76:cf:c2:c2:46:
6d:46:84:3d:24:d3:7b:30:0c:d6:f6:83:3c:00:eb:
83:ed:cf:75:03:44:b8:db:fa:08:5f:11:2d:96:4b:
9e:1d:47:f2:fe:a2:ef:4f:12:3f:08:19:ce:a8:45:
fb:05:18:5d:21:e0:b8:31:21:ac:15:b0:b7:c1:1f:
f8:d9:ba:40:16:f5:27:e6:81:a8:4b:a3:c1:8a:54:
23:38:3a:8e:89:5d:63:2d:a3:bb:42:87:0f:e2:fa:
69:44:9f:c2:3d:e9:be:45:52:6c:ff:15:63:3e:b7:
f0:49:6d:c1:7b:9b:02:9a:69:1a:25:8d:58:35:eb:
41:69:bb:7d:5a:0f:97:14:66:02:fb:27:bd:f0:f9:
a8:eb:e0:5b:8f:d6:77:54:4d:55:f5:69:29:67:f7:
f6:db:51:85:b3:66:c4:17:3b:c4:bb:51:c4:78:34:
22:a2:38:9f:af:2a:09:96:e8:d0:8b:23:d9:91:02:
52:73:01:de:e0:c9:a8:89:2e:ad:e2:1e:34:ea:fb:
ae:7e:3a:28:66:84:41:d3:a2:0d:1d:0a:59:6e:92:
67:d6:d9:a4:8a:37:6c:1e:a3:ca:5f:16:63:f0:c5:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:73:E5:DA:EE:47:0C:76:4C:59:4C:87:44:C3:C9:19:0E:6B:8F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:97:18:2b:69:a6:d1:f0:94:e9:60:05:8a:b2:04:16:b5:32:
88:74:d2:dd:45:dc:5f:92:37:12:80:a1:d2:e3:60:d2:7f:09:
2d:de:8f:67:f8:1f:bc:09:79:79:8b:22:b5:67:aa:3c:38:c9:
5d:88:3e:8f:c6:97:1e:a3:8e:a5:1a:67:ef:48:c0:22:0e:f3:
6b:f7:36:f5:63:f4:5e:ab:f4:9a:f2:00:6b:c5:b6:f7:26:ea:
29:cf:53:b4:8d:6e:3c:18:14:0f:0d:eb:12:80:97:e0:41:df:
ad:10:4d:aa:53:e2:c9:e8:71:2f:6c:e4:55:8f:e1:19:cd:7c:
96:92:ce:64:b9:7e:20:6c:5a:19:f5:71:d4:bf:47:c7:dd:a8:
62:17:41:18:10:7a:c5:d2:2d:41:13:95:e5:fd:59:f8:b5:38:
21:21:c3:6c:07:a0:63:5c:c5:1e:26:83:ec:a1:bb:df:51:f9:
16:84:95:6d:39:e6:53:2b:ca:ae:f0:ca:5f:1f:be:a2:30:a4:
d2:29:6b:ee:be:cc:3e:2f:d5:1d:e1:ef:8c:52:eb:b8:a8:66:
f4:83:ce:bd:1f:65:d1:8e:bc:59:48:6d:cb:3f:bb:5a:2b:bf:
36:6e:9f:9a:b8:b9:fc:0e:93:f9:7b:13:0f:f9:2a:e1:14:42:
75:a7:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:26:13 2025 by rpki-client