Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa
File: 9859d862-4d98-35a1-89c4-8fbd5124fac9.roa (raw, json)
Hash identifier: RQ0DU0/qSkiD8bDCTM1/Zz/qMw/vgtNf+AQWTYOuUXQ=
Subject key identifier: 84:0B:8F:23:59:DB:1F:BC:97:DD:15:ED:FF:58:DE:C3:72:7E:A8:B9
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847DC64AE6A2A5D43B43893A880
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 11090
IP address blocks: 72.35.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:ae:6a:2a:5d:43:b4:38:93:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=c39b9981-af0f-4c67-95c3-fbecee48dc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:65:5e:f3:51:d0:b0:32:15:06:aa:cc:14:
91:7e:dc:10:1a:3d:11:b6:c4:d1:dd:6f:41:56:f1:
24:a1:33:19:9a:8e:d6:ae:d8:e5:76:84:f8:20:0a:
fc:a5:3e:71:a9:c0:9e:f4:75:13:bc:b4:e9:f0:c9:
74:47:7b:92:46:a8:4a:48:7a:88:32:44:c0:59:e0:
dd:74:1f:c5:0e:61:2c:1f:6f:33:ae:59:fc:ee:1e:
36:a5:a9:27:85:7d:4d:23:4e:16:5c:29:3d:77:48:
da:9f:89:b1:1b:ec:3c:5e:a4:0f:f3:eb:af:8d:2e:
0d:3d:03:c2:f7:87:29:5c:ae:9b:92:f8:7c:3b:c6:
6d:ac:59:02:8c:e7:b6:8e:05:a7:e5:15:a4:7c:e0:
8e:bc:b2:fa:b7:9b:90:65:92:4a:08:b8:5f:23:9b:
f4:51:6b:a7:83:20:0f:e3:be:00:8d:e9:1b:d1:d1:
bc:bc:85:ba:d5:ef:78:9a:b5:9b:36:30:a9:b7:26:
e4:1b:3f:31:84:fc:9b:04:de:8a:9a:b6:91:77:1f:
b8:4d:f9:e9:af:43:7b:87:72:ff:45:e0:43:50:96:
a9:58:1b:41:d7:a7:7a:0a:d4:24:17:37:36:e4:a8:
c8:ed:ed:88:3f:75:65:dc:aa:af:22:0c:71:d6:44:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:8F:23:59:DB:1F:BC:97:DD:15:ED:FF:58:DE:C3:72:7E:A8:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
72.35.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:85:b5:f0:be:af:fe:e0:22:45:35:27:d6:3e:5a:97:7c:9e:
c5:0f:89:f0:85:f1:92:5c:94:62:54:88:50:d5:50:cb:62:93:
d1:27:c9:0a:1d:48:4d:85:4d:4a:31:83:67:8b:da:cf:c3:47:
7a:3d:4e:e3:89:9a:03:96:07:34:b8:c8:89:6c:a6:c9:26:08:
9b:3c:ed:03:ab:4d:f2:ee:4c:91:89:36:6e:23:ef:ed:28:94:
d5:a6:b1:43:a0:bc:68:44:e3:ee:92:c4:0e:71:ca:21:95:72:
50:ba:e4:17:6f:a0:df:95:f1:de:02:55:29:97:14:fb:f5:8a:
9b:fb:72:36:ca:b0:b8:71:b2:d4:f9:85:04:9c:6b:4c:2d:bf:
d7:b5:f6:95:f5:5e:a0:36:85:63:5f:ae:df:69:38:29:a7:42:
5f:8d:80:25:4f:c6:2c:bc:26:ae:56:1e:eb:6a:45:b6:68:3b:
06:f2:77:51:90:07:f0:43:fa:0c:84:5e:2d:6a:6f:c8:1c:4e:
a7:16:3d:e7:49:e3:bd:1b:3e:95:98:4b:ac:5b:d9:ff:0d:37:
86:14:c4:8e:5c:65:2a:18:dc:a5:b4:31:a4:c3:1f:5d:d6:6d:
74:e5:e7:fa:94:da:fc:ee:2d:e9:26:b5:14:fe:a3:2b:0a:cb:
67:8e:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:22:56 2025 by rpki-client