Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json)
Hash identifier: H47/QDM0PJAB41VoEn8KXRrbTksrAVhTISFFMexlmrA=
Subject key identifier: B3:65:E0:B8:DD:64:95:58:6F:E5:27:C4:A4:9A:F0:FB:7F:C5:4A:3C
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584839EACBDAD012AF19C76F0400
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 22765
IP address blocks: 72.20.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cb:da:d0:12:af:19:c7:6f:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=7f3073b3-347e-483f-b22a-e6bd95a0b1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:35:45:d7:38:1c:55:6f:20:4f:7a:e9:83:
11:50:c7:59:76:ac:4f:27:9c:c6:2b:af:e6:1d:d8:
a6:64:ba:ab:f0:79:33:d9:47:ba:23:29:72:48:0a:
c8:15:48:c8:96:0a:64:18:f8:07:69:33:31:21:aa:
07:29:34:d9:32:61:66:29:df:5e:ff:b0:6d:a7:80:
0b:2a:c2:60:03:3f:b7:ae:a1:05:14:99:c6:7f:08:
35:5d:f0:9f:4c:13:fd:c9:40:62:df:93:7f:32:c2:
3a:5c:83:04:8f:15:65:e9:1d:f6:cc:76:1b:ab:4c:
82:c4:97:e3:d5:03:66:01:fe:0b:0c:42:4a:3f:5e:
8e:ea:49:52:18:ca:f3:1d:d4:f5:80:1c:bb:90:a5:
93:78:69:49:44:45:6c:be:70:ea:f4:7d:d2:3c:78:
f7:ee:b0:22:a0:3a:a7:be:75:ac:ed:95:d1:43:3a:
6d:61:d2:3d:ca:3d:2a:6a:97:91:a1:91:70:63:ff:
0b:10:71:92:fb:39:5e:e2:b2:30:7c:94:3d:3a:d5:
86:92:63:0c:2d:3e:ed:6f:ff:b4:ba:dd:f8:25:9e:
78:a6:22:df:6b:ef:15:76:9a:27:41:c0:de:45:fa:
93:02:11:36:df:65:91:22:ba:78:5b:c7:41:d6:66:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:E0:B8:DD:64:95:58:6F:E5:27:C4:A4:9A:F0:FB:7F:C5:4A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:fb:0c:54:ba:87:ad:80:2c:f1:14:96:87:f8:ce:ef:11:65:
1f:11:81:94:69:08:36:c4:a3:e5:1b:37:e2:64:a3:73:a8:7c:
69:7b:36:58:ee:7e:4d:dd:aa:60:05:83:68:39:d4:39:85:57:
c4:1e:95:8d:6a:d2:81:be:6e:01:bc:c7:eb:68:2a:6b:12:53:
d2:11:e1:b8:cf:4b:bc:cc:aa:8f:8a:69:cb:95:de:80:49:e9:
5b:0e:f9:f4:a0:5d:a7:12:96:58:bc:2e:71:77:25:24:dd:19:
fc:b4:42:c3:b4:d8:86:8e:d4:16:03:5b:26:79:5c:ca:92:ac:
28:2a:e0:51:6a:c1:f3:f1:d9:89:0e:f7:fe:f2:7d:d9:85:d6:
d2:aa:01:3a:cd:47:d5:92:c5:f1:f7:87:9f:d4:29:aa:06:5e:
33:e7:b4:97:96:ee:b3:98:74:24:21:1f:79:92:5b:ba:4e:9a:
4e:ac:af:31:ca:4f:bb:f5:47:58:36:6a:22:60:0f:9e:4f:af:
f3:d2:3b:01:73:99:0c:df:e7:83:6e:7c:ca:4d:4f:51:93:09:
0f:c8:23:1d:f4:ca:d4:02:29:bd:19:5d:61:2d:aa:dd:a5:39:
9e:ac:b1:e6:72:5b:a7:e1:c5:d0:70:9a:bf:49:bb:e7:6c:e4:
89:45:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:19 2025 by rpki-client