Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json)
Hash identifier: 6QsmUFMx4tPA7I6sQqOP3mw9WeHNqGH5HQb9fh97kuY=
Subject key identifier: F1:15:2C:6C:1A:85:6C:73:1C:38:50:26:5A:2D:34:21:B2:56:D3:15
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584839EACBC6BDD2DF21B3DACB80
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 22765
IP address blocks: 72.20.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cb:c6:bd:d2:df:21:b3:da:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=9a0f8819-5558-4e6c-80ee-a5f41f79510f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:1a:d4:49:2d:c2:91:52:73:09:d4:ad:07:
3b:b3:ee:9a:25:7c:66:fa:e3:b1:5b:b3:89:c0:fd:
2d:9f:3b:23:a0:1d:27:23:f1:7e:20:47:e2:46:cc:
8b:e7:da:c3:52:e6:3e:b0:60:00:66:b8:75:0f:57:
20:ab:4a:52:b7:0c:bb:d3:c6:73:88:36:ba:4c:82:
68:ae:ad:c5:33:13:77:bc:b7:5a:51:12:f4:2e:9e:
eb:db:10:b3:99:db:6b:87:68:7e:96:8d:fe:f2:c0:
94:1c:56:4d:4f:a9:59:e5:27:fe:89:f3:92:b9:ae:
a8:72:36:5f:25:ff:2e:c3:cb:2e:86:86:d6:b8:80:
f9:9d:18:55:9e:a5:44:61:cd:57:15:ba:73:97:33:
ac:1e:f4:41:cf:67:af:40:21:cc:00:96:ef:8c:6a:
e5:c7:50:b7:d9:6d:39:59:06:a7:b2:f7:70:8e:43:
0a:2b:8e:c9:ba:a0:b5:ba:99:f7:79:a5:7c:39:56:
c6:56:44:ff:f6:31:70:f6:df:47:e5:48:49:2c:53:
f8:c7:3d:75:03:bc:42:cf:42:0b:16:7f:74:7e:06:
c6:82:05:fe:ff:39:27:fb:14:00:66:c7:bf:ef:08:
17:a5:ab:01:24:3b:9c:16:6f:f4:38:0c:11:a2:54:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:2C:6C:1A:85:6C:73:1C:38:50:26:5A:2D:34:21:B2:56:D3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9f:47:cd:58:23:e9:a0:49:0b:ee:e7:b9:6a:ba:5b:d6:e6:
0f:c2:80:c4:6c:f7:52:f4:ac:87:b8:16:82:05:f4:d2:09:97:
87:d6:8b:c6:4e:4d:f2:16:ac:87:dd:35:44:3a:18:ef:b8:00:
f5:0d:70:a0:b8:cb:c6:fc:b6:b1:ca:04:14:67:bb:3c:47:98:
92:99:5e:ce:0e:d2:96:3c:f6:42:ba:88:b3:2f:46:7d:3d:e8:
de:24:e1:62:b1:10:c2:64:e1:ac:d7:ce:dd:9e:75:76:fd:80:
4c:7d:79:c9:c7:8d:21:e2:30:d8:e1:81:93:dc:6f:a5:25:fe:
a1:7e:e7:90:1e:43:8c:b6:bf:f7:9e:7b:47:db:8e:e7:6c:98:
fb:9b:13:0b:04:03:7a:68:62:ea:45:89:7f:1e:a9:53:fa:9e:
54:9c:d6:83:b0:d9:1f:60:b9:7c:98:c8:02:d4:11:49:3e:4a:
50:2a:75:5f:28:62:42:1a:76:86:61:9c:1b:12:4b:9d:77:aa:
af:18:4d:a8:9e:0c:72:d7:7a:8a:47:aa:ed:cb:98:42:d5:6c:
ed:95:24:6d:47:38:a5:ee:53:bf:c5:dc:b3:74:19:7a:10:c9:
fc:f0:59:85:e9:17:e0:79:66:4e:4b:3c:0f:ba:99:a8:67:59:
af:ad:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:39 2025 by rpki-client