Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e08a4caa-65a2-3ce1-9cda-709fd7a6d56d.roa
File: e08a4caa-65a2-3ce1-9cda-709fd7a6d56d.roa (raw, json)
Hash identifier: bI8SUa9CSqZ6OfpcLenFRcEdEcPP/QEqnuWClwZu7tY=
Subject key identifier: E7:77:49:C8:1A:2A:DB:6F:99:E5:1E:91:5E:B4:4D:82:47:CE:70:5A
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848269D9A52C7456AFECC87DB00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e08a4caa-65a2-3ce1-9cda-709fd7a6d56d.roa
Signing time: Mon 09 Dec 2024 16:05:09 +0000
ROA not before: Mon 09 Dec 2024 16:05:09 +0000
ROA not after: Sun 09 Mar 2025 15:05:09 +0000
asID: 19955
IP address blocks: 72.10.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:9d:9a:52:c7:45:6a:fe:cc:87:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 9 16:05:09 2024 GMT
Not After : Mar 9 15:05:09 2025 GMT
Subject: CN=2529439a-9fe9-488e-8d00-4bcc42a915a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:ab:a4:33:82:56:be:b0:65:f0:80:78:2d:
b2:df:c4:a8:f3:14:f4:51:fe:99:b8:4a:d7:68:3f:
5c:3c:b6:0d:a2:ff:23:49:7a:a3:6c:d0:7e:86:66:
f0:7c:b9:4a:73:88:5c:39:d5:ae:7f:a8:54:62:64:
66:97:c7:15:e0:51:dd:ab:2d:b6:f4:0f:36:91:03:
bd:de:e7:b2:0f:60:3a:23:c1:12:68:e4:9a:c4:34:
d5:a2:89:4a:2c:63:4f:6b:5c:c5:b3:51:69:25:da:
94:64:3f:78:c7:d3:f2:bd:45:bd:6f:b2:7b:47:52:
a4:12:e5:27:3e:7d:f7:53:25:b2:ff:1a:f7:83:d6:
2f:0e:c2:f1:52:58:2c:45:d5:55:bb:cb:f3:55:63:
2b:67:1c:b8:2a:6e:09:66:a4:04:88:f3:06:0a:20:
79:00:66:0d:8d:ba:61:09:34:d5:49:72:0d:e5:a2:
94:90:82:66:06:c1:4e:f5:ba:bb:8a:04:18:56:2d:
05:0b:8b:1b:dd:28:56:f1:6d:46:86:69:1b:73:19:
96:9d:33:b7:b9:85:8e:57:91:3c:7a:1a:b4:7a:b4:
84:97:cd:91:03:c3:21:a4:d4:b1:30:7e:33:24:7b:
40:f3:e8:97:9b:43:c2:96:b8:03:4e:1a:1d:d8:e4:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:49:C8:1A:2A:DB:6F:99:E5:1E:91:5E:B4:4D:82:47:CE:70:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e08a4caa-65a2-3ce1-9cda-709fd7a6d56d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8e:13:64:d5:48:96:22:27:23:2e:60:60:13:79:0d:28:97:
af:59:a5:a0:98:dc:e7:b6:c0:af:1c:11:4f:a8:cc:98:44:0e:
fa:d3:db:df:af:6c:32:4e:3a:93:6c:12:ae:c4:f1:31:ad:60:
65:b4:e9:0a:2e:0e:a5:1e:12:50:77:76:96:d3:d9:d9:67:df:
6f:3d:bb:ca:2e:ff:94:13:b0:c7:11:7c:40:08:7c:da:74:9d:
80:1f:4d:be:61:b1:a4:3f:99:69:6b:c8:8f:f3:3c:69:52:b5:
2b:a1:c2:8b:f4:7a:5b:c4:b3:27:87:a0:f5:d7:b4:bc:a8:86:
a5:3e:12:b7:21:02:50:cd:46:ea:5f:7b:ec:ad:35:13:55:93:
1f:e6:5a:9a:dc:cb:6b:d8:03:ae:44:bc:5b:89:4a:59:84:03:
47:a8:01:75:23:46:69:40:25:ca:8c:fa:28:bf:d2:66:a0:e7:
f3:e3:8d:cf:17:1f:81:cf:41:76:2d:b7:18:c8:31:69:0c:63:
39:c3:96:ac:c1:a3:0f:69:2f:be:25:ae:b4:a8:58:6e:71:42:
32:75:46:60:ff:78:1e:a8:b5:2c:b8:d3:fb:e0:33:e3:09:d5:
ca:64:a7:8b:0a:dd:54:af:60:bf:59:b5:b0:fa:4d:de:5b:34:
de:f8:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:10 2025 by rpki-client