Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4e20c43e-548d-35db-8141-9a63f74610f8.roa
File: 4e20c43e-548d-35db-8141-9a63f74610f8.roa (raw, json)
Hash identifier: Wbn0Fzv+bgiQ2Vc8pUTHg7AJRbPWAf/gFOPcFUJj7jk=
Subject key identifier: BE:76:4E:BD:A4:39:CC:18:0E:D3:DC:89:04:05:87:13:2E:A8:ED:41
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584827C54D5A5864CDEA8DDAA980
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4e20c43e-548d-35db-8141-9a63f74610f8.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11693
IP address blocks: 72.15.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4d:5a:58:64:cd:ea:8d:da:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=53a56f10-a52c-49b7-916d-b7d342888183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f2:cf:d2:a9:38:05:fd:b3:f2:9a:ad:24:a7:
cb:2c:12:93:3a:e2:77:cb:3d:02:05:c3:c0:f6:67:
95:01:8a:f5:fb:d3:c3:4d:c4:fc:fb:9b:4f:ef:51:
e1:8a:b2:d6:5b:32:28:2d:25:4d:b3:3e:0c:e7:b1:
72:1b:bc:42:f0:da:f5:ef:c9:4f:4c:27:56:e3:cd:
db:f2:c8:04:68:79:99:41:02:4a:b3:17:60:2f:f9:
fa:b7:0b:97:3f:91:fe:e1:b9:0c:5c:bc:35:23:d3:
50:fe:92:63:ec:8a:33:0e:05:32:34:7b:8e:9b:7a:
72:6b:2c:9c:21:f6:e9:d2:19:8f:4b:10:28:77:48:
6a:81:ae:94:aa:29:78:4c:66:99:46:ce:0e:74:c5:
33:93:92:26:13:5f:31:11:96:39:00:c7:dd:f3:ac:
b0:69:c6:22:12:9e:02:43:4a:8b:8f:6c:75:d3:99:
5f:e9:90:8d:ea:07:92:14:51:d8:c5:42:08:4b:6b:
60:da:af:d1:78:2e:f8:b3:66:0a:7b:87:01:72:e1:
69:25:ba:11:70:56:0e:09:4a:df:f9:b2:3b:d1:bb:
03:e1:e5:73:7a:52:69:7f:64:19:dc:b9:69:eb:16:
60:df:00:a5:fa:9b:57:39:c5:ad:2d:79:69:96:10:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:4E:BD:A4:39:CC:18:0E:D3:DC:89:04:05:87:13:2E:A8:ED:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4e20c43e-548d-35db-8141-9a63f74610f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
72.15.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:06:92:57:14:48:f9:50:50:36:3c:87:ea:eb:ab:f3:89:e4:
97:0b:e2:5d:a1:c7:ec:fa:12:08:d6:c7:48:d6:b9:73:dc:97:
40:e4:21:5c:1e:64:03:01:de:2d:43:31:8c:84:5c:76:36:81:
34:54:fd:d0:a5:e0:c4:12:02:79:5d:07:e2:60:75:f3:76:19:
bc:e7:f5:4b:a9:39:41:21:92:6e:66:6f:4d:58:45:3f:53:17:
c9:c4:20:2b:d4:f8:1b:8c:d3:e1:ed:38:08:6a:4f:6c:d5:14:
b2:d7:1c:4b:72:47:98:f8:28:26:03:71:f8:45:8f:db:d2:fd:
1d:fe:a2:90:a8:5f:29:4c:d2:dd:b5:62:26:ee:eb:0f:ba:55:
70:58:46:9b:49:1a:78:cd:e9:34:f4:d3:b1:08:0f:af:51:e0:
08:a3:a7:97:ef:31:9d:fd:cd:fd:65:04:6c:b8:b9:07:e1:ee:
0a:12:2c:f0:69:4f:51:cf:8a:5b:f9:de:65:82:a9:c8:a1:f3:
a8:1a:62:d3:c7:c9:42:a1:b8:7f:24:31:91:87:ac:46:54:12:
6d:2d:ff:76:7f:88:7f:90:fd:22:f6:ca:27:e4:e2:4a:dc:21:
35:44:b8:97:1c:46:20:bf:65:b4:22:6e:46:e5:ce:db:7e:3f:
41:40:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:26:59 2025 by rpki-client