Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
File: 9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa (raw, json)
Hash identifier: sZdSPBHsEjneCLTE0XOUelaZshxINZbBawj+3U23gMw=
Subject key identifier: D0:9A:B6:8E:74:76:66:8B:D1:5A:09:CB:82:80:41:6C:55:6F:57:C4
Certificate issuer: /CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Certificate serial: 010D0C9F4328584882809D27D75D5D1359548480
Authority key identifier: 96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 62648
IP address blocks: 72.22.192.0/21 maxlen: 21
209.172.16.0/22 maxlen: 22
216.245.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9d:27:d7:5d:5d:13:59:54:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0f6a0a-b6c3-4e4a-8941-1736700ded59
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=2d8be11f-9d76-462e-a06f-6e89ffb16a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:a2:eb:3b:dd:71:01:da:11:d5:04:d6:87:
97:cc:2e:ee:9b:21:31:a0:00:d3:9b:13:c6:79:0e:
5c:db:c5:ec:47:40:2e:bf:88:48:18:0f:81:ae:18:
28:11:55:68:ee:10:b9:ba:5f:b8:9a:cb:ee:fa:09:
2c:cc:6c:41:52:4c:42:e8:11:58:0c:a6:d5:75:12:
9d:9a:e1:94:e2:70:28:86:c1:45:63:3f:d7:40:92:
02:06:cb:15:e6:08:43:42:cc:50:cd:17:d0:8a:5c:
79:f6:a5:b5:5c:d4:ab:24:07:f9:61:b0:5c:6d:8c:
8c:ea:90:ab:0d:f3:e8:27:c5:36:3f:fa:c3:1e:1e:
60:bd:04:9d:c5:26:6e:79:21:02:75:a2:0a:4e:69:
ba:c7:05:9e:05:e5:b4:08:11:e6:09:38:c1:2f:72:
12:01:06:4e:93:41:91:ef:14:29:c5:7d:58:84:c4:
87:21:47:af:fe:09:88:1e:d8:5e:ad:c1:18:bc:e4:
b7:9e:55:4d:d7:06:a9:92:dc:97:46:31:e5:d0:aa:
ed:b2:97:80:86:2e:ee:80:56:f9:e7:58:2e:d5:4d:
46:11:69:31:51:6a:e3:7a:7b:df:28:3a:ff:36:76:
bc:e1:4e:ea:41:54:5a:15:9d:1a:c9:73:80:51:07:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:B6:8E:74:76:66:8B:D1:5A:09:CB:82:80:41:6C:55:6F:57:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/9152b08e-e525-38a2-8ed2-62e4227a6fa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59/de0f6a0a-b6c3-4e4a-8941-1736700ded59.crl
X509v3 Authority Key Identifier:
keyid:96:F9:61:45:2A:73:A2:65:6C:FA:AF:DF:F4:F4:3B:07:C1:68:20:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0f6a0a-b6c3-4e4a-8941-1736700ded59.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.192.0/21
209.172.16.0/22
216.245.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:dd:8e:19:ea:38:1a:29:67:53:fa:0f:79:21:52:dd:d1:c3:
a4:6f:9e:f6:ac:ea:66:5a:ab:3c:04:35:1b:9d:2f:ec:d7:f6:
ef:d4:45:25:ba:26:1f:1f:34:95:e2:a3:1c:51:92:40:5c:ba:
4e:20:65:32:4a:9d:19:2a:4c:06:99:66:ca:8a:c3:e0:60:14:
36:3d:e1:11:66:de:6b:a8:3a:c3:4b:60:16:ca:92:0f:f2:2f:
2e:4b:ae:fb:d3:d4:ad:f3:c8:ba:1d:9b:7f:49:47:78:41:62:
21:10:6b:f6:a2:6d:15:56:c0:88:e7:d6:66:46:27:6a:99:7d:
25:b6:1f:9d:57:46:f1:d6:3d:a8:74:57:df:bc:f6:55:fe:00:
b1:96:d9:24:77:75:34:2d:67:34:f1:7e:be:48:5d:62:91:2e:
07:17:76:28:86:f2:ef:15:37:fc:18:24:4f:de:30:4f:25:69:
77:f2:d3:a9:ad:ff:f3:90:c7:2b:52:4f:13:0f:a7:27:a2:fe:
9a:94:6c:ae:70:92:75:50:31:55:2e:70:e6:65:e3:2f:50:e1:
74:dc:45:40:fc:40:32:40:69:a5:b1:a3:3d:68:bd:78:47:69:
97:fc:bc:65:70:56:1a:a4:a6:b0:1b:c4:a9:db:97:16:43:42:
00:63:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:54:36 2025 by rpki-client