Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
File: 92ac91aa-5a40-302f-b604-4405597dc272.roa (raw, json)
Hash identifier: 3N0Y/63Rzq/daF+vZg0Rvw22Ud9eI2XrNwAo46btg0g=
Subject key identifier: 87:01:5C:84:99:DE:A7:25:21:9F:9B:9F:39:9C:7F:5F:F5:D5:7C:18
Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial: 010D0C9F4328584838855F5ED8FD718493F46A00
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 72.22.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5f:5e:d8:fd:71:84:93:f4:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=2f6203e7-4717-4e61-9841-2afe278c1d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:99:60:c5:a3:1d:d2:fe:6d:4c:a7:8b:f7:
a8:21:dc:d9:85:e0:25:10:22:d9:89:f4:53:67:3c:
31:ff:bb:7c:50:cb:21:0f:35:60:45:ab:13:c5:a1:
2c:8d:61:5c:13:e2:93:4e:d4:76:e4:7b:47:25:6d:
07:fc:2c:fd:2c:27:8a:56:19:d9:52:9f:2f:f3:af:
9e:61:49:16:87:2c:4c:81:ad:3c:28:4c:b5:9d:6b:
af:d3:09:10:a2:70:77:22:4d:56:91:9e:61:42:ff:
e0:b3:66:f2:af:75:1d:07:aa:c5:7a:38:21:04:6c:
fd:b2:0e:a4:e0:d4:81:7b:51:8d:3e:5c:49:52:97:
fe:5a:fd:77:18:d4:aa:81:2c:c4:a8:ab:ac:bf:24:
51:93:7f:b7:07:64:ae:35:e9:42:0c:5b:07:5c:1b:
4f:6f:34:e2:30:92:98:20:f7:e2:04:43:73:38:2a:
24:22:2d:37:51:04:d6:b4:08:4a:ba:70:b1:9d:2b:
d6:d5:bb:cf:e5:45:ce:ea:95:96:35:95:ed:a4:07:
4d:c4:1c:7c:9d:f6:b3:74:0c:63:e7:c5:64:1f:be:
b8:24:3c:37:d9:74:e4:52:d0:c2:88:3c:64:08:0f:
b1:88:bb:c0:1b:89:91:84:42:20:3f:92:e5:12:1c:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:5C:84:99:DE:A7:25:21:9F:9B:9F:39:9C:7F:5F:F5:D5:7C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/92ac91aa-5a40-302f-b604-4405597dc272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
X509v3 Authority Key Identifier:
keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d8:d0:cd:ec:f2:06:b1:d3:d1:95:38:3d:7d:d1:6e:d4:8a:
36:90:f0:1e:94:ee:0b:e3:1a:65:3b:14:ef:ec:32:f3:75:ff:
a1:e1:f3:ae:a2:f0:99:c4:8d:a1:79:3e:9b:20:30:e8:58:5d:
a5:2a:e5:a1:22:57:72:11:48:b5:7a:c0:6c:06:d3:fb:eb:d5:
a1:43:c7:cb:3f:ca:dd:28:30:de:e5:5e:26:9b:ff:55:1f:0e:
fa:51:be:8b:60:cf:34:64:b0:fb:99:c5:52:ac:55:a4:23:47:
58:a4:ac:14:64:0c:53:1c:af:da:a7:f9:5f:02:27:74:59:c1:
75:24:d1:60:73:69:aa:b3:c6:21:1e:9d:d4:99:90:20:06:8c:
79:d5:27:65:b3:86:db:0c:c3:11:fc:b0:06:96:5f:70:91:b9:
3e:bc:50:9e:bb:f8:c8:54:7b:21:f7:a1:9b:33:d6:83:88:9d:
fb:38:4b:3a:f8:82:e7:72:45:db:d1:cf:d4:10:f6:04:11:d7:
84:f2:09:91:f4:82:76:a3:fc:fe:6d:68:10:5e:61:78:9e:cf:
5b:c3:8b:15:e8:be:4a:7f:ed:78:4b:cf:ad:a1:1b:4b:ec:1d:
23:d6:b5:95:7f:0d:e0:80:89:fe:fc:82:45:5a:0c:c9:db:df:
39:3c:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:17 2025 by rpki-client