Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
File: ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json)
Hash identifier: CN0nx25DAi1/NddRBp0uAGVm9uXolDyrydAztryvv28=
Subject key identifier: 65:8A:F1:72:81:27:F8:11:DA:28:3C:FD:D7:18:3E:83:6B:B4:37:A7
Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial: 010D0C9F4328584838855F6BDAC7813F4D1F8080
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 72.22.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5f:6b:da:c7:81:3f:4d:1f:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=692cd35d-3cbb-4208-acc5-6edef3d51b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:c7:0c:1a:3e:5e:8e:4a:db:6c:d5:5b:6a:
8a:e8:3f:f2:a2:3a:95:43:49:34:6d:58:2b:c3:43:
c7:de:e7:80:16:9d:3c:71:cc:8c:29:ed:0c:a5:70:
a6:b9:bc:65:4c:e9:cc:1d:92:46:39:7b:6a:ab:0c:
45:e9:1a:ce:72:ed:c8:1a:01:9a:78:31:41:ed:9a:
67:c6:a6:ac:23:ea:37:cd:7e:1b:aa:c7:7c:86:c0:
f4:8a:b6:de:4e:ae:16:51:82:87:a6:d4:ee:a2:7a:
8e:3a:5a:f8:7f:52:51:94:be:bc:6c:cf:d0:b7:3a:
ae:12:6b:1d:0f:3a:29:78:7d:87:2a:c3:d3:27:2e:
fd:67:8b:e8:e8:7e:58:d9:c7:72:4a:ab:6e:0b:2c:
35:3c:6e:94:3f:78:1f:f8:14:69:b3:27:67:a3:c1:
b6:bb:56:77:47:7c:b8:ed:d2:b4:de:cb:92:8f:6d:
46:17:c9:a8:6e:6a:44:df:f5:e0:f9:62:9d:19:2a:
ce:ad:b4:7c:5a:aa:56:3e:6e:b0:c8:8f:e3:bc:01:
e7:a5:2a:a2:01:5e:cf:27:8a:5c:70:a8:38:3a:96:
94:10:7d:2f:5f:8f:c7:d0:af:1a:f4:da:1a:5a:06:
78:da:bd:13:b0:16:a4:e3:27:62:94:d0:30:7d:a4:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:F1:72:81:27:F8:11:DA:28:3C:FD:D7:18:3E:83:6B:B4:37:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
X509v3 Authority Key Identifier:
keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:44:11:76:31:68:f1:15:5b:01:99:43:9f:13:48:61:b3:12:
22:a9:e8:92:9a:c2:78:38:ba:69:ea:55:5f:df:f8:1f:d3:4a:
5d:09:22:1b:76:8f:b8:4d:a5:03:76:fe:0d:bf:03:86:62:64:
e4:ee:e8:b9:1a:c9:e6:66:3e:71:34:87:76:7c:79:8e:cb:32:
f5:59:43:68:8d:f9:c7:19:62:35:5f:c2:1e:34:9c:a3:6f:90:
d8:9c:71:75:f4:60:28:16:bb:96:6d:6a:d8:37:b2:e9:2b:12:
66:e8:03:64:ea:fe:17:a5:59:99:7e:c3:f2:71:ba:85:5d:f1:
4d:79:70:a2:31:b2:dd:5a:df:a7:b9:64:5f:68:10:60:14:18:
9b:69:f1:b4:92:82:73:fe:14:f2:d4:aa:82:ad:ce:9d:98:6b:
62:02:73:72:12:20:47:47:0e:6e:cf:54:9f:36:02:39:15:42:
0f:fa:29:d5:f5:a2:7e:cd:cf:b4:ef:2e:e7:fe:f6:5f:5c:30:
17:0c:f4:8f:01:1d:76:12:ca:85:2c:e8:eb:c6:14:4a:d8:4f:
bf:ef:85:c2:f1:41:53:5e:83:7d:7d:9b:3e:7b:c6:9e:b1:4d:
e3:a8:f4:b3:69:7c:5c:10:0e:2d:15:9a:a7:b1:71:9b:96:be:
d1:4e:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:30 2025 by rpki-client