Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b250e676-58b6-3ebe-a74c-2e3b74f33a2b.roa
File: b250e676-58b6-3ebe-a74c-2e3b74f33a2b.roa (raw, json)
Hash identifier: A2M0QBoKNBKBqcB72pNhxBNAJPTOVNJqeoyBbKRWThA=
Subject key identifier: 8D:DE:F4:E5:7A:D6:D5:2B:34:D8:1D:61:FC:8B:FE:29:81:C9:00:40
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037AE60405447DFBF69C70C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b250e676-58b6-3ebe-a74c-2e3b74f33a2b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 8052
IP address blocks: 72.129.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:e6:04:05:44:7d:fb:f6:9c:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2f4a1f02-84f7-4ac7-bb13-8a185b1c0dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:e3:bc:d4:4a:88:de:6d:3a:4f:87:24:b8:
fb:66:c0:44:2e:d2:a8:11:8c:79:19:e8:98:18:b4:
17:b2:61:08:e9:94:74:f7:55:61:e7:36:b8:4d:bc:
43:4d:84:a3:42:9b:b0:7f:bf:06:c7:22:43:6b:0a:
64:12:2e:dc:61:61:ec:86:11:b8:35:e9:6b:20:16:
df:a8:1d:8b:1b:df:76:89:e4:60:3a:77:a7:e0:0a:
a2:55:fd:03:5d:76:ae:d1:8b:72:99:4f:76:06:6a:
61:fb:46:38:7a:aa:c3:36:48:70:9a:11:30:b2:83:
65:ad:c0:42:45:9a:f0:fe:4c:68:64:cf:fd:59:da:
99:62:45:f8:dc:21:a5:df:d8:da:cd:d3:9f:1d:a0:
e4:78:94:c4:25:41:27:ae:17:e7:78:94:55:3b:bc:
68:a5:af:c0:d3:fe:49:3a:ac:54:b2:08:13:28:75:
bf:2c:e7:f9:ef:86:85:c1:42:8e:0a:5d:32:65:02:
88:ce:13:af:54:fb:66:8f:3e:7a:37:2e:f0:36:13:
f6:60:80:c8:03:00:84:72:a4:b6:f7:c7:06:0d:fd:
fc:7e:d9:d5:1f:0e:9d:22:a1:3d:84:37:66:20:ca:
c0:34:12:93:de:32:20:58:80:12:7d:8b:75:6c:51:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DE:F4:E5:7A:D6:D5:2B:34:D8:1D:61:FC:8B:FE:29:81:C9:00:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b250e676-58b6-3ebe-a74c-2e3b74f33a2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.129.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0c:cc:f3:3e:fa:f9:fe:0c:9a:4f:95:20:00:e1:57:da:62:
85:2f:68:0d:b3:62:1a:bd:d8:3d:97:e1:c0:a6:df:86:b4:db:
34:b5:de:e9:c5:7d:e1:06:5e:65:a7:8e:cb:18:c8:97:82:85:
85:ec:af:1b:48:88:cf:c7:9a:b8:76:ab:0b:84:85:da:75:6a:
21:37:75:87:92:60:e5:8e:be:9a:45:02:1b:f7:2d:5b:90:6b:
17:21:47:cb:2d:a8:9f:bd:1e:73:28:37:ef:42:df:4d:4a:b2:
49:20:0e:d4:dd:a8:07:a1:05:08:db:19:13:1f:4a:5d:f7:71:
c0:fa:fb:b6:f2:56:75:89:a4:57:45:7a:5e:e9:ac:8b:d3:35:
07:09:55:4f:34:ce:5f:bf:bf:0a:4e:52:29:8f:ad:78:aa:52:
ba:11:b5:f2:97:09:8e:b9:c3:87:8d:3d:ab:b3:3e:78:d9:e7:
9d:e8:cf:46:3e:80:4a:15:e4:40:12:b9:d6:41:91:23:35:8e:
f1:8a:c0:9b:a3:dc:58:ad:92:2f:23:26:ee:d9:3f:10:b4:dc:
72:66:cb:d9:2c:35:fc:8f:3e:3a:21:47:4c:1c:b8:bb:e6:1c:
13:b7:a7:a2:18:92:c5:d8:a9:e1:ea:3f:05:60:1d:24:8a:ad:
da:8f:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:17 2025 by rpki-client