Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json)
Hash identifier: qZVArqyqouSP55hf6ue0yHn/8GNFofPaQ9Dmf30s3s4=
Subject key identifier: 8A:82:D8:10:B4:28:A9:4B:CE:21:1E:32:3E:8D:8F:6E:67:58:6F:2E
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DC003B0C951F58871FCAC480
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
Signing time: Tue 12 Nov 2024 22:38:15 +0000
ROA not before: Tue 12 Nov 2024 22:38:15 +0000
ROA not after: Mon 10 Feb 2025 22:38:15 +0000
asID: 394437
IP address blocks: 72.20.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:00:3b:0c:95:1f:58:87:1f:ca:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:38:15 2024 GMT
Not After : Feb 10 22:38:15 2025 GMT
Subject: CN=3a61e685-eb02-4c95-b6fc-345afb09bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:a0:74:50:29:e8:3c:d1:ab:66:34:3a:dd:
b3:16:f0:3b:71:d5:c2:20:7d:21:c9:8a:48:73:73:
40:b2:bf:f7:b3:b2:70:9a:7e:ed:af:f2:a5:b1:46:
12:06:20:ae:ae:77:09:01:c3:b6:45:e6:f7:ea:13:
10:bf:3b:49:10:7a:e6:40:01:2e:8a:ad:f3:ec:fd:
11:cb:67:79:aa:3f:66:05:a9:d6:fe:a9:a6:ee:55:
f0:38:f8:41:a4:9c:28:91:fc:1a:c0:3b:dd:34:21:
06:f7:34:d2:39:1a:2f:31:e8:a5:c0:57:f4:6c:a8:
eb:27:59:3c:e6:52:62:0f:6c:2a:0b:4a:19:ae:63:
88:ac:73:ac:6e:9c:d1:a3:23:3c:9b:ff:e7:69:c7:
76:a1:c6:41:ad:a2:a3:ae:a5:a3:6d:dd:d1:ec:14:
29:98:45:94:09:09:fb:7a:ce:e0:19:06:3a:33:8c:
96:45:2c:d3:11:18:f7:71:75:d2:20:7f:64:ec:a0:
39:68:14:9d:cf:92:87:23:bb:2f:4f:a9:94:c5:cb:
17:4a:95:74:30:e7:8d:82:26:56:8b:29:92:ea:b6:
ec:3f:f0:c5:2e:0a:0a:d4:4e:19:2b:f3:d1:cd:57:
8e:8d:a6:7e:95:9b:25:d7:12:ea:9d:8e:33:43:f5:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:D8:10:B4:28:A9:4B:CE:21:1E:32:3E:8D:8F:6E:67:58:6F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:a3:09:3e:b9:13:4d:a4:ea:39:0c:2e:e7:0f:40:c1:8c:16:
c0:5a:44:51:6b:a9:d0:20:02:e2:40:40:d9:0f:dc:4c:da:f6:
53:63:30:df:b8:b4:da:3e:f1:1c:a1:71:2a:7a:d6:37:30:9e:
fc:50:5f:ed:62:1d:66:d4:88:3c:0b:92:aa:0d:12:56:67:e9:
b0:b9:6f:7b:16:3e:c8:d7:9c:e2:fe:b5:bf:f3:6f:bc:75:de:
ca:85:de:ab:f9:9b:b0:13:57:3d:e8:2d:94:ba:6b:16:17:10:
a0:af:f7:ca:b2:a1:59:86:e7:80:f1:83:6f:6d:8f:72:c3:eb:
6b:6f:6e:8c:c7:ab:f0:cf:e2:1b:76:ef:71:d4:d5:df:b6:db:
d2:65:ae:4e:ef:fd:d1:7a:af:a8:13:2f:ae:fd:74:01:29:a9:
0d:9d:bd:fa:e7:60:04:ca:73:98:40:fc:8a:b0:bb:d7:a5:42:
1c:9c:51:1d:1b:5a:d0:d1:16:b2:74:7a:26:81:84:4c:ab:0c:
49:e6:bc:0b:97:19:80:1e:a4:46:a0:54:3a:12:f6:2b:a8:84:
a5:d8:c0:71:73:b7:7f:66:a3:48:ce:68:0e:93:e3:a7:cc:0d:
d7:8b:0c:11:f1:ad:78:23:99:39:12:31:5b:ed:6a:1c:b9:9d:
b3:e0:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:07 2025 by rpki-client