Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json)
Hash identifier: fBvUwyvLyE+HtDcR++11jEBB4Q6sXWJT+AC3YnmATjs=
Subject key identifier: 28:70:8F:F2:F1:58:1C:48:29:44:51:CD:44:DA:1C:03:6E:FD:24:E4
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBFD69149BF2FA81268FF0A8
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
Signing time: Tue 12 Nov 2024 22:32:34 +0000
ROA not before: Tue 12 Nov 2024 22:32:34 +0000
ROA not after: Mon 10 Feb 2025 22:32:34 +0000
asID: 394437
IP address blocks: 72.20.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:fd:69:14:9b:f2:fa:81:26:8f:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:32:34 2024 GMT
Not After : Feb 10 22:32:34 2025 GMT
Subject: CN=094f6749-19bd-4512-9d81-a9dcf0dc6929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:bc:e4:fe:d7:c3:f4:69:7b:b3:5d:df:78:
5d:a7:99:ac:ec:43:20:8c:d3:0b:b9:95:fd:21:67:
03:f6:cf:34:b8:77:b8:74:df:fe:eb:50:04:4b:fe:
60:74:b0:02:2e:44:1d:fc:00:74:32:2b:cc:8f:48:
c4:a4:ff:42:bb:5a:13:fb:d6:b0:b1:15:28:bb:1b:
57:4a:a3:54:ed:ca:de:44:d9:d0:19:e4:88:84:37:
7f:f1:b9:ee:7d:7e:5d:5f:05:bf:04:de:7a:b4:5b:
60:c1:e9:d2:d0:a8:29:49:d7:13:6d:17:dd:5e:90:
c4:74:4d:5b:87:40:51:43:f8:0c:df:bf:3d:64:8e:
80:e7:82:d2:65:2d:09:4a:14:85:7d:9b:bd:e0:92:
51:c6:73:2f:74:49:bd:71:ca:6e:b6:c5:6f:04:16:
38:5e:56:8c:ba:37:d7:de:8b:80:1c:50:f4:99:5e:
2e:eb:80:1a:ca:2c:88:c2:86:bd:57:ca:15:a7:c4:
75:19:25:1f:93:91:7e:94:ac:04:ab:98:9a:cb:ca:
34:8f:7d:3d:b0:59:28:63:1f:45:6c:ee:68:35:d8:
c7:36:8a:73:b7:96:6a:0a:8f:9e:cc:29:99:30:da:
e9:f4:6f:ce:6f:a3:29:91:a4:f6:4b:98:47:7f:07:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:8F:F2:F1:58:1C:48:29:44:51:CD:44:DA:1C:03:6E:FD:24:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d9:fe:0a:1f:e4:98:e5:b3:e7:e9:77:38:9b:60:0e:4d:d7:
89:4c:86:f4:9f:3c:9b:cc:44:a9:d0:c8:7b:7d:0f:9e:a4:a8:
d2:7d:6a:da:57:db:29:c4:a2:5b:86:61:bf:68:a4:9a:03:56:
ae:18:74:e1:21:c0:8e:9f:9c:fc:7a:0e:af:05:68:79:92:6d:
ea:37:27:c3:79:42:58:dd:bc:20:1d:57:41:c7:ea:11:22:3a:
9e:00:a4:53:b0:84:fc:73:34:c7:65:4d:20:16:f5:ed:2a:66:
64:72:42:c0:9d:14:46:95:7e:c9:bc:9c:0d:16:fb:73:14:89:
fc:a4:05:39:a1:1a:f8:62:0a:64:4f:15:cb:5c:53:31:64:61:
08:99:96:db:6e:09:9f:fd:a1:3d:85:c1:63:0a:b5:1c:85:35:
f6:29:06:4c:06:d7:c3:b7:e5:ce:51:34:be:ce:d9:18:a2:33:
2a:10:8b:32:f3:2e:30:f0:1d:35:5d:31:a2:ab:55:16:eb:ae:
6c:7c:cd:55:03:7e:3b:51:0a:e3:93:a2:c0:a1:92:54:32:13:
a0:60:c1:0c:98:0a:8e:c0:0b:b6:58:7b:a9:94:67:8e:be:38:
2c:19:b7:5a:1d:bf:b1:54:e2:47:d0:ad:20:c0:e1:27:ff:9a:
63:a0:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:37:24 2025 by rpki-client