Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa
File: 2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json)
Hash identifier: ozVrvAyaHQQAd383rGKdu9cCRu0i2297ymPD6AE1v/4=
Subject key identifier: C6:09:3D:D5:3D:E1:0A:DA:62:7D:CB:02:04:9D:02:E0:CA:EA:65:99
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBFF1B57787AE7DA45DC3180
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa
Signing time: Tue 12 Nov 2024 22:35:59 +0000
ROA not before: Tue 12 Nov 2024 22:35:59 +0000
ROA not after: Mon 10 Feb 2025 22:35:59 +0000
asID: 394437
IP address blocks: 72.20.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:ff:1b:57:78:7a:e7:da:45:dc:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:35:59 2024 GMT
Not After : Feb 10 22:35:59 2025 GMT
Subject: CN=25f04672-0697-4c12-8d74-a2f092ffa27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:07:23:11:3b:b8:33:a4:01:89:ff:91:4a:
89:3d:16:2b:20:af:d9:97:09:2f:d0:90:07:f5:9f:
90:2e:a9:21:f7:c1:27:17:e1:34:69:67:47:f0:1d:
a9:65:76:7d:88:81:25:0a:f5:64:bc:4f:36:b1:a8:
27:33:2b:3d:91:9f:13:2e:50:7b:f8:b2:f4:c0:9d:
37:40:f3:8f:10:d3:ab:e0:46:d0:af:2f:4c:22:f3:
f0:37:4e:b5:9c:07:c7:f1:32:65:86:ed:46:de:1b:
e2:f4:1b:ea:cf:d3:22:c9:72:48:b9:c6:c3:50:eb:
86:04:32:f4:32:53:bd:d8:e6:7a:1e:a2:9e:45:c9:
e3:21:69:b1:15:b7:1b:e9:35:da:68:cc:9c:fb:d6:
ee:0d:57:f8:7c:1f:a5:42:8e:c3:f0:1b:6e:a1:fb:
86:eb:79:8a:90:21:69:9f:d2:23:b7:e3:a5:fb:ea:
08:0e:be:bd:d1:3d:3a:63:9c:dd:62:db:09:ef:4d:
86:b1:f9:d2:1e:5a:19:0b:37:46:b6:ca:11:d9:48:
77:90:d2:58:f9:47:1d:93:4d:d1:2e:93:e8:67:e0:
2e:47:12:a1:e6:b1:35:f7:12:75:48:fc:1f:46:7a:
78:5e:80:fe:ef:64:a9:d1:90:35:b6:86:7a:3e:8e:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:3D:D5:3D:E1:0A:DA:62:7D:CB:02:04:9D:02:E0:CA:EA:65:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:ce:cc:f0:70:d4:4b:9f:a2:d5:c0:db:52:97:18:63:e8:be:
1d:d9:0a:8a:f5:14:44:e0:2a:73:bc:e6:bb:c1:1b:ca:bf:cb:
29:7a:35:34:60:14:93:7d:7e:c9:6e:c5:48:ca:4b:99:ae:2b:
7f:42:a3:4a:f7:6d:a2:bf:60:11:62:6e:31:5a:1c:58:a5:85:
ed:29:4a:d8:1b:4f:76:89:eb:23:60:a1:74:6c:fe:a8:46:a3:
d4:d6:66:6d:90:07:00:6c:82:eb:ae:20:f3:1d:49:c2:b9:bd:
9f:69:9e:ac:97:37:71:64:87:b4:3b:74:e7:60:9e:e7:cf:e0:
a2:dd:a1:c1:cb:ae:a9:ea:3e:5e:39:30:d0:2b:ba:fc:90:c1:
9c:b9:8e:c4:e1:3b:74:7e:7f:2d:67:a1:64:69:ae:f2:3c:cf:
94:33:25:f7:bb:0c:4e:94:7f:33:0c:ca:eb:b3:da:c0:c4:99:
f4:5b:98:cb:44:50:5d:b4:b0:86:83:23:24:ac:65:5c:bb:fc:
45:ef:44:f0:f6:69:01:0e:76:91:2d:be:a5:fe:e8:e6:8e:e3:
5d:de:53:93:0b:34:15:a9:4e:75:52:9e:03:5e:d0:40:40:fc:
ab:9b:02:8e:07:3f:b0:d8:6f:cf:6f:a7:a8:57:4c:d8:56:55:
63:c8:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:43 2025 by rpki-client