Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53255963-e2d4-3ffe-b556-b0d01f4e388d.roa
File: 53255963-e2d4-3ffe-b556-b0d01f4e388d.roa (raw, json)
Hash identifier: hDmLTtbnpEkjw0AswmTJHCtDzL6S+ZPtCxC4La4dcPE=
Subject key identifier: F8:89:D0:78:84:46:67:1C:BE:76:8F:04:DF:BF:95:59:ED:73:F4:3A
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DC005904F4D4A195C2B72580
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53255963-e2d4-3ffe-b556-b0d01f4e388d.roa
Signing time: Tue 12 Nov 2024 22:38:29 +0000
ROA not before: Tue 12 Nov 2024 22:38:29 +0000
ROA not after: Mon 10 Feb 2025 22:38:29 +0000
asID: 394437
IP address blocks: 72.20.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:00:59:04:f4:d4:a1:95:c2:b7:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:38:29 2024 GMT
Not After : Feb 10 22:38:29 2025 GMT
Subject: CN=c2d50b9d-3d9d-4884-9230-8f93a4f49ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:51:3d:0e:7f:94:a1:b9:8f:8c:2e:83:3a:
7b:bf:1a:d1:48:c1:09:c6:48:92:4c:d3:d4:8e:b9:
61:a6:07:e0:3f:5d:05:d2:e6:8b:3f:a5:16:5f:32:
7a:d0:0f:89:5f:d8:04:ce:97:2b:aa:94:f4:8d:b3:
24:e9:c7:95:af:e9:69:b0:e0:3e:6a:b6:d7:4a:4a:
20:60:b8:1e:9d:f0:65:fb:1a:9c:b0:48:03:d0:4b:
a9:03:a9:21:5e:89:de:b1:69:07:4b:d4:6b:a6:0c:
4b:fa:e1:43:ba:6b:c4:7b:f3:f0:79:7d:b1:f6:45:
ed:3c:96:18:6b:39:76:f8:31:1d:ac:0f:32:3e:b8:
4d:e0:63:c6:75:1d:60:ae:48:18:aa:c2:81:9b:6e:
3d:86:82:fa:bf:9a:bd:6a:a5:fd:ed:ea:ac:a2:75:
04:cf:f4:0e:3a:14:74:2a:db:fa:95:34:a7:bd:d5:
56:c3:52:1c:17:93:86:df:2b:99:48:d4:b9:e7:ad:
73:a7:70:23:4c:fc:5f:d7:92:ba:df:ac:5e:f8:3a:
62:fa:1c:a2:35:22:74:75:3d:12:f3:db:45:cc:57:
49:15:cf:34:c8:e5:c0:eb:3c:07:4d:ed:f4:fb:e1:
02:59:c9:16:96:f8:e4:a4:c7:d1:dd:d2:8d:e3:5c:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:89:D0:78:84:46:67:1C:BE:76:8F:04:DF:BF:95:59:ED:73:F4:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53255963-e2d4-3ffe-b556-b0d01f4e388d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:20:1d:1e:c4:83:f2:72:96:c2:3b:f5:8c:e4:f0:3c:52:1a:
78:57:4f:84:4d:7f:61:59:35:c1:1a:44:6f:7b:65:b7:80:44:
a1:aa:2b:cc:ec:f9:af:dd:41:2e:d5:4f:06:ae:aa:19:34:1f:
3b:28:51:b4:f0:1d:8b:68:f7:58:e5:a7:cc:84:64:23:9b:21:
27:b0:a1:c4:3a:b1:15:4b:31:d6:d1:ab:83:d1:ff:dd:89:1c:
c2:8c:0b:2a:b0:9d:75:ff:e8:36:b1:f7:08:19:b3:a5:df:fe:
4b:03:84:19:e4:d1:5a:77:de:27:8c:e3:4c:46:97:87:3b:f1:
3f:09:f9:54:6a:ff:e0:79:41:46:a6:d4:e0:6a:3e:6c:01:64:
23:77:8a:c9:05:6c:7a:3a:dd:a1:65:21:d3:68:ec:e2:e8:3a:
9d:31:e3:ac:eb:07:eb:65:5c:ea:da:6d:de:9f:0c:71:7e:a9:
39:67:3a:13:60:36:fe:61:e4:3e:62:d9:cd:ad:7a:02:18:aa:
bb:11:66:95:ae:29:aa:c3:a6:f2:c9:f8:74:59:0f:77:13:4a:
1c:78:80:0a:f9:54:07:77:06:82:c6:83:d0:3a:f3:ea:b6:4f:
cc:e4:f2:06:76:3f:ec:33:c9:7a:c6:1e:3d:8e:18:c4:9e:4f:
db:7d:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:47:14 2025 by rpki-client