Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa
File: 5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa (raw, json)
Hash identifier: Ri5BNJpcqxNcHU/QJcH3rW3Qc4bn7rY4X2qoVJLYTxk=
Subject key identifier: D9:8B:02:07:F1:04:1E:3D:68:3C:BE:1D:57:8E:28:83:3D:42:1A:C4
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBFE273162EF18C6C223BE40
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa
Signing time: Tue 12 Nov 2024 22:34:04 +0000
ROA not before: Tue 12 Nov 2024 22:34:04 +0000
ROA not after: Mon 10 Feb 2025 22:34:04 +0000
asID: 394437
IP address blocks: 72.20.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:fe:27:31:62:ef:18:c6:c2:23:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:34:04 2024 GMT
Not After : Feb 10 22:34:04 2025 GMT
Subject: CN=08eabddd-5ee5-497f-a422-569766694ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:35:77:4a:8f:f0:40:84:c3:d9:4c:42:16:
46:97:1e:9d:32:04:27:88:51:8d:cc:8b:87:9d:53:
dc:9b:de:01:78:90:b9:59:f9:10:c3:a9:ce:d7:bb:
fe:aa:1a:09:c5:97:bf:f4:76:9a:5d:d0:e4:f6:c9:
00:e5:af:24:fa:b0:7d:ff:e4:7a:2e:39:9e:55:df:
5e:e0:d1:46:9b:18:4e:98:61:46:d9:24:a4:40:fc:
ef:e5:f6:78:1c:de:e9:5f:db:d3:ec:f4:f9:16:1d:
b0:65:59:0a:b1:71:99:eb:ed:05:b8:b7:7d:1a:4f:
63:a6:5a:71:ff:d4:69:96:c4:8c:46:68:1b:76:78:
6c:15:8b:8d:6e:08:10:a8:a7:44:5a:7a:65:58:28:
41:45:b2:1e:87:ea:2d:ea:0e:3c:46:df:00:ad:69:
a6:12:ca:fd:1b:04:4a:7b:ff:84:89:5a:fc:e1:22:
a6:99:45:91:66:7e:02:a3:97:81:13:bb:44:1b:de:
d3:6a:5a:42:a6:e9:81:56:67:95:72:d6:c7:16:23:
c5:1e:24:c1:5e:02:95:23:84:1e:99:aa:d7:0d:1d:
df:3c:66:e1:1f:0f:10:b9:e4:43:2c:cb:18:1d:63:
89:5f:5f:8e:99:2e:c2:73:d4:ba:2c:6c:8e:10:49:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:02:07:F1:04:1E:3D:68:3C:BE:1D:57:8E:28:83:3D:42:1A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:b4:bd:2a:a8:b5:6d:c0:02:82:eb:90:93:a1:d5:ff:f4:db:
8c:38:f4:92:37:85:6f:05:f5:00:6d:93:ac:bc:ec:3a:4c:c4:
d4:a2:93:7c:c4:df:a3:d0:e6:ef:21:98:ed:3b:bd:07:f1:e8:
54:20:fa:04:9b:e3:ed:71:01:ff:62:98:a7:11:82:0a:02:b8:
47:d9:6a:13:e3:b2:c7:cf:85:08:5e:08:d7:fe:4f:a2:51:08:
27:95:0c:c7:6a:14:bb:c7:6c:5b:7b:97:41:94:a9:46:96:44:
a6:5a:34:73:e0:c7:04:c3:d9:78:2e:c8:a0:c0:17:3d:7e:13:
63:b1:a4:d8:02:45:25:33:74:64:30:8a:a4:cf:bf:2f:5d:96:
25:3e:e4:2c:a6:fc:cf:05:76:4d:ac:6a:c3:5f:66:28:f9:ef:
20:20:19:72:81:b8:2c:d7:05:42:03:5f:00:9c:99:4c:fd:d3:
91:80:33:ee:b3:38:14:e1:e5:c0:d7:de:c7:d4:c7:e2:b6:db:
8f:8c:db:e9:42:1a:b8:35:1c:26:22:d9:bf:44:ea:07:50:91:
01:7d:3d:8c:40:0e:71:34:da:9e:1b:84:c4:85:94:5e:5e:f4:
9e:8e:94:16:11:d1:66:12:5e:34:df:88:fc:83:42:4d:de:c2:
d5:0a:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:36:45 2025 by rpki-client