Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
File: 802c7912-9ce3-3856-87c6-4a70974c9e3f.roa (raw, json)
Hash identifier: JRSlfgwWbyz1U9//IVV3vE8f6LuDub8l7CX4KfCsslU=
Subject key identifier: 79:1F:40:72:C4:B0:42:E5:FF:BC:BD:51:53:A5:72:04:CE:FD:37:20
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486CDE141B05C9BDAC3A846D80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
Signing time: Fri 03 Jan 2025 20:01:39 +0000
ROA not before: Fri 03 Jan 2025 20:01:39 +0000
ROA not after: Thu 03 Apr 2025 19:01:39 +0000
asID: 394437
IP address blocks: 72.20.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:de:14:1b:05:c9:bd:ac:3a:84:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 3 20:01:39 2025 GMT
Not After : Apr 3 19:01:39 2025 GMT
Subject: CN=0da1dd3f-a50a-4fb9-981f-f4d794f9add8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:85:41:1c:da:80:ef:1d:99:0c:85:97:13:d8:
59:4a:69:5a:a1:71:2f:dc:60:a5:59:7c:6c:f8:ed:
08:85:d7:46:97:6f:41:4f:86:6d:29:23:5c:4a:7b:
42:c1:f0:fd:70:5b:21:0d:de:d9:ba:fa:93:47:5a:
53:c4:0c:20:0b:94:54:f4:ee:3a:8b:5c:ea:fc:aa:
2d:69:92:d4:47:fd:e3:db:57:76:74:a4:75:eb:f3:
49:e3:d8:28:97:75:84:71:c0:00:bf:fb:1c:18:6e:
5a:20:5b:cc:3e:76:1b:f4:25:53:6d:ba:77:bb:0c:
cd:38:cb:3a:a3:1f:62:e6:3e:9c:78:6d:d4:ba:37:
6e:9f:e1:11:f0:0b:8a:22:2c:32:ff:ca:f5:95:bc:
df:eb:05:30:eb:47:2b:d3:b4:56:28:58:35:b9:9d:
cc:2a:26:5a:8b:3e:ec:71:76:32:e2:06:56:c7:03:
45:52:0d:23:b9:de:d6:9d:29:b4:0b:0c:11:49:ae:
c7:5b:bc:df:0e:dd:a2:e3:9a:c2:e2:40:0f:cb:e1:
12:1b:b2:03:27:c5:fd:da:61:0a:f5:cf:50:b0:85:
74:95:f4:d9:88:63:26:aa:45:bc:e5:13:38:92:d4:
db:d1:17:26:4c:03:4d:9b:51:4a:a2:d9:5f:e4:35:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:40:72:C4:B0:42:E5:FF:BC:BD:51:53:A5:72:04:CE:FD:37:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:92:d2:d5:bf:00:89:0a:61:63:81:5f:a0:08:60:52:04:94:
ac:86:bd:c4:0d:38:6d:5e:38:62:ad:09:c9:f5:1f:80:6e:3a:
dc:9f:d5:0f:19:ee:77:16:ae:fc:db:e2:b3:b2:ae:ef:d1:6e:
71:5b:26:ad:3f:62:dc:a7:80:44:8d:34:c5:72:6f:8b:84:4b:
c7:a6:86:1f:6d:c0:1e:06:3c:82:82:d8:be:c2:04:04:1f:7e:
01:02:bb:49:0f:0b:4d:da:84:90:11:6b:0c:51:71:d4:33:87:
b0:15:36:03:ef:a8:91:0a:12:d5:8f:c2:f7:fe:37:f0:cc:e8:
af:ee:0f:f8:4f:41:9b:28:03:4b:8d:c6:5f:9c:1b:dc:71:e4:
95:ae:2c:33:25:7f:8f:57:36:3e:0a:7a:25:3e:56:9a:b8:e6:
1f:5c:b1:6a:6d:b9:15:5a:77:a8:5b:ff:83:c3:7d:c4:9e:f4:
24:86:51:e0:b8:d6:d3:e4:1e:3e:6f:d3:5b:31:4c:e4:ae:5b:
db:c0:64:94:69:43:62:0a:c3:ca:7c:a9:20:51:9b:7f:e1:63:
66:89:fe:0a:43:dd:50:9c:3d:48:fa:a9:f3:c4:e6:d5:2c:e8:
d4:2a:b1:a6:6a:19:bd:07:c8:95:0d:86:49:87:4e:37:d0:92:
23:e4:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:16 2025 by rpki-client