Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
File: 8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa (raw, json)
Hash identifier: tJWZLZZz6u0jZbcgrbjc4AGAQZpA29KhbE2E1B6chss=
Subject key identifier: 31:0B:89:6F:85:EF:A6:6A:3A:B3:32:67:D7:44:78:42:69:E8:91:2D
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584851A57DCC2BF1AA1672D7DE00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 22362
IP address blocks: 72.20.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7d:cc:2b:f1:aa:16:72:d7:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=d2915d6a-4454-4660-abae-18ce26e91d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:65:b3:a0:c7:d1:e4:db:00:ed:53:38:74:
74:40:90:e9:5b:1f:0b:4e:24:5c:ab:da:20:4c:20:
62:74:f6:3d:57:68:1b:71:02:68:d5:49:ec:55:bc:
bd:bf:6a:af:92:b6:cc:95:2d:c6:cd:c3:b0:4d:64:
c6:6a:4b:44:a9:6f:2b:af:36:90:c4:72:d9:10:2d:
0d:3e:ba:d0:b8:1d:a3:40:70:d0:3a:28:da:e3:7c:
05:d0:d4:27:0b:51:f7:4f:50:bc:61:dd:dd:92:f9:
86:01:8f:21:bc:af:cf:b0:c0:66:54:06:40:1c:5d:
93:e9:3c:28:1a:a5:5c:67:1a:ce:5e:7a:8c:16:49:
59:3f:26:23:1e:07:b1:06:70:22:cf:39:f8:98:0f:
e7:95:76:b6:3f:9c:1f:6d:2d:6e:d5:fa:c9:45:33:
77:8a:3e:c8:32:6b:be:4d:e8:4a:29:6f:e5:c0:ab:
f2:6a:51:fb:e9:78:fc:54:80:41:1d:ff:50:16:f8:
6f:92:c4:56:cb:e7:34:fd:96:69:17:dd:ff:04:3f:
8b:21:34:91:02:18:ea:79:78:b0:a9:bd:b9:c7:d4:
62:2f:26:39:fa:48:4d:45:84:b1:0a:91:f6:5f:01:
de:50:fc:2a:8c:11:e1:1c:a7:20:2b:82:c4:dc:f9:
97:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:89:6F:85:EF:A6:6A:3A:B3:32:67:D7:44:78:42:69:E8:91:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:eb:c9:15:d3:6d:3a:d0:0c:35:e2:2d:5c:ab:16:eb:c7:f7:
7c:36:bf:36:ff:44:01:11:79:d5:c9:40:1b:7d:33:35:43:81:
03:68:28:09:b9:00:38:86:e7:1f:63:e3:75:bd:2f:41:f8:09:
28:ce:c0:9e:6b:6b:37:5e:3d:c6:6c:f6:11:dd:72:a3:e0:06:
ed:6b:cc:32:b7:4e:0f:df:da:0b:c1:9c:86:8c:9b:f9:2c:f4:
17:ab:e9:71:54:d6:d9:70:ea:6d:46:37:16:4f:51:77:42:08:
01:1e:2f:36:3a:a7:5c:11:f5:a6:d9:5f:bd:b5:06:24:1e:18:
77:df:cf:95:5b:b3:ea:85:f9:f4:f7:2b:4e:29:f2:65:6e:ec:
c3:09:e4:5a:ad:9f:b9:3c:d9:f4:7b:61:5d:43:3e:d2:58:8b:
0a:91:f8:be:d5:f2:eb:aa:8e:36:da:b0:0b:eb:ac:fa:39:03:
37:69:d5:28:2b:73:1e:e8:d7:38:0d:c1:da:01:be:fc:f4:74:
72:b1:25:09:7d:2b:3a:90:7e:46:b0:c1:05:81:2d:fe:50:c6:
25:35:22:67:14:40:58:66:7e:c9:03:a3:af:da:f7:c0:1b:75:
03:dd:71:15:62:32:f1:92:90:20:92:46:af:77:ea:f4:4c:03:
ea:80:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:42 2025 by rpki-client