Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json)
Hash identifier: 58Omwo8khfnIZ8U2UvhtEo/FuLQoS8SVIGcK070bGVM=
Subject key identifier: 41:2D:3D:F7:E4:DE:DA:AD:B5:AD:01:E5:07:A9:0C:91:13:D5:C6:95
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486C576D1F117C088C90EEA340
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
Signing time: Fri 03 Jan 2025 15:30:21 +0000
ROA not before: Fri 03 Jan 2025 15:30:21 +0000
ROA not after: Thu 03 Apr 2025 14:30:21 +0000
asID: 394437
IP address blocks: 72.20.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:57:6d:1f:11:7c:08:8c:90:ee:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 3 15:30:21 2025 GMT
Not After : Apr 3 14:30:21 2025 GMT
Subject: CN=e2d71cca-6207-4e25-9bef-ba0668a7ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:82:b2:12:ba:94:c1:14:e6:f7:a1:9d:58:
6e:a3:92:30:8a:21:c3:e3:a1:47:ae:dd:39:ef:35:
8e:9c:9a:f0:38:39:5e:fc:52:2a:30:6b:d6:31:e0:
02:b3:8c:c2:cd:50:bf:a8:71:bd:c8:23:5a:82:8c:
b7:b4:7b:15:61:35:f5:4d:ae:ee:6d:c9:d5:ef:b6:
b3:c8:93:cc:da:40:4b:23:cc:67:43:cf:1a:e1:7c:
e8:ba:98:ab:f3:5a:da:3e:54:75:9e:5b:40:06:cb:
b6:a6:89:cb:d4:f0:28:6c:39:a6:cd:77:4a:1e:48:
31:9f:f8:4d:6a:05:b4:10:ca:31:6c:eb:6e:6a:77:
30:d6:65:8d:e4:4a:72:4e:a0:ca:54:25:64:82:9f:
35:ee:e7:78:24:c4:33:69:3a:0f:38:b5:ba:00:91:
2e:61:41:e0:0e:12:aa:7c:b2:51:2d:e9:c3:2d:aa:
6a:32:e7:a9:97:a2:ab:b1:93:33:d3:22:20:e4:7c:
e9:6a:dc:7d:f0:2d:91:49:a3:df:88:4f:e7:fd:de:
73:77:eb:9c:ff:3f:f2:89:6f:d1:6f:7d:85:ad:15:
20:56:a5:8f:06:05:6f:86:d2:2e:32:35:51:c8:35:
14:43:53:3f:61:75:b0:a2:cb:61:1b:94:1b:2b:77:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:3D:F7:E4:DE:DA:AD:B5:AD:01:E5:07:A9:0C:91:13:D5:C6:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:1d:e7:97:37:8f:ce:b2:27:dc:25:13:49:42:b1:67:6b:fb:
bf:88:a5:27:d6:2c:31:47:48:e8:35:54:88:f2:5f:1d:fc:7e:
e7:bb:ce:65:d0:53:78:64:59:f1:d6:ad:33:52:cd:7d:0d:fb:
97:bc:94:44:1f:3b:52:f7:51:cf:a4:d0:40:9d:a8:ac:cf:db:
16:5b:99:69:56:40:73:28:59:af:80:75:22:5f:99:89:9f:c9:
0e:b4:aa:4f:0c:d6:44:f4:98:eb:d9:a7:d1:9a:38:7b:9e:04:
7a:50:21:04:14:a8:54:bf:87:01:d0:db:f1:50:aa:11:55:71:
8a:27:59:29:18:82:2e:2e:5e:a4:07:05:c2:8c:ea:5a:d0:f3:
aa:10:5d:97:a5:3b:ac:d1:a8:f3:c2:e9:df:10:3d:ae:db:d0:
a9:e1:f8:eb:ac:9d:84:d9:dc:01:29:6d:f8:fe:eb:3a:63:49:
6c:c9:16:26:01:f0:a6:54:ac:63:5f:ee:d9:52:02:fb:88:c8:
3f:a8:7a:fd:bb:5d:24:62:0f:ed:71:f8:41:63:69:77:63:ed:
ae:57:45:a9:15:c6:4d:c7:3a:67:a8:34:d6:06:2a:5e:1a:fb:
3c:01:9a:bc:02:91:f6:02:1c:7d:8d:df:80:c7:e5:9b:1e:07:
f4:22:53:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:17 2025 by rpki-client