Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa
File: fad19471-683c-347b-9de4-dd147bc35286.roa (raw, json)
Hash identifier: SexoRlSDM9OxN6ho6PRuGcBvuAsxjTiunlDZfey8oBM=
Subject key identifier: 42:68:EB:F6:84:9B:A6:82:80:81:20:1F:F3:B6:03:6A:54:88:45:39
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DBFF3711C5387EF6E10AC480
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa
Signing time: Tue 12 Nov 2024 22:36:12 +0000
ROA not before: Tue 12 Nov 2024 22:36:12 +0000
ROA not after: Mon 10 Feb 2025 22:36:12 +0000
asID: 394437
IP address blocks: 72.20.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:ff:37:11:c5:38:7e:f6:e1:0a:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:36:12 2024 GMT
Not After : Feb 10 22:36:12 2025 GMT
Subject: CN=6ea699f9-4321-4918-b167-3b220ce3b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:a7:28:c3:54:a3:ad:df:e6:89:e6:9c:c9:
53:21:3e:18:fa:9b:05:ff:cd:b9:c5:6c:71:9a:2c:
fa:6d:a6:78:bc:7b:40:87:c2:08:02:62:3d:3c:38:
b0:82:6a:50:3e:70:78:6c:a3:6c:9c:94:39:7d:9d:
18:aa:f4:b5:02:32:a7:6b:23:45:c3:2d:11:70:09:
29:84:b1:1f:15:f6:2c:83:04:ce:15:24:8b:b2:94:
97:24:6f:53:b5:78:31:58:10:75:e5:d6:75:2c:ad:
1b:fe:71:46:31:8a:7e:db:da:17:e8:03:a0:67:34:
32:0a:6f:92:2b:19:5b:91:2d:1b:5e:b0:86:7f:09:
d0:4c:5d:6f:b8:75:1e:63:e6:31:c7:b9:df:5b:86:
a1:5a:99:0e:f9:ee:7f:99:10:eb:3c:99:55:aa:de:
28:28:ca:60:f8:f7:d6:fe:88:f6:35:04:ad:cd:b3:
96:72:83:73:be:ca:10:62:ab:7c:d4:3d:9c:e1:24:
db:f6:e9:a9:f1:3d:89:fa:66:b2:77:9f:4d:9d:61:
79:02:f9:fd:61:37:bb:9f:d5:49:7e:3a:1a:6b:73:
9c:63:42:62:a9:08:55:2a:2d:40:9a:81:04:32:ae:
83:7b:2f:9b:9a:be:58:3a:8b:d7:65:06:2d:3c:a6:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:EB:F6:84:9B:A6:82:80:81:20:1F:F3:B6:03:6A:54:88:45:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/fad19471-683c-347b-9de4-dd147bc35286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:05:ba:cb:91:09:ee:5f:08:d8:5d:5a:ad:ab:b8:15:7c:1f:
95:f3:f9:1a:98:93:bc:8c:12:a7:c5:3f:33:cc:b5:f4:18:2d:
e0:07:b5:b4:6e:93:f0:24:80:0d:34:3b:5a:76:d5:ba:9a:99:
bf:7a:17:88:af:e5:df:93:b2:63:59:dd:ac:dd:99:ea:81:20:
2b:ca:8d:19:3c:d6:d1:5f:af:03:b4:91:92:9d:5d:9f:b9:0a:
59:f8:15:34:73:1c:79:f5:79:47:f4:8c:a9:d1:db:3d:c7:d9:
ef:b5:a3:94:5f:92:36:b0:d1:37:3e:3e:70:a8:06:37:39:1d:
c8:fe:7f:3d:7e:bd:24:1b:33:4b:3d:ff:93:3a:22:a6:d4:9a:
ca:88:6c:41:22:cc:8f:5d:c0:70:d9:e7:0f:e3:f0:cf:67:3f:
83:5c:ec:05:f6:17:7c:9a:50:d5:5e:f3:ea:a0:d9:54:6b:3b:
c5:93:7c:b4:7e:1e:ab:17:b6:e5:94:27:74:91:89:39:6a:49:
2b:a9:67:62:3b:e9:0f:45:ed:bf:ec:19:87:f3:5a:40:66:4d:
0a:b2:b5:f7:b0:07:8d:24:0e:ad:75:42:49:af:7f:35:e8:ec:
ac:27:69:4d:70:90:7f:14:5c:31:27:56:e1:3d:e7:e4:07:bb:
91:0d:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:48 2025 by rpki-client