Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
File: 254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa (raw, json)
Hash identifier: LMuiLxtAtsoEyAv6CPWj3KT1eOFI+DNu0WHH5+jDdrQ=
Subject key identifier: 0D:27:04:42:F2:33:B2:10:C9:C1:8D:30:13:20:6C:D5:CD:53:F6:4D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F432858486D90513DB3C261D682992100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 6830
IP address blocks: 72.9.160.0/22 maxlen: 22
72.9.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:51:3d:b3:c2:61:d6:82:99:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=1b3d2930-60dd-4405-ad70-bf97441ddd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:2b:56:de:be:00:37:ad:a6:ae:ae:9c:bb:
22:ee:ca:20:ce:95:9f:91:01:32:02:d7:f5:81:46:
c4:b8:fe:f1:25:d3:e6:d4:4f:6b:ef:f1:4a:ea:1c:
3c:2e:a9:7e:a0:31:6d:1a:16:28:c1:9f:37:14:a7:
56:51:e5:69:0d:70:b8:d3:a2:c9:f0:be:a3:5b:1f:
3d:f5:22:a2:cf:59:a6:0e:76:be:f3:b3:62:7c:d8:
a8:a0:93:d7:57:4d:57:44:c0:7d:b5:eb:e7:16:91:
a7:8c:20:c3:8e:38:04:a4:9e:68:0f:53:3d:bd:fa:
5a:65:13:7d:7d:83:5c:b4:6b:85:5a:be:ce:e4:43:
35:8a:75:c5:0a:b2:24:bd:ae:e5:43:d8:09:63:c4:
44:01:52:9b:1b:53:ba:1c:85:a9:89:6a:fd:92:ba:
08:3b:2c:f2:30:e6:dd:71:5e:e3:24:21:46:6d:92:
00:5b:34:79:4e:6c:e9:73:21:47:06:71:e5:d5:e5:
8c:49:c9:2b:b5:23:ec:78:86:06:3d:05:7a:6e:61:
b6:8b:58:77:9d:cb:0b:60:e5:52:74:1f:3b:f2:85:
8d:d4:b8:5f:5d:9b:20:5c:9c:43:92:a8:4b:cc:3b:
65:44:b4:35:16:1a:bf:6f:40:1f:e1:b5:3c:af:ec:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:04:42:F2:33:B2:10:C9:C1:8D:30:13:20:6C:D5:CD:53:F6:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/254685e2-c40b-3777-9a1d-4fd8419ecf4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
72.9.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d0:56:40:f2:5d:56:d7:40:e2:80:de:5b:e3:1f:28:49:6d:
2a:84:56:2a:6b:5e:69:5e:d5:05:5b:e4:f4:18:e4:ee:34:77:
e7:e3:78:55:ba:98:bb:d4:75:9f:85:ee:18:8b:b6:80:74:e7:
f7:8a:ac:a2:1b:7f:21:70:17:73:e0:dd:6f:28:0d:85:43:3c:
3e:7e:55:36:2a:fb:06:8f:3d:4f:4f:67:d9:2d:6d:c0:a8:44:
a0:4a:8c:74:21:4e:56:7d:d4:68:62:3d:f1:94:0f:e2:9a:8d:
cc:28:8f:01:ee:96:01:0e:0c:7a:11:d7:2a:b9:7b:e3:e4:c7:
9d:c8:c5:54:67:17:d6:db:83:52:fd:cf:8c:3a:6f:8d:88:d7:
01:fd:be:5a:c9:2f:1d:c6:38:4b:af:f9:ac:8d:d1:b5:0c:09:
3b:8f:b0:04:92:a2:8e:b1:16:c8:98:0c:ef:95:41:de:43:d0:
24:39:49:e7:dd:c6:60:a5:f6:b1:51:36:0a:a3:93:53:7b:84:
b5:36:4c:21:32:c1:5d:9a:01:91:f7:ff:37:99:d8:73:c7:1e:
66:a0:91:03:1d:9c:cd:00:fe:0f:1e:25:12:ec:3b:d9:5e:cc:
e1:6b:e0:78:fb:b3:78:8c:57:d5:94:05:e1:33:30:35:8f:43:
b6:ac:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:17 2025 by rpki-client