Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00dc9c3b-e55f-3c9f-91df-ef1acd399026.roa
File: 00dc9c3b-e55f-3c9f-91df-ef1acd399026.roa (raw, json)
Hash identifier: wkdL2lRZm5FgD9JeF/neFAI6TgsnFsRaePQQpPy89x0=
Subject key identifier: 42:BA:F5:E0:35:1D:AC:62:AE:94:D2:63:24:75:8C:5A:F7:FD:85:73
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF89274F2941C564642960
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00dc9c3b-e55f-3c9f-91df-ef1acd399026.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:89:27:4f:29:41:c5:64:64:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=7a1623bd-c914-4473-b9e5-e476480c6dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:7d:05:72:49:1a:f2:39:12:f0:a7:ba:e0:
f0:3e:eb:af:24:00:86:4e:49:2b:bb:8b:ea:3f:51:
34:1a:14:ac:59:0d:da:08:be:c5:7a:41:f5:93:4f:
c9:b0:7d:90:d1:7f:70:b9:48:b8:21:e4:a6:46:67:
93:32:ab:91:e7:10:55:19:db:e2:bf:4a:59:73:fa:
36:b4:6f:26:8a:62:87:c5:9c:8c:47:cd:11:47:b3:
17:b4:c7:be:b8:86:fa:6e:76:1a:8a:94:4e:68:ed:
42:c4:bf:63:fd:d9:6c:fd:23:de:54:11:88:a8:75:
42:46:5f:2e:ea:21:0d:b1:f3:e9:15:c9:45:f5:6e:
23:f3:c8:48:be:cc:4b:d2:e1:1d:9f:23:2c:18:98:
26:69:e1:05:02:97:01:92:c1:62:d3:7e:74:d6:88:
5c:9d:1a:ff:6a:25:f6:a0:9d:46:10:75:7f:f6:b0:
b8:9b:cf:b2:09:d0:48:49:59:59:70:d8:9a:06:da:
06:27:b5:66:90:84:ba:6e:66:23:22:4b:f9:e8:fa:
e3:4e:e0:c4:ed:4c:3e:df:32:48:ca:24:76:68:3a:
61:3c:86:08:80:cc:8e:a5:39:83:57:36:2f:6f:49:
86:8f:a5:1e:e1:cb:c1:b2:e4:c7:7f:3b:9a:77:f2:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:F5:E0:35:1D:AC:62:AE:94:D2:63:24:75:8C:5A:F7:FD:85:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00dc9c3b-e55f-3c9f-91df-ef1acd399026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:71:ca:31:d3:cb:a6:1c:90:16:87:88:b0:04:09:cf:22:bc:
fa:00:d3:a2:eb:fe:dd:98:20:aa:c0:46:7d:f1:da:3c:7c:e6:
93:7a:0d:1e:cd:a2:70:84:a0:72:23:79:ba:74:85:d4:86:43:
e0:b4:d7:3a:26:1a:e4:49:bf:cc:2b:0d:15:4c:a1:85:0b:54:
57:75:76:5c:0f:df:76:3d:6f:bc:9c:50:d1:ba:36:be:c0:5c:
36:ef:2b:02:e6:fb:52:32:eb:1f:66:80:18:14:73:71:f1:85:
87:56:51:ef:ad:24:70:64:64:3a:b9:30:a5:9c:95:f5:85:b5:
0b:81:b6:8d:52:db:50:82:2d:96:34:3b:fd:fa:93:51:89:fb:
eb:a4:16:8b:33:3e:e8:4f:d0:d9:ae:d6:88:be:e8:fa:52:a8:
42:5c:80:3f:e8:34:15:94:4b:07:02:c9:7c:88:0c:b8:81:6f:
6e:b7:f2:66:52:36:b2:e6:56:39:19:7f:57:ee:71:38:f9:29:
1f:df:fc:5f:da:05:d6:f5:df:02:3c:74:07:d3:d0:15:1a:65:
af:63:3b:aa:a0:b6:e6:03:0e:b9:13:7c:90:74:89:a1:c1:51:
ca:d5:29:76:9e:16:1e:5b:98:a0:76:6e:4f:9b:a9:2f:24:1a:
08:e0:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:08 2025 by rpki-client