Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
File: 10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa (raw, json)
Hash identifier: MiMKKKKWPzEC2L6QoSp6lAaewA9+LXhBs8i7cjo1AOM=
Subject key identifier: D0:D0:76:0A:D5:C7:79:90:52:2F:E8:69:9C:EE:95:89:9B:41:44:A2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB2DA5FD74CC96F44B700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b2:da:5f:d7:4c:c9:6f:44:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=587a6cac-b9a6-4039-b5a6-c694e455e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:88:60:8b:2c:8a:07:fc:63:2b:28:60:ea:
b4:10:6d:5f:be:7e:04:45:d0:5a:eb:74:d6:19:d9:
b4:45:8a:7e:99:a3:ff:80:5e:c6:45:3f:25:50:60:
80:eb:13:0b:f7:5f:d5:ee:46:06:cc:b7:71:d5:3e:
d8:b7:72:06:12:83:e4:00:c3:3d:9f:fe:7a:bb:70:
34:54:15:bd:0e:b4:7c:5f:66:7c:18:4c:2c:b5:52:
42:1c:35:5e:c8:c7:67:8e:a2:3f:50:a5:f8:06:b6:
91:38:41:6c:ac:bf:19:45:72:dc:ce:c1:e6:26:79:
db:71:28:b2:38:05:73:65:fc:f7:3d:24:53:b9:6b:
2c:b2:08:87:45:c1:4f:e6:40:fd:83:6f:04:ad:cd:
2a:d5:35:3d:ee:d6:55:7a:f3:a5:8f:ea:95:c5:8b:
9d:e1:0e:1b:38:0a:5f:cd:25:b7:00:a4:99:46:95:
a9:d0:48:c7:e1:86:c7:9f:0c:e9:1e:1f:39:b2:52:
d4:ec:d0:1f:00:ee:de:74:71:d9:e6:21:d6:b7:a0:
bf:e7:77:cf:07:19:e4:c4:98:df:7a:7c:0a:1b:1e:
a5:b7:49:0b:53:25:cf:af:0a:30:36:00:9e:46:7d:
bf:1b:55:32:0d:51:23:55:6a:bf:f6:1b:34:48:3d:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:76:0A:D5:C7:79:90:52:2F:E8:69:9C:EE:95:89:9B:41:44:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:19:8a:6a:74:2e:e4:cd:0f:01:28:44:a4:19:1d:c5:1f:74:
b3:ad:36:c1:d0:09:71:6e:fb:6e:35:0b:4f:c8:5d:43:cf:91:
e6:94:eb:b6:d2:08:0f:b2:d7:e9:aa:61:8e:46:9f:44:0e:ba:
b1:72:b1:66:48:27:1b:be:8c:b0:ec:c5:6f:03:6e:72:10:e1:
54:36:6e:8f:25:e8:9e:9c:e2:63:f1:30:73:d5:7b:c6:95:cb:
0e:fd:22:9b:7a:40:1a:88:48:15:08:73:23:e4:1f:97:ad:ee:
94:ee:00:12:f8:87:e1:f9:9f:22:74:a7:dc:79:a9:c9:47:df:
dc:a9:11:eb:a3:4f:9b:7e:d5:82:a8:4b:32:b3:74:e7:5b:49:
c2:cb:9a:a5:aa:87:7b:5e:05:27:c7:d6:f3:f5:f3:60:24:54:
ab:35:54:b8:8d:ea:d2:9c:b7:b5:85:8d:9d:6f:e9:69:82:60:
04:1b:cc:62:d1:d6:72:6e:27:78:37:f5:b9:c4:11:9e:af:cb:
37:90:22:19:9b:6a:b8:28:60:4d:33:24:69:08:20:16:d1:36:
e1:1b:f5:56:cf:4a:01:c2:b2:ff:41:67:c2:2b:3d:96:97:77:
6d:93:7d:fe:3d:be:53:2b:15:cd:eb:23:3e:1b:65:9d:f8:0e:
c2:40:fd:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr7LaX9dMyW9EtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
NTg3YTZjYWMtYjlhNi00MDM5LWI1YTYtYzY5NGU0NTVlMjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeIYIssigf8YysoYOq0EG1fvn4ERdBa63TW
Gdm0RYp+maP/gF7GRT8lUGCA6xML91/V7kYGzLdx1T7Yt3IGEoPkAMM9n/56u3A0
VBW9DrR8X2Z8GEwstVJCHDVeyMdnjqI/UKX4BraROEFsrL8ZRXLczsHmJnnbcSiy
OAVzZfz3PSRTuWsssgiHRcFP5kD9g28Erc0q1TU97tZVevOlj+qVxYud4Q4bOApf
zSW3AKSZRpWp0EjH4YbHnwzpHh85slLU7NAfAO7edHHZ5iHWt6C/53fPBxnkxJjf
enwKGx6lt0kLUyXPrwowNgCeRn2/G1UyDVEjVWq/9hs0SD3+qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDQdgrVx3mQUi/oaZzulYmbQUSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTBjZTVhNjgtMjVlYS0z
OTA4LWE1YTgtMTNiYmQ5ZTE5NDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAZimp0LuTNDwEoRKQZHcUfdLOtNsHQCXFu+241C0/IXUPPkeaU67bS
CA+y1+mqYY5Gn0QOurFysWZIJxu+jLDsxW8DbnIQ4VQ2bo8l6J6c4mPxMHPVe8aV
yw79Ipt6QBqISBUIcyPkH5et7pTuABL4h+H5nyJ0p9x5qclH39ypEeujT5t+1YKo
SzKzdOdbScLLmqWqh3teBSfH1vP182AkVKs1VLiN6tKct7WFjZ1v6WmCYAQbzGLR
1nJuJ3g39bnEEZ6vyzeQIhmbargoYE0zJGkIIBbRNuEb9VbPSgHCsv9BZ8IrPZaX
d22Tff49vlMrFc3rIz4bZZ34DsJA/QI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:06 2025 by rpki-client