Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa
File: 29cb14ec-589f-3a99-ade0-3c22933a048b.roa (raw, json)
Hash identifier: /DbkKjLfTOH8m6X2zDsyxTwAgAMY9F7YYlh+cSrVr7I=
Subject key identifier: D4:22:2D:68:7A:96:7E:A0:84:D5:22:9D:16:97:B0:22:49:14:A9:F2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB5E4D014681E2FBDE5D0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b5:e4:d0:14:68:1e:2f:bd:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b9a7e623-9402-4c23-b85b-6870553a2fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:29:df:1f:09:2f:66:65:0c:fc:e4:2d:df:
6b:0f:8f:66:2a:ad:ab:e7:55:ec:f2:5c:9b:cb:2a:
5d:f2:3a:84:2f:58:20:5f:32:6c:88:1c:aa:64:fb:
da:1a:95:2e:d6:4c:c7:12:67:0a:d1:1b:79:2e:78:
af:3d:fa:b8:5b:23:b1:00:00:17:93:14:15:06:a5:
71:22:3f:5e:e4:ba:e5:e3:bb:d2:70:4e:c5:92:1f:
24:28:67:78:a7:9b:3c:ca:dc:65:7e:6c:82:c1:78:
ca:ab:2b:92:ae:d8:94:e4:7c:35:78:8b:66:05:b5:
c6:3f:1c:44:a9:4a:59:b1:98:9d:d2:aa:4f:1b:36:
2e:55:ab:65:3e:a5:3f:a6:0a:de:c3:94:8d:37:79:
fc:36:dd:c9:79:b7:69:81:ef:88:58:7c:0d:94:9a:
f5:6b:97:93:4c:a5:29:89:54:19:14:7e:2a:1e:b7:
c6:9d:c6:d7:61:b8:b0:14:fd:f8:bd:b4:3c:22:36:
37:53:07:17:29:b4:1e:6d:7b:d7:6f:8f:0e:bf:f7:
2e:65:b4:ce:f5:ec:47:52:91:3e:7d:32:2a:7c:45:
0b:f8:66:5f:ba:8f:bb:09:d2:51:1a:64:28:c6:4f:
5b:09:79:8c:b5:57:55:a1:79:74:60:fb:5b:b8:91:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:2D:68:7A:96:7E:A0:84:D5:22:9D:16:97:B0:22:49:14:A9:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29cb14ec-589f-3a99-ade0-3c22933a048b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f3:0f:42:a6:8b:e2:28:56:09:78:70:c3:b8:25:92:49:df:
a0:ad:a2:69:ed:d6:b3:c5:21:ea:74:2f:df:0b:f3:b2:ab:05:
4f:6c:f9:bb:b4:c3:4a:bb:8a:43:ca:da:57:ab:6e:cf:19:42:
8b:8a:da:0c:23:f2:f7:d1:4c:be:d9:86:79:33:24:d6:a7:fc:
07:36:04:b6:41:52:dc:74:1c:b7:8c:c3:05:aa:bb:09:b6:54:
a8:75:d2:1b:95:aa:e6:1b:e1:e1:77:20:5b:a9:80:7c:a8:5d:
4b:60:3d:36:6c:7a:ca:71:30:98:ab:8f:0d:e3:4a:77:41:4a:
83:47:5b:96:e5:51:10:11:cc:1d:50:56:7b:35:f3:81:50:9f:
bb:e5:c9:44:b8:8d:d6:bd:d5:54:43:8e:88:00:44:78:da:06:
0d:01:14:dd:5b:6c:db:ea:bf:8d:b3:71:fa:1d:fa:82:79:98:
3c:79:d3:a5:b2:70:6a:67:81:7a:be:a9:95:5a:f5:b8:c0:e3:
5c:88:a0:19:cf:cb:d7:2e:5b:85:3f:e9:21:ca:49:e4:5b:2e:
eb:7d:fb:41:d2:1e:79:22:38:2c:38:7c:7a:bf:1d:0f:bf:bc:
ea:c9:29:7b:d8:82:41:36:d2:8c:8c:f6:6b:13:98:75:3a:65:
9b:2e:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:00 2025 by rpki-client