Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa
File: 36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa (raw, json)
Hash identifier: e7jxXsSm2BMzEvRis2rskimRFSeP1jUn0Kw0/FSP9FM=
Subject key identifier: 6E:D6:FD:C5:0D:79:30:09:42:5E:71:EA:C3:84:1D:9B:E7:0F:65:B2
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB2BEBC21AB8C0113E180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b2:be:bc:21:ab:8c:01:13:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=a7571e0b-349c-429f-840c-fc7fb162f567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:6c:47:7b:b4:74:81:61:af:ca:c9:a2:70:
f5:e7:90:8b:5c:7c:50:08:5a:ba:42:b2:47:78:43:
99:20:56:c4:f7:3a:39:c6:26:aa:89:5a:34:e3:ce:
52:52:02:44:43:fa:3a:ec:16:5f:38:3f:ce:aa:b6:
d8:27:d4:42:97:1b:d3:c2:a9:55:57:b8:29:6c:07:
db:73:24:26:eb:eb:ee:9b:db:f7:15:a5:19:0b:bd:
db:d1:c5:67:63:15:db:33:ae:07:e1:a8:24:86:d4:
31:a2:a3:de:1d:8a:0a:58:22:14:94:6a:21:bf:96:
8e:92:3c:21:47:50:2f:de:a3:08:f2:8c:81:4c:f5:
ce:a1:e6:68:90:7f:21:5a:f1:19:19:ae:a0:cf:f8:
a5:55:be:a3:47:2e:7d:94:5e:a7:ac:73:28:3f:9c:
bd:66:55:cf:75:d5:e9:14:b1:77:af:3f:1b:0f:4b:
04:0d:e2:c6:d8:6b:1f:1e:bb:eb:fa:1e:72:1d:07:
e1:f8:a8:6a:47:be:52:52:d3:13:47:36:f6:af:61:
86:62:65:76:ed:91:da:95:b1:93:38:00:67:e3:95:
90:1d:f8:84:a4:b8:1c:9c:67:3d:b8:8d:10:02:a5:
71:78:95:c2:7b:06:f2:db:e6:41:b3:f3:d6:50:c5:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D6:FD:C5:0D:79:30:09:42:5E:71:EA:C3:84:1D:9B:E7:0F:65:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/36b6b7a1-b9d7-3a46-aa9d-578f6f75103d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:ea:06:e4:b5:bf:e5:7a:c8:8b:30:ff:3d:74:f8:49:d7:23:
03:26:6e:5b:60:8d:69:54:3a:3e:d6:7a:f0:ca:a0:28:72:59:
d6:5d:25:4d:00:af:e2:fa:6a:e0:26:91:e8:b8:75:66:06:2e:
74:8b:4b:e9:34:05:c6:85:d0:7d:c3:9b:d0:dd:25:40:3f:f4:
75:e1:03:e3:23:58:8c:1d:63:83:9a:70:cf:cf:ce:03:21:98:
ab:13:13:fb:4d:3d:f9:81:19:4f:6e:c1:f0:23:22:52:2e:39:
28:0c:d4:03:cb:d8:ec:f6:6b:63:eb:da:e0:ef:35:da:9d:2f:
51:a4:97:33:6b:21:4d:48:bf:07:e5:90:87:fd:b1:d3:2e:c6:
75:dd:f1:89:24:18:db:83:2a:55:48:4a:40:94:5b:d3:e0:f4:
96:4d:7b:ae:76:83:b9:ce:7c:cd:c8:66:16:e3:83:e4:cb:fc:
01:12:21:9c:00:2a:0d:af:4f:0e:18:79:88:75:d0:11:d2:55:
b3:9a:bd:57:6f:f0:4b:b1:3a:0e:a8:6d:81:a0:67:8a:ee:0d:
8b:cc:69:04:e3:ac:26:58:eb:19:0c:37:08:5b:22:14:e1:66:
44:ea:86:96:f4:a2:b4:d1:df:0c:8e:92:41:47:b9:a1:dc:2c:
f3:98:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:49 2025 by rpki-client