Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa
File: 3b50859c-6c1c-369b-8147-39e53c586764.roa (raw, json)
Hash identifier: zy0ylX9JBMN1IO7BJ67vV/Ql82TTXoY4LTDZhJNx7mE=
Subject key identifier: 30:79:BD:78:74:57:D9:43:85:98:79:F6:A0:0B:D0:C4:F2:C5:48:8D
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8C2919F0C8B98143BBC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:8c:29:19:f0:c8:b9:81:43:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b9739a66-818e-4b6c-a16e-7fd9973729af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:8f:1b:8c:2a:77:0f:df:ee:9a:7e:99:99:
fb:c3:d7:84:dd:8a:5b:02:b6:a7:c6:fd:47:e5:8c:
f8:46:ac:bb:9f:b7:42:26:d4:0b:18:85:1b:5c:73:
73:5a:b8:f7:c6:67:52:a2:5f:1e:3c:87:81:8d:40:
70:ac:14:28:71:e5:31:85:b1:8f:60:bd:f0:a3:4e:
7f:52:5d:12:06:74:76:1f:ee:3f:b2:f4:30:83:76:
68:90:e2:db:63:61:8d:26:18:a9:88:8e:33:18:b0:
f0:53:ff:0a:35:bb:da:94:0b:9f:e7:f2:cf:24:c8:
28:c5:a3:b7:91:51:c1:37:da:29:6c:3c:46:17:14:
43:11:92:bb:31:d6:66:53:da:6a:65:57:81:0d:79:
97:d7:4e:64:43:e5:6f:a1:41:93:2e:e2:94:30:a5:
99:83:d2:35:57:54:c3:5e:c1:c2:54:33:58:02:3a:
17:84:16:c0:13:a7:9c:1b:e6:ef:e2:ca:ce:41:69:
12:7e:46:6a:9c:bd:72:39:4c:15:db:ce:33:2f:be:
97:4b:77:1e:44:dd:4c:5a:00:65:78:ab:25:20:36:
34:f1:96:05:eb:31:2e:46:bb:bc:b7:65:68:1a:e7:
0e:3a:3a:d6:12:ec:6b:1a:6c:e8:7d:19:ef:04:7e:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:BD:78:74:57:D9:43:85:98:79:F6:A0:0B:D0:C4:F2:C5:48:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3b50859c-6c1c-369b-8147-39e53c586764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f7:c9:b0:76:bd:f4:fc:88:a4:fd:00:4f:82:4e:f0:6a:f7:
21:ac:5d:7a:0c:08:f4:1e:10:42:03:6e:d5:c6:5f:76:5c:c7:
0e:19:57:f4:98:51:3a:c0:a1:ca:64:f0:f6:51:9b:fd:94:0b:
00:d3:16:f7:74:6e:00:0e:46:c3:9f:f5:02:17:27:c7:ce:e1:
e0:5e:e7:a1:c3:96:0d:9e:45:77:fa:83:95:a6:77:8c:5e:fd:
a4:9d:0a:c3:5f:f0:06:b1:5f:fd:6a:72:ce:fe:76:8b:47:00:
c3:59:bd:17:63:b9:dd:00:26:03:55:ee:9f:01:d7:19:64:63:
b3:13:89:60:ad:10:8b:3b:14:c1:6e:a5:8f:4f:24:4d:ab:33:
4a:45:d9:72:ee:e0:98:07:c0:b3:30:3a:34:36:02:1f:7e:fa:
81:d1:32:e6:db:6d:15:64:75:fc:43:05:f3:31:51:38:5e:08:
7a:0e:45:e0:15:75:e1:ac:a3:55:fe:50:27:9f:d4:13:be:f9:
02:5d:30:33:5a:3b:43:8d:d8:46:f3:64:7c:56:41:ac:87:d2:
65:dd:b9:e0:ac:92:9d:e8:4b:e5:5a:d9:19:4e:4f:d6:38:0e:
02:bc:9c:17:55:28:d9:5c:03:82:29:a5:36:be:52:1a:88:d3:
2d:14:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:47 2025 by rpki-client