Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa
File: 4e8cc899-3135-3def-baf7-7434251d5fc8.roa (raw, json)
Hash identifier: /USo60I37tYoAyKXLI03Upf89veOyKMjlf+JxeJUSrY=
Subject key identifier: 20:4F:D5:74:FD:EB:B4:F9:DE:53:17:15:00:03:26:A8:1A:59:12:BF
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF8CA42F87F728894DC380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:8c:a4:2f:87:f7:28:89:4d:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=0c129391-4c04-4a78-9ac6-29e89ce4aa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:5d:76:94:d1:70:cc:16:78:0d:86:9c:f5:
42:81:58:10:6a:6d:89:71:5e:04:bf:e0:1e:71:65:
99:3f:f2:26:1b:6d:40:fa:43:79:6a:ba:d5:09:b8:
53:39:2e:13:62:1a:51:ff:65:5a:8f:e9:58:98:fc:
2f:c5:98:8a:71:8e:42:b7:87:2f:c7:70:08:f1:dc:
3f:60:64:f7:ad:6a:a0:8e:b7:f3:d8:99:47:c6:83:
f6:f5:d4:9a:0e:dc:ea:93:bf:7c:37:22:e6:76:f2:
50:68:31:7f:60:f3:fa:5d:06:1b:5a:52:f0:20:11:
4e:43:e4:65:e7:8c:2b:63:26:80:3e:d3:6b:cc:50:
92:2d:19:99:f4:d2:71:27:c3:22:25:24:57:f9:e7:
71:c8:25:c2:b2:3e:24:01:fd:c9:7d:e2:e3:fa:ee:
27:19:ef:f7:b6:09:a3:36:82:46:ea:8e:ce:95:42:
f3:b1:04:79:91:72:dd:ff:a8:a5:35:4e:e7:75:42:
b3:e9:8d:3b:4d:35:f5:3f:cd:b5:74:e6:c8:99:c4:
65:07:8e:2c:9a:a0:2c:d8:85:80:c2:13:c3:20:b2:
f8:5e:7e:51:f7:27:97:cb:53:b6:12:3a:13:df:34:
2b:0e:83:14:78:3a:c8:6d:bf:ce:4b:b6:75:c6:42:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4F:D5:74:FD:EB:B4:F9:DE:53:17:15:00:03:26:A8:1A:59:12:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e6:50:2c:21:18:d5:90:b5:d1:82:4a:d6:f4:12:80:7f:8c:
67:9b:33:63:ad:5f:3f:c6:9d:a5:24:1d:5f:43:56:52:4f:85:
a1:a9:af:62:08:b7:05:7e:c0:b6:0b:50:1b:8d:a3:21:dc:11:
35:99:23:ad:3f:5a:81:6d:62:2e:6c:08:5b:4b:b2:b1:be:a8:
b0:05:83:3f:be:1e:ed:98:27:d1:db:94:8f:c6:ac:11:b1:65:
ec:94:d1:0e:9b:fe:d7:4e:3e:40:87:c2:5c:a4:8c:4c:6b:34:
68:b9:c9:4a:05:b1:83:bd:62:33:bd:bc:38:eb:5a:38:9e:2d:
0a:7a:eb:ec:ca:18:8f:d9:5e:79:57:ae:10:5e:0d:59:f6:0f:
4d:41:49:fc:dc:66:1e:d2:25:a0:48:96:e7:75:8c:8c:94:9f:
5f:94:46:75:6a:ff:86:b9:8e:5d:bf:84:64:3f:3e:53:9c:23:
0a:2a:09:1c:ef:6a:9d:9e:8b:46:4f:2e:ee:89:9b:ad:92:bc:
9e:89:9c:45:b6:3b:64:2c:d3:ed:d0:22:b1:ea:c5:cb:32:61:
6c:b7:f5:d9:76:90:2a:3c:a5:78:fc:d7:c5:10:02:fd:45:42:
a7:46:95:80:7d:5d:19:7a:c3:cb:ef:4f:b1:80:0e:43:ed:30:
69:eb:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:56 2025 by rpki-client