Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa
File: 60a2e865-c471-3ee9-baed-a9d2115f86f0.roa (raw, json)
Hash identifier: IHrA1cDDz1TZNuCji1X5M/P8ciAygCE8s7JPE1N7Ots=
Subject key identifier: C1:E2:CA:3F:B3:F6:34:CF:6B:F0:54:4D:A8:71:57:C5:2E:27:C8:99
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF899218C45A6279037AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:89:92:18:c4:5a:62:79:03:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=cbe0838a-d008-4ca6-9c4d-c7d8a444eea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:98:e2:15:b3:51:90:76:ce:33:86:39:85:
e2:d8:e4:ec:c7:7a:f0:87:8a:14:53:86:44:1b:96:
72:3a:1c:28:c8:5c:47:65:32:e5:2c:a4:ac:ee:3a:
c3:8d:02:74:a2:3d:c8:db:e5:d1:93:b9:66:e3:ab:
f7:a6:79:49:e7:88:fa:7d:37:7c:91:87:d8:9c:0a:
0e:2c:1c:7f:8e:4e:9e:e0:f0:73:cb:c4:a2:9f:2e:
c9:88:d3:0a:eb:14:8e:f1:e7:26:ae:02:73:03:7c:
ce:f8:7b:f4:1a:8b:18:70:8b:37:c1:57:f2:00:85:
ac:b9:76:d8:e9:dc:25:fa:32:2d:d3:45:c7:ea:f0:
52:d8:76:ab:5f:ea:72:ca:71:8f:d6:fb:f8:a4:b0:
4b:56:0c:50:ac:56:ea:36:1c:f3:c3:4d:e5:42:9d:
d2:6f:b1:ed:0a:b9:df:e9:03:c8:72:f9:91:1e:3d:
23:e2:d4:c5:06:ef:4c:56:e7:24:b8:36:37:3d:5e:
35:05:97:d8:34:69:2b:1b:e2:b4:44:c4:3f:fb:a4:
fe:98:3c:92:41:8b:74:cf:ce:15:ef:d0:42:be:53:
f0:5d:6f:40:e1:85:15:6f:78:53:7e:31:80:cd:0b:
fa:45:22:d9:26:ef:b4:93:97:0b:2a:1a:b2:db:2f:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:CA:3F:B3:F6:34:CF:6B:F0:54:4D:A8:71:57:C5:2E:27:C8:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/60a2e865-c471-3ee9-baed-a9d2115f86f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a2:d2:42:0f:a1:33:80:84:69:2c:1b:cc:34:47:18:d9:15:
60:7b:a6:90:af:12:2e:2a:5f:62:83:33:b5:ca:2d:ce:17:04:
9d:29:cb:e0:2f:0b:5f:ce:da:93:00:47:7a:1d:f9:c3:ad:ff:
ac:b7:b8:74:07:c8:42:71:42:4b:40:ac:fa:79:23:cf:95:6f:
99:f8:49:79:47:7c:bd:a6:b2:00:56:4b:d2:8a:d8:3b:54:6d:
1b:ba:4e:73:13:77:2d:80:2e:d0:f2:fe:af:79:af:9e:3b:27:
31:5e:88:27:bf:78:89:bd:1a:ec:24:5e:0f:c4:2d:ac:0f:21:
48:60:ac:a4:ec:09:4b:d9:17:43:a2:cd:56:71:46:86:09:49:
70:48:99:a0:17:3b:80:36:de:4b:2b:ec:64:06:1b:f8:79:c0:
e1:0a:b3:78:75:cf:e7:73:ad:c3:d2:8f:49:39:76:c2:03:f6:
5d:9c:10:e6:bf:a3:8b:63:a7:95:03:15:1a:0b:8e:12:32:91:
13:a9:72:af:e8:e8:65:11:a1:ac:51:b3:6a:2e:fc:e3:6d:60:
92:b7:f2:b3:83:ea:06:db:fe:06:8c:9e:f8:c6:8b:1c:67:96:
51:97:92:26:9d:ef:39:9a:7e:f5:db:e7:93:2c:f6:11:cb:29:
db:56:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:29 2025 by rpki-client