Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa
File: 899b0c89-a566-3e19-970f-8d740c78348c.roa (raw, json)
Hash identifier: 6sffpTfHucVSsvABtdOoxP4rLDg8dieGpSSL5NVw/k4=
Subject key identifier: 3A:E5:10:93:5F:94:CC:EC:CE:82:6D:80:57:E8:71:CD:3F:9B:32:B8
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB570D763E5B2312FF700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b5:70:d7:63:e5:b2:31:2f:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=1aaba537-1f05-418f-b23b-ad06ada2ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:e6:b3:6c:3b:b7:a6:af:68:45:85:e1:9c:
de:05:f2:a3:37:09:3f:43:fe:65:91:03:a4:a1:35:
b9:ef:7d:56:b5:99:d7:ee:29:c9:4f:73:f4:5f:f5:
c1:1f:65:6a:b4:fc:eb:cf:58:91:f4:5c:07:98:5a:
dc:ed:01:bc:7b:aa:21:d0:50:63:01:2c:78:20:13:
58:35:26:23:83:9b:3a:5a:83:6a:4a:c1:b0:81:5b:
ec:5a:05:8c:f6:43:68:fb:14:e3:27:4b:71:27:78:
db:13:1b:c9:ad:bd:89:19:9f:a5:bd:00:c2:80:0d:
7b:d8:34:9b:74:26:ee:9a:4e:2d:99:43:a8:90:80:
8d:e2:4a:3d:bc:d8:64:51:62:4a:43:e7:72:3d:0d:
70:b9:df:3b:2d:ca:8f:d3:07:02:e4:93:9f:e5:be:
af:dc:f7:3d:a0:1f:4b:5a:5c:a4:3a:94:f4:d5:a0:
b9:11:7d:af:01:6e:2f:e5:fa:bc:3e:93:f5:fe:ee:
51:a4:17:d2:79:0d:69:e2:71:b4:71:10:52:cb:fd:
3f:76:b7:79:41:42:f6:97:47:73:1f:61:15:d1:18:
73:72:ff:aa:bf:5b:4b:f4:d9:db:05:66:13:0a:dc:
c2:62:41:59:30:42:93:ee:c8:f6:bc:ad:18:fd:d4:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:10:93:5F:94:CC:EC:CE:82:6D:80:57:E8:71:CD:3F:9B:32:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:18:4c:a9:89:36:f5:97:8b:08:81:dc:79:9b:6a:c9:00:09:
a5:bb:d3:18:06:37:66:e2:b5:cb:17:5e:37:aa:24:0d:81:a0:
f1:e9:33:7e:15:46:3c:a0:e4:46:99:d2:7d:cc:54:c7:17:3a:
ac:09:07:72:b0:68:ed:21:44:7f:64:d1:82:e3:f0:ef:f1:8a:
80:59:26:13:b9:41:2b:4b:ad:9d:8a:08:c0:59:a5:53:cc:d6:
c6:b9:b3:68:05:15:72:16:e7:4e:bb:8f:6e:6b:9a:7e:86:66:
bd:75:ed:c9:3e:dc:57:98:e3:aa:22:f5:5d:f8:b3:db:cf:a1:
7b:a1:f5:45:ad:ac:b2:5f:9f:58:c7:12:ad:37:30:da:22:96:
84:9f:c6:79:55:d7:72:c5:ad:8b:76:c1:c7:c9:84:53:9b:5e:
97:c3:be:f6:c9:e6:b5:96:b4:c9:e2:10:2f:2c:c4:c0:11:f7:
7e:24:50:4f:ec:03:de:fe:43:15:a4:3d:e3:df:96:d0:fa:98:
c9:3f:65:f6:74:6b:77:f7:b2:3a:44:e6:63:67:eb:31:f6:4c:
3b:73:77:dd:27:8a:8a:8f:16:11:a1:43:d5:10:6f:13:29:55:
a7:55:21:8f:c4:a0:d9:d7:99:d7:5f:55:30:b4:7e:86:de:b6:
bc:db:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:04 2025 by rpki-client