Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa
File: b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa (raw, json)
Hash identifier: oFT01+/5XCz+spdcPaGPMfNnGSvucXMptvt0gjbAwnk=
Subject key identifier: 9D:20:6C:33:A2:54:A5:78:E0:9E:45:03:42:C7:A7:90:53:15:B9:BA
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB491812D3DA02FE7A980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b4:91:81:2d:3d:a0:2f:e7:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=bc6e0e3b-bb2d-4968-98d5-e16f13666931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:0e:dd:b7:1e:ef:41:af:8c:75:e1:1d:b3:
49:21:70:f5:a1:76:a5:bc:b4:56:ac:fb:ca:5c:9d:
d0:52:55:a1:f9:f0:94:c2:b4:62:0e:ea:48:04:2f:
a7:d5:d0:52:1f:9e:5c:d8:ba:59:aa:7f:40:0d:87:
e5:e0:cc:f0:71:73:3e:17:57:f2:3e:03:07:53:33:
f5:70:5c:f8:e1:ee:cf:fb:63:cb:ae:11:0c:a8:27:
a2:74:a9:a5:9a:a8:09:60:5b:cf:4c:36:17:0f:91:
33:a7:1c:00:06:7c:ed:5d:29:09:8a:98:40:b8:36:
73:cb:bd:8e:40:22:43:0e:50:69:9a:ce:1f:56:11:
dc:1e:77:ec:ed:14:4d:52:df:97:bb:82:e1:7b:0c:
6c:38:c6:f2:d1:d0:f5:95:cd:fd:3a:5c:b8:3d:75:
04:c3:30:2d:a5:16:46:79:6d:d8:39:9a:28:8c:d4:
b9:72:46:8e:29:c8:f3:7f:68:b4:64:f8:ee:00:3e:
5e:09:7a:67:d9:45:9a:96:88:ad:0f:2e:38:14:71:
93:65:99:f6:a5:4c:23:66:f6:ce:18:9c:0c:d9:6a:
ce:ca:68:cb:30:57:d1:fe:96:79:63:3a:6a:2c:2f:
63:bf:62:85:1e:07:76:54:fe:64:a4:29:2a:24:6c:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:6C:33:A2:54:A5:78:E0:9E:45:03:42:C7:A7:90:53:15:B9:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:14:5d:27:2f:c1:42:36:0d:d3:7f:42:fd:69:40:96:74:8f:
45:d1:bb:7f:b2:81:e2:ae:ff:b7:20:22:e3:c0:1d:0b:f3:66:
91:cd:78:df:25:99:6f:32:d0:84:8a:2b:f8:26:a4:70:cb:af:
0a:2b:9a:97:6b:26:7e:b2:df:82:6f:c0:ff:93:3e:0d:81:9b:
00:e1:3f:42:88:71:e6:eb:8d:19:31:65:1b:b5:46:69:e7:89:
c9:9f:1c:e0:a0:e5:64:01:ab:40:30:1a:ec:ed:4f:6c:c0:65:
79:b0:c9:18:f4:47:0b:5b:6f:4a:48:e1:0f:5f:28:37:b0:aa:
72:2b:9f:1b:17:db:23:b9:44:bd:1b:1a:6b:32:43:c0:12:fc:
77:09:00:96:52:93:ec:0d:b4:67:0d:cb:6b:c1:e7:1d:94:35:
50:7d:4f:79:60:b8:61:72:9d:eb:c3:a0:9a:6f:2e:41:94:27:
0f:d4:c8:15:f5:f2:e7:10:bd:e3:e3:ed:51:70:3d:0d:d5:65:
4b:11:cd:86:0a:dd:83:06:a6:95:aa:02:b6:8a:67:ea:95:c8:
9b:5c:ef:41:ef:55:a5:81:a3:6c:01:c6:9c:9a:dd:88:66:87:
0f:57:bd:ca:69:4b:ab:ca:b7:d0:04:37:70:2a:79:53:87:3d:
e1:e0:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:48 2025 by rpki-client