Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
File: c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa (raw, json)
Hash identifier: QY/1DJSfHAD8ZlumFxQM5RmsO1ahO1W5cdxgC6zTCtQ=
Subject key identifier: 4A:5E:65:D2:D3:64:FA:3E:AF:5A:73:CB:2F:CA:8F:AE:EE:6C:98:50
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB2F8C192FC54B36B5380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b2:f8:c1:92:fc:54:b3:6b:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=ceed99a4-1776-4f11-8e7f-0defb27dd5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:1e:15:a0:b3:69:0f:02:6f:a5:6f:ce:a7:
8e:ab:94:9a:69:fe:c0:b4:0e:2e:3b:da:dc:3f:63:
93:8e:d6:f9:3c:3c:ac:aa:26:27:f4:ef:cf:62:24:
3f:50:41:2f:2f:ca:fa:22:1f:cf:e3:2f:af:38:db:
bb:93:33:65:d3:0e:f1:37:b0:44:a7:92:14:ed:9d:
04:e1:a5:e0:b5:25:4a:8b:f6:42:9c:40:90:65:fa:
c4:e9:f0:37:fd:e2:05:bd:f2:a8:18:e8:37:b9:f9:
1b:8c:92:3d:5b:d6:15:e7:b7:18:3a:be:88:8d:f8:
ce:e5:12:12:06:8d:dc:ab:d6:f9:f7:2d:28:bf:77:
52:11:88:af:eb:53:8c:2f:ad:ed:cf:d4:5c:c6:3c:
c3:5e:f9:0b:82:35:78:07:0d:f7:ff:1c:f9:d3:93:
09:f6:01:cc:99:ba:b5:58:a0:83:16:74:03:80:fd:
33:73:11:6a:7a:00:38:e1:f8:4d:59:31:81:f8:14:
5f:05:d7:81:90:95:ba:ad:39:8c:53:64:e7:f7:f1:
3a:bd:5d:6f:2d:11:cb:ed:d2:b9:9d:36:69:36:6d:
bf:80:b4:ca:80:07:c7:62:b1:9b:63:45:5c:66:69:
65:cb:bd:df:5c:74:51:b7:3e:f4:7c:f5:4a:42:09:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:65:D2:D3:64:FA:3E:AF:5A:73:CB:2F:CA:8F:AE:EE:6C:98:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:cc:c4:5b:f9:74:98:eb:14:9d:19:1f:47:68:e0:a0:36:e6:
3b:34:ca:c9:4b:b5:d6:18:b1:ff:73:dc:60:79:c8:46:d8:9b:
54:82:af:de:42:db:c8:3c:4e:22:f2:99:5a:84:e1:a0:d1:a0:
8e:b5:e7:1d:c5:44:5d:af:5c:ae:2e:78:6f:84:0f:61:f5:1d:
82:52:c4:54:07:16:3d:90:29:ac:fa:12:e4:67:80:01:2e:aa:
1c:fc:bc:f5:79:bc:23:77:15:d1:b9:a6:77:b4:ae:ef:0d:0e:
39:f8:b2:2e:80:0d:82:96:5b:df:43:86:3e:06:1a:2f:0b:aa:
5a:66:ac:f4:c8:db:ed:d0:4a:4c:9d:35:70:04:0e:77:9e:13:
6f:d4:bf:e3:d8:43:86:c3:6a:b2:31:be:fa:e9:ff:c3:b7:3e:
f2:57:63:93:22:81:aa:1a:01:35:e3:1c:5d:14:15:53:90:3c:
0a:34:d5:89:8c:fa:9c:73:9c:03:e3:e4:b0:dc:ca:20:82:6e:
bc:95:0a:34:20:f3:4f:f4:68:08:4d:1c:84:ea:38:3e:f8:05:
f6:a9:12:de:5f:a7:3c:a8:9f:36:fc:5c:8d:e2:20:3b:c5:5e:
e3:d8:28:60:72:76:9c:77:b7:ca:39:90:cb:86:60:87:1b:ef:
98:2f:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:19 2025 by rpki-client