Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa
File: e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa (raw, json)
Hash identifier: dHXGcPBqaFb59fZqP2P3dMGI7LPXF0gGt1psIKYID+0=
Subject key identifier: DD:9C:E5:32:3A:B0:3D:FB:AA:92:11:DD:37:74:D9:22:30:76:93:7F
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFACC57A849D7A0E7B4480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 16787
IP address blocks: 72.31.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:ac:c5:7a:84:9d:7a:0e:7b:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=b94fcf6a-6a44-4ae1-81af-dd9e5ef1b0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:7a:49:e0:30:2a:6d:84:82:7c:a5:86:13:
d3:f1:5e:05:18:24:34:82:d7:42:40:01:99:d0:7b:
55:1e:bb:13:e9:d1:08:1e:af:7a:fe:95:9a:c2:4f:
c1:e5:e8:d0:df:f8:c1:6b:de:f6:bb:59:a1:28:ed:
d8:32:3a:d0:20:47:db:86:98:ed:96:5e:d9:d3:63:
c5:7e:5d:50:df:13:01:42:c7:cd:d5:d4:12:2a:a1:
66:9b:10:c6:b6:c3:89:50:b3:59:05:b6:d2:64:94:
5b:e0:f3:88:b5:89:28:71:67:c7:9e:b3:5e:ca:61:
bc:6a:19:90:98:34:a4:49:d3:ae:95:f2:c0:d7:09:
45:2f:67:e6:ed:37:4c:e7:e5:e6:63:e1:7f:e5:71:
3c:c9:78:e8:05:2c:45:ea:42:25:4f:b1:56:e1:12:
5b:f2:9d:8d:b9:7d:93:d8:73:a0:60:a8:51:92:66:
c9:36:80:7d:3d:8e:65:8e:07:15:09:ea:a6:51:fe:
58:b5:f8:a3:f3:7a:11:cd:13:23:75:0d:d8:9a:d8:
44:93:2b:2b:a5:61:c6:ac:5d:ea:f2:23:8e:64:44:
d8:21:c8:10:fb:47:6b:55:75:bd:7f:c9:cb:3b:61:
fe:f3:73:2e:36:c4:99:09:89:50:3d:61:96:47:42:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:E5:32:3A:B0:3D:FB:AA:92:11:DD:37:74:D9:22:30:76:93:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b6:71:fa:45:27:71:14:81:77:dc:a9:b4:49:43:4a:be:e7:
61:bb:32:58:bd:ab:1e:48:0c:cc:57:b9:87:20:d7:ba:36:3f:
af:26:00:eb:cc:59:c4:7d:ee:a5:85:3d:c0:31:3a:66:7a:5c:
7f:6e:e3:8f:2b:ef:82:3c:a3:ff:bd:db:c5:81:9c:b2:d8:1f:
70:60:30:8a:ac:f5:4d:61:99:9c:29:5e:d0:fd:86:ac:04:2f:
e4:e8:26:cf:77:16:0a:da:5b:b9:66:47:fa:2c:b8:2b:92:bf:
41:be:54:a8:7a:2c:1d:6f:ad:c8:dc:30:af:7e:74:09:f6:a0:
c3:b3:9f:f6:31:42:be:2a:dd:31:22:d4:0b:54:60:a2:b1:c2:
7a:f3:f4:b2:71:18:fc:95:16:57:ad:c3:62:2c:ae:54:de:25:
15:cc:61:f0:85:87:48:31:d2:36:c0:af:79:5e:95:9e:14:4a:
b3:03:d0:eb:42:5a:7a:53:67:88:96:54:ca:95:d2:2b:45:bb:
74:b3:ad:9f:37:da:16:36:3a:39:64:72:67:ec:f4:e1:7d:da:
fe:37:28:43:d6:cb:01:1a:ca:09:d5:dc:2e:0f:f3:ac:e7:c9:
32:cc:51:ae:41:96:b0:87:be:85:fc:18:5f:ee:ae:a2:f3:a4:
49:f0:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:12 2025 by rpki-client