Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa
File: fe9b230f-914b-3f3e-ad92-959d69c0a596.roa (raw, json)
Hash identifier: W3Q1cpwNTWpEjefb6sB0r4RVHqwmx5hslos6wZL5lAo=
Subject key identifier: AD:BB:47:1F:31:91:15:0B:C1:2F:51:29:84:7E:1E:89:36:96:5E:3A
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AFB3C51AD02E78F8453300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 33363
IP address blocks: 72.31.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:b3:c5:1a:d0:2e:78:f8:45:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=639e3c19-66ab-43d8-99b3-d432c0f931be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:44:82:19:f3:14:f1:b5:15:e4:13:8c:ec:
bb:80:d6:65:dd:c1:58:33:ae:0b:de:a3:68:1c:e2:
34:af:f9:cb:11:db:7f:93:c8:77:0b:d4:a8:08:bf:
c7:52:b7:98:a6:49:15:f2:91:5a:72:6d:cf:1c:4e:
02:79:cf:f3:03:44:31:db:21:7c:6f:c1:13:94:6a:
9b:98:0f:fb:5e:e7:cd:b3:05:02:d4:ce:34:d3:37:
64:51:86:70:a6:18:fb:bf:2b:ff:7b:03:6c:81:19:
d0:dd:31:76:81:7b:69:b3:a6:a3:5c:05:e0:5e:02:
7c:7a:82:4b:9c:d7:99:c9:9f:47:05:7c:cc:86:b3:
e3:b4:aa:5c:3a:5a:16:09:6f:06:e3:a1:65:1f:2e:
52:29:5d:79:b5:db:5c:cd:a0:87:6b:56:f6:f0:e4:
d1:24:24:19:80:ca:09:30:81:31:2f:30:b3:d7:b2:
9e:fa:be:0f:f1:ba:64:18:aa:6f:16:06:a6:d7:62:
dc:17:00:6c:04:33:9a:28:91:7c:02:1f:22:74:f2:
ef:60:89:2f:db:ed:a6:59:7a:d1:fc:37:b3:00:f2:
98:c7:0d:ed:4c:8f:ba:9a:62:a3:44:14:b3:9b:f1:
78:45:d1:74:23:4d:d5:14:fe:4f:51:40:9f:1c:86:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:47:1F:31:91:15:0B:C1:2F:51:29:84:7E:1E:89:36:96:5E:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fe9b230f-914b-3f3e-ad92-959d69c0a596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
72.31.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:25:40:75:fe:eb:fb:ea:40:bf:17:12:97:9c:75:d1:80:29:
77:cd:a4:77:2d:3a:0e:69:f8:00:58:d6:05:08:99:1b:a6:f6:
23:b9:44:17:f3:71:17:cf:5f:09:5c:c2:bd:6a:85:ff:6e:64:
df:ab:77:8d:c9:c0:8f:be:f5:50:e5:51:74:ad:60:26:b4:64:
57:ee:54:26:9d:80:70:8d:4d:3c:92:a3:9d:ed:ac:8f:2b:93:
43:41:4c:c7:a6:6a:18:33:58:90:67:4d:71:ad:7a:ce:de:e4:
49:16:97:96:7e:f3:3f:da:e1:2b:4a:64:39:a7:bb:cf:a9:71:
f1:46:4a:a6:92:7c:d3:4d:ab:94:be:1d:34:2d:0a:4e:26:55:
57:c3:c9:88:89:f8:16:df:20:bf:32:23:9c:87:18:31:cb:e1:
14:75:46:c5:dd:1b:fc:54:90:91:24:58:f3:83:d8:c9:aa:df:
6b:14:ae:fe:a4:93:a6:bd:52:34:5a:00:fd:c4:c2:2c:a1:bd:
57:13:f4:62:66:0c:bc:4f:f3:bb:28:5b:27:96:d5:13:a0:ac:
66:db:35:db:9f:c6:cf:d0:3f:a6:95:76:f5:19:e9:d1:9a:d5:
1e:80:0b:fa:ff:89:51:ea:c1:87:1f:59:4e:76:e3:e1:d5:18:
40:99:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:26:44 2025 by rpki-client