Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa
File: 8dbc2972-670d-3384-8729-8987f2639e3b.roa (raw, json)
Hash identifier: RECunq7CfBM83No9iaQb7opWjB10avWyBU+th0u8Qzs=
Subject key identifier: C3:20:1A:6C:C3:AD:AF:AC:54:11:0E:B1:A0:B2:AF:A2:BB:A0:97:3E
Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial: 010D0C9F432858483E1AB7181D503698F00C4600
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 13977
IP address blocks: 72.14.76.0/24 maxlen: 24
72.14.84.0/24 maxlen: 24
72.14.90.0/24 maxlen: 24
72.14.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b7:18:1d:50:36:98:f0:0c:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=a5de1750-587b-4603-8e64-745de8bd1c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:ca:e2:ec:92:e0:d9:34:55:4c:50:60:53:
81:d5:26:c0:1f:a0:af:32:2b:e1:0c:25:b0:67:61:
e9:7e:0f:04:64:79:f7:24:50:20:4c:6d:df:00:ca:
83:cb:2e:9e:f7:ef:cb:84:98:97:58:f0:e7:61:08:
f8:b9:97:1e:ab:90:c5:02:3c:c8:ae:e6:a6:63:9e:
16:18:7d:cf:2b:70:56:d3:f7:78:8b:3d:2b:51:78:
24:3e:0b:a3:ec:d9:66:86:6c:6d:86:2f:c1:00:52:
d3:3f:14:4d:51:51:8b:15:2a:d4:91:2e:cd:5d:bc:
72:26:fa:1b:2d:d6:19:36:5b:ca:11:9d:62:e0:d5:
12:15:88:6c:bf:65:dc:1e:db:41:46:8c:f2:36:67:
be:0f:3c:9d:9d:27:3b:ad:9a:53:87:21:34:21:71:
0e:b0:92:9e:3d:cd:0a:2a:ac:ed:6c:f0:86:28:07:
59:63:d5:55:99:44:ce:69:de:5f:81:83:f0:91:69:
f4:e2:48:a7:80:e9:d2:26:5e:57:2a:45:13:bf:d2:
bb:76:e5:4d:d3:e4:80:6c:6a:33:eb:e0:31:3e:60:
ef:5a:5f:c6:f2:84:e9:4f:90:e8:ba:63:f9:48:53:
fa:6a:fd:95:e4:61:46:61:96:17:59:13:57:0d:8d:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:1A:6C:C3:AD:AF:AC:54:11:0E:B1:A0:B2:AF:A2:BB:A0:97:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8dbc2972-670d-3384-8729-8987f2639e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
X509v3 Authority Key Identifier:
keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.76.0/24
72.14.84.0/24
72.14.90.0/24
72.14.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:3f:7e:f6:35:56:95:5c:b6:b5:80:b7:13:c4:80:53:29:d6:
78:2a:f5:40:e3:f8:f1:78:43:4a:91:57:c4:91:63:bc:46:09:
c2:65:9e:dd:04:e5:19:ed:a6:28:03:f3:41:b7:41:c8:1e:d1:
b2:e9:9d:54:62:63:42:11:7c:5e:41:39:4e:8d:2f:9d:8f:50:
5d:68:72:34:0d:20:a1:3d:80:94:3f:82:49:05:53:6d:8e:46:
5e:ed:8b:39:90:f2:4d:b8:37:0f:19:67:bf:f9:65:62:96:ac:
b2:62:95:a2:ac:7a:5b:24:0b:e8:3a:2b:63:5c:75:f3:26:60:
b2:2d:2d:3a:1b:96:86:bc:48:fb:51:07:25:c0:a2:00:9e:7d:
53:77:9e:c1:93:78:de:c1:e5:b0:32:64:31:8f:36:29:9d:46:
ea:c0:08:3c:a3:1e:b1:07:f8:35:cf:5d:e9:f0:f6:ba:4a:31:
63:63:6c:55:7c:59:86:74:7e:be:09:f6:27:1b:f4:26:e8:28:
b5:45:90:dc:e2:43:03:83:f8:ba:fa:81:b8:a9:ff:16:ad:33:
b1:f4:16:0a:17:73:84:41:5c:a9:0d:26:0e:06:7f:1a:f8:8b:
38:85:e0:3a:57:84:2b:04:34:63:2b:f2:55:45:12:8d:86:77:
4e:f7:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:02:07 2025 by rpki-client