Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa
File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json)
Hash identifier: 9jpvcukkbETbZyze8dqQIGQ86eh/S5xxqP2Bwg4Ay5Y=
Subject key identifier: BE:EE:9E:E9:EE:77:D9:5F:44:7B:FD:92:CD:BE:D6:39:06:31:C5:3D
Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial: 010D0C9F432858484515844CBF1944AC35ECF1C0
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 3300
IP address blocks: 72.29.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:84:4c:bf:19:44:ac:35:ec:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d7181faf-8a06-41d3-b2b4-7576b4a7c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:e8:3e:a8:16:e8:36:e0:18:f3:ac:98:89:
e8:8f:e0:1d:1b:33:8b:96:77:10:d4:68:16:27:00:
61:40:b5:f2:3f:51:e3:5c:bb:63:51:cd:c3:24:c0:
c4:49:3d:7b:63:a5:16:c0:e8:7f:d4:2b:70:8f:db:
49:bc:58:17:3e:b3:d1:77:da:bb:a9:ac:b5:5c:85:
cb:de:8c:59:eb:6f:8c:a5:49:5f:4f:1a:29:9c:b7:
bb:e0:68:0d:c4:72:bb:8a:cd:d8:de:27:4f:ae:29:
bb:f3:8f:6e:44:8f:b4:40:80:26:e3:66:c8:59:2f:
3e:5e:42:30:5d:ba:38:29:78:87:34:a6:ce:42:34:
26:de:40:29:76:43:9a:cb:bd:e5:eb:c6:81:78:e9:
c5:e4:db:8f:12:84:b9:4a:ff:e3:71:e3:d7:64:e1:
8f:e7:df:dc:ad:29:85:71:5b:db:52:44:40:be:5e:
33:3f:cf:27:fa:46:40:91:9e:f3:83:9c:be:8f:60:
8c:e7:c7:19:db:84:ee:48:91:a7:1a:23:30:73:57:
6c:c2:d7:aa:0e:0b:7c:eb:4c:db:07:e0:1a:df:e6:
16:b7:bf:e9:bf:af:54:1b:da:ed:ab:aa:1c:e0:33:
f4:16:cc:50:e6:a1:9a:6f:65:86:79:b7:e7:71:b1:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:9E:E9:EE:77:D9:5F:44:7B:FD:92:CD:BE:D6:39:06:31:C5:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
X509v3 Authority Key Identifier:
keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
sbgp-ipAddrBlock: critical
IPv4:
72.29.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:12:9b:21:a7:ca:08:88:fb:50:98:a3:0e:ff:f8:60:09:55:
ae:5d:10:be:f7:08:60:7b:62:27:30:99:6d:4a:cb:23:ca:ef:
ec:e1:b3:d4:5b:07:a5:59:f5:db:87:de:35:3b:58:61:ba:41:
3b:0c:9d:de:b7:76:df:b6:aa:ae:cb:a5:e3:5e:52:f7:38:d8:
ed:2c:71:e5:4d:da:a1:19:72:21:4a:72:5e:25:0f:ec:bc:21:
77:cf:35:0b:2a:9d:20:38:fb:55:79:8d:e3:7c:89:0e:2a:cb:
a2:b8:2a:8b:e2:8d:f4:81:67:06:f7:b7:13:08:87:52:87:20:
c5:99:3a:32:21:3f:4d:6c:d7:0f:9a:7b:fc:11:f7:86:81:07:
5d:f9:18:8f:72:b9:70:a1:0a:83:da:ed:0c:8f:90:e7:30:b7:
8c:e1:50:63:85:b5:56:d9:a2:e6:a8:6a:af:bc:e1:42:e5:fd:
4f:ac:bb:14:f8:1e:b4:dc:1f:17:1f:95:b0:a9:e4:9f:da:2c:
a8:14:77:8d:3e:5e:fb:cf:9f:9e:9e:e4:c6:f3:c6:66:88:bc:
47:cc:d1:80:7a:6e:d1:8a:bb:22:6d:2d:2a:a6:e8:56:c7:45:
d8:a4:54:64:2b:2e:df:07:cb:2a:c9:d7:2b:bd:05:95:27:b6:
7b:cd:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:45 2025 by rpki-client