Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa
File: ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa (raw, json)
Hash identifier: 1+HqbjL8EB6AHJ4CQfw8bUTd6rpB3AY4Pqt6z2xHtx0=
Subject key identifier: 8F:A1:0D:80:63:65:05:70:10:7E:2F:23:C2:24:E4:A9:11:DA:05:1F
Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial: 010D0C9F432858489DF2407BECA2CC24B7F93420
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa
Signing time: Tue 21 Jan 2025 09:56:54 +0000
ROA not before: Tue 21 Jan 2025 09:56:54 +0000
ROA not after: Mon 21 Apr 2025 08:56:54 +0000
asID: 6079
IP address blocks: 72.1.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:f2:40:7b:ec:a2:cc:24:b7:f9:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Validity
Not Before: Jan 21 09:56:54 2025 GMT
Not After : Apr 21 08:56:54 2025 GMT
Subject: CN=a27f4ad1-a783-4050-8289-411864cd62d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:ab:9a:92:83:74:6a:8f:24:a2:d5:c8:6f:
59:50:ff:7c:4d:3c:19:43:c6:f8:8a:9d:9c:34:5d:
6e:44:ae:b0:3f:44:e1:7e:20:52:a8:a4:fc:c9:c9:
6b:92:58:1d:1e:34:0f:21:c3:f0:6a:ce:10:2d:f2:
49:86:f4:c4:55:e3:86:80:85:ec:45:02:3a:b3:26:
fe:ee:71:4d:62:77:48:a3:4f:9e:a2:5d:fa:e8:ae:
6b:eb:8a:28:04:04:5c:70:80:ed:20:af:04:c6:95:
cf:58:8f:35:48:d6:fe:95:b1:57:47:91:7a:81:83:
1b:4a:fa:d3:24:6e:bd:ec:97:59:76:6b:80:84:fe:
18:d6:69:3b:84:20:7d:54:88:93:e0:3f:e5:c2:c7:
f0:b5:25:d4:fe:ec:1f:7f:5f:3e:94:29:45:e2:95:
5a:2f:73:21:5d:f6:70:39:98:4f:78:7e:03:3c:16:
13:33:ab:ac:b0:9d:2f:e2:e8:7e:1f:83:6f:cb:a1:
60:ba:24:e5:90:74:f7:56:a1:34:df:84:50:bb:fb:
fe:79:70:33:24:97:46:db:58:6e:6b:50:56:ef:23:
31:ba:2f:a6:93:db:f3:27:1a:ce:0c:b2:09:48:19:
40:9a:f4:81:4b:62:4c:95:fa:ee:9d:4e:22:3d:ce:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:0D:80:63:65:05:70:10:7E:2F:23:C2:24:E4:A9:11:DA:05:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/ea33c2ef-d71d-3d26-89ed-3fdabf5d01fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
X509v3 Authority Key Identifier:
keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:88:4a:f4:07:6c:fa:1f:ac:7e:9c:69:99:c8:2d:cb:51:5f:
e1:6c:45:ef:75:0b:e4:3d:d4:cf:b8:b9:53:5c:2b:9c:73:36:
26:58:5f:af:8b:5b:09:ac:1d:b8:21:9a:36:61:c3:aa:e7:5c:
ad:ac:a2:96:32:e5:04:86:1d:6b:97:92:e9:e7:e2:2c:71:2d:
4e:0b:f8:a7:17:40:2a:c9:72:55:85:7d:bc:31:af:b4:7e:92:
be:54:85:c6:f6:a5:2b:f4:fc:3a:c9:37:d4:99:85:32:3c:9d:
a7:5e:0c:2c:ac:05:82:fd:f9:4b:bf:88:34:ba:c3:02:2a:07:
60:96:88:70:57:d7:e7:f4:dd:11:fc:d6:eb:7d:b2:84:b8:b7:
e7:1b:0f:89:e9:63:da:ab:37:1b:42:bb:ff:a2:5f:82:ed:e4:
03:ef:62:0a:0d:74:08:af:91:d9:06:bf:e7:54:00:f4:91:31:
32:f5:ee:47:c9:bd:b1:81:05:27:9f:55:68:b0:6e:9b:d4:53:
0b:19:37:74:4f:55:c4:90:88:e7:a2:a1:18:75:a8:54:de:a7:
a1:57:7d:b8:d5:c7:aa:1d:65:bb:1e:9c:aa:ce:ed:1f:15:59:
eb:14:90:64:47:d4:ac:3d:1b:a0:c7:fd:6b:50:05:03:64:16:
ed:5b:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:11 2025 by rpki-client