Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa
File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json)
Hash identifier: ZxbzNCL3xp+TqJA3d0lwLVTL3P+VBwHaklnWiEJ6Gb4=
Subject key identifier: 73:35:10:20:F0:E6:FC:19:20:07:B5:C6:85:04:81:AE:C3:6B:D6:E4
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F43285848090FB955E1614EA44C88C1B0
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 54032
IP address blocks: 72.233.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b9:55:e1:61:4e:a4:4c:88:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=52abf6ac-28c5-4714-8e96-11538c5d3818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:bf:31:e7:32:9e:26:f4:b0:5f:d6:ca:b5:
ab:27:f7:60:5e:66:44:2c:84:8b:66:23:20:c5:8a:
8b:f5:55:d5:4d:2c:e5:2e:ce:b6:44:33:8a:8c:06:
15:fa:68:1e:93:4f:83:e0:c2:1a:f8:7c:38:bd:f3:
46:15:09:00:19:a6:1e:95:99:ed:93:1f:82:72:c6:
f1:ff:e8:42:b7:23:f9:f1:83:00:a5:aa:d2:3f:d1:
3d:d1:77:32:1a:6c:80:d0:c0:22:b9:94:9c:c1:60:
f8:20:44:20:23:66:ff:53:9b:b5:2f:c4:22:5e:3c:
8c:76:e8:de:14:f5:d2:03:62:e0:cf:4e:9b:00:91:
69:f5:2c:60:23:48:2f:b6:12:e2:f0:51:04:38:38:
66:21:61:cc:57:77:00:78:2f:e6:ea:a5:7d:1c:bf:
12:5a:ec:2c:e5:77:0a:9c:cd:e8:7d:5a:d9:37:ca:
82:d0:98:b8:51:73:43:13:a8:27:10:18:32:e4:65:
aa:55:86:ff:47:b5:bb:fc:dd:c5:05:22:ac:8d:22:
92:2d:3b:50:da:5e:6f:ed:4f:12:e6:ab:a9:c0:85:
5c:b0:12:d0:64:ef:0d:d4:0f:1a:8e:62:68:29:de:
17:72:5a:e2:58:f5:89:f7:c0:79:15:48:e1:22:c3:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:10:20:F0:E6:FC:19:20:07:B5:C6:85:04:81:AE:C3:6B:D6:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.233.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:fd:2b:b7:3b:d2:10:5f:6a:c4:4b:fe:54:e0:35:0d:72:ec:
bf:02:97:82:d2:2e:71:60:82:7d:36:18:cf:0d:78:08:3d:50:
97:53:b4:99:f7:30:9a:d2:16:39:b8:25:d6:9d:74:6e:95:b7:
2a:52:37:ef:f1:c6:da:12:f1:48:ac:8f:2e:64:64:19:1b:96:
ba:53:1f:0c:01:69:45:82:06:f0:0c:f6:a7:3f:f6:77:7b:62:
51:02:08:8f:1a:4b:c2:82:ec:da:8d:db:6e:33:02:04:01:d5:
1a:66:99:c3:3f:c4:11:4a:c9:e5:1c:7e:9b:86:3e:ec:64:f3:
2b:63:e6:fa:b5:a9:81:bc:da:18:a8:8e:7b:68:1b:e5:99:16:
25:8f:41:31:18:f6:ae:63:a2:d5:24:52:32:35:c9:18:a9:b5:
53:cc:fb:46:7d:58:f4:05:57:e6:26:1c:16:75:16:2c:f5:2b:
e1:45:19:41:9d:39:93:c0:19:01:63:91:b7:fd:66:e4:6f:23:
cc:93:d8:b1:44:ee:aa:79:e2:7d:09:e7:e8:0d:47:e7:d9:30:
92:d0:69:a8:9b:69:cc:e8:13:ff:f7:78:82:d2:86:c7:e4:b0:
c8:e5:79:56:aa:c2:df:81:de:a1:73:a9:94:50:b6:e1:7c:de:
10:b4:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:07 2025 by rpki-client