Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
File: c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json)
Hash identifier: 1D0O5o+2G1gJwnjurtAnxrtgUTraTTqsOLfed3VwYLM=
Subject key identifier: 3B:46:65:E7:46:A7:52:E6:6F:9D:C4:92:E8:37:F7:43:85:68:3E:36
Certificate issuer: /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial: 010D0C9F432858480BDA70109FC3D5B8A5D59300
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 72.1.32.0/21 maxlen: 21
72.1.40.0/22 maxlen: 22
72.1.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:70:10:9f:c3:d5:b8:a5:d5:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=4cc8b610-ed56-4018-882e-bc24c72fe64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:ea:fe:7a:93:03:fa:c0:7d:83:68:03:5e:
34:87:cd:76:be:6e:55:5e:f9:96:a4:7b:76:18:c6:
6b:9e:b1:0b:ff:aa:a1:90:42:3c:a9:c6:3a:df:9b:
4e:53:33:9d:3a:e8:3f:cf:8e:ee:4c:a8:94:02:c3:
6a:98:ce:53:f1:c4:97:06:4a:4f:bf:bd:9b:de:0f:
84:4f:0e:ef:ca:ac:0e:6f:7d:60:cc:7d:bf:0e:d6:
51:22:d6:a2:32:04:a8:c1:4c:56:25:39:1b:70:12:
a6:da:7d:6a:e1:7c:39:fc:21:14:ae:33:3b:7f:bf:
57:43:36:95:20:ec:0a:61:d9:2e:33:7d:39:cd:be:
63:df:a1:c3:ae:80:98:d7:6c:22:c2:fa:42:62:b7:
a6:ad:c5:c9:f0:65:31:f8:92:a8:f0:71:97:2d:a6:
b8:c0:aa:13:22:7c:fd:2f:27:a1:31:33:c7:cd:0f:
e0:af:7b:a4:48:ff:f3:7c:90:4d:27:4a:9d:11:a2:
ed:11:de:fa:16:9e:87:a6:3a:26:df:db:36:72:72:
6e:3b:87:39:44:c8:58:a7:d8:c3:5a:d8:be:07:d3:
49:67:1f:25:2a:56:67:9d:fd:d9:47:8f:3c:19:14:
67:63:72:dd:9f:18:69:9c:e1:bc:b5:c7:46:d7:8e:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:65:E7:46:A7:52:E6:6F:9D:C4:92:E8:37:F7:43:85:68:3E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
X509v3 Authority Key Identifier:
keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
sbgp-ipAddrBlock: critical
IPv4:
72.1.32.0-72.1.45.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:05:36:70:da:5c:e9:ec:94:67:32:0b:c3:9e:2d:47:92:f0:
16:19:9a:66:1a:99:91:65:fc:0f:14:64:b1:3f:81:3c:43:81:
57:7a:c2:24:fa:43:2b:87:71:c2:ff:c9:a0:89:67:3a:4a:43:
6b:55:93:fe:13:38:09:9e:20:3a:e2:4f:8a:3b:fc:d6:e8:56:
58:1d:d4:4d:74:2b:c9:c1:16:b2:72:32:bd:4d:66:a3:33:d0:
a1:55:98:c6:00:f8:0f:dd:82:ad:b6:11:ba:f3:0e:42:ca:18:
8b:de:c0:e0:ef:af:1f:73:07:69:11:0a:d5:8f:9d:43:c6:7b:
92:94:b4:05:0b:36:ea:a5:cf:dd:05:1a:7c:1c:c7:c9:8e:ba:
43:41:b1:9c:bc:13:e8:2a:81:9c:f5:a4:29:9a:78:16:6d:88:
c2:32:c6:3a:26:7b:2b:fb:72:2a:4e:62:3f:07:b1:75:c3:f7:
e6:6c:78:32:9c:ca:35:e7:cd:18:21:ec:91:fb:f5:19:71:e1:
e2:25:ed:3f:a6:d2:08:f1:8d:93:1f:77:a9:d8:0d:ff:ff:d4:
14:89:8a:19:f1:0b:78:92:57:ed:21:0c:25:a7:e4:12:8a:11:
87:d3:d4:ac:da:9b:5f:54:ff:54:b9:67:fe:cb:23:33:46:9b:
21:78:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:34 2025 by rpki-client