Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa
File: 2a266f96-1187-31a9-831b-3862745f1e88.roa (raw, json)
Hash identifier: JR4+wT7GxfcSGuUuIPhIaYy16qsMJ2w8VX6YZRY8mro=
Subject key identifier: 2C:01:F6:C7:5B:D7:22:18:B2:E3:6F:5D:A1:0D:09:40:7A:C1:D0:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF57389017E6BBC6A4543BC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 72.246.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:73:89:01:7e:6b:bc:6a:45:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=9c06a9d7-c67f-4292-8e9d-a007649ab69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:2d:58:08:04:9e:7d:84:e1:f9:da:41:4a:
39:c5:47:4e:8c:3f:da:eb:cf:b2:4a:49:be:3e:00:
2e:ad:28:7e:19:e2:fd:00:30:39:c9:32:12:2e:aa:
7e:e8:24:d9:b5:19:fd:b2:24:ce:d5:28:d7:f0:2c:
15:38:7c:81:cb:61:b0:fa:20:8e:d8:7a:35:78:03:
ac:fe:5d:21:5d:1d:ac:06:e3:a5:a9:c2:e8:81:f8:
ac:a2:26:9c:22:29:fc:48:fb:0b:3b:10:2b:94:dd:
d6:83:9e:33:9a:51:ed:8a:84:92:6e:d8:4e:9c:7c:
1b:41:0a:a5:7a:b3:a2:b6:58:d9:2e:d0:99:03:ac:
80:ad:7e:bc:e3:2f:cd:b3:b7:7a:69:24:ec:ec:48:
55:10:9a:7d:be:93:b6:2a:37:d3:65:f1:c7:e8:a2:
e8:6c:7a:0d:03:7c:7f:ce:28:e5:1d:31:6e:54:15:
2e:c6:26:f8:23:ac:4f:ae:cf:62:99:7a:a1:60:9e:
2a:ee:69:89:8d:da:14:20:a1:b7:db:88:e3:4e:89:
c5:6c:56:82:be:1c:53:59:3a:8d:a9:38:0a:e8:06:
de:c1:b9:5b:c9:8f:bc:fa:42:e7:14:ca:47:50:83:
a9:a2:9f:1b:27:d4:c1:40:e5:42:dd:3b:e7:18:f7:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:F6:C7:5B:D7:22:18:B2:E3:6F:5D:A1:0D:09:40:7A:C1:D0:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ec:1a:2a:29:b9:37:f5:f5:72:4c:e4:ea:b5:dd:c7:94:a5:
15:15:55:7e:b4:1f:6e:45:d8:8c:f2:7b:c2:39:87:ad:ef:5a:
1e:50:ec:e4:df:36:21:69:73:3a:80:08:22:e2:33:6e:2f:48:
19:be:cd:05:07:b3:61:8b:88:76:21:fb:54:e1:25:6e:08:5d:
71:83:65:81:de:34:29:9e:83:24:26:49:4e:0a:0d:fd:22:ff:
6a:62:a5:98:3a:54:ae:cc:c2:02:ed:f3:d4:09:6b:58:82:cb:
c0:1c:ea:88:be:24:2e:c8:a7:94:62:63:94:92:7b:16:81:f8:
c1:02:e7:2a:fb:c3:8c:c8:95:af:f6:64:4d:ac:ee:57:bd:31:
e1:27:a4:1b:0e:8f:8f:8e:14:b8:b5:5d:7d:2a:b2:f8:81:10:
c9:ad:30:34:8b:dc:06:7b:ef:d4:cf:15:fd:03:04:b9:47:79:
08:a6:19:cc:4c:72:9f:d7:f8:0e:b9:a5:7e:8e:6f:fc:c9:85:
47:4a:64:55:17:e0:25:c1:4c:7b:5a:8d:66:8c:4c:f1:3e:7c:
1f:42:87:84:34:a6:c9:5f:8e:1c:f1:8a:29:f6:23:f0:1d:21:
82:ca:b5:2a:f3:b4:0c:fd:73:04:f3:0a:a4:7e:3a:c2:35:70:
fc:7b:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:32:46 2025 by rpki-client