Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa
File: 5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa (raw, json)
Hash identifier: uUW71WlHRnAALGfq/Yjw09akTCkFsHei0fwIZSpXQVw=
Subject key identifier: 31:FB:7E:E1:E2:A4:92:CE:9C:5C:CB:DB:78:19:61:96:76:D2:61:A9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF566B12FD1A08362038D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 24319
IP address blocks: 72.247.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:66:b1:2f:d1:a0:83:62:03:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=1fbb0bc3-9140-40fc-9cd8-d33748461478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:8f:8e:cb:e5:95:5c:b6:b2:46:a1:7b:f9:
53:9a:a6:36:61:34:1c:97:49:db:95:6d:6a:25:69:
1f:28:af:e1:85:81:5b:43:90:b2:6c:fb:ff:d2:5e:
6a:0f:5b:a3:52:b3:08:5d:75:7d:9b:b6:d6:04:b6:
eb:41:06:08:54:8e:05:2a:f3:00:1e:b3:0c:bc:92:
05:c7:85:5e:3e:ee:b8:6e:c7:b5:56:cf:9e:f3:20:
29:f3:14:11:43:04:71:4b:64:69:12:93:f2:b6:11:
3f:9d:8c:99:57:58:be:00:dc:e9:e1:7b:be:95:96:
f3:d3:0e:fe:90:18:82:74:01:0f:95:f6:4b:73:da:
9c:c3:77:0e:f5:8c:d7:80:d0:aa:e7:b8:e3:3b:68:
51:79:e6:51:a0:08:9f:34:11:6b:5d:14:f0:f8:a5:
75:fc:5d:55:f6:ad:5c:79:94:71:cf:57:fd:99:c5:
7e:20:d2:de:1c:f5:88:4f:1e:c6:e1:ac:57:e4:47:
ca:37:75:e4:e6:53:2f:52:19:7a:d3:55:86:c5:6e:
5b:7f:09:f1:23:22:b5:d6:41:3c:f9:d4:3e:4c:dd:
f0:17:d3:f6:37:b7:18:ae:d7:f8:5c:04:fc:9c:cf:
f8:69:ff:3f:44:8c:e5:8a:06:9d:f6:23:8d:3b:2a:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:7E:E1:E2:A4:92:CE:9C:5C:CB:DB:78:19:61:96:76:D2:61:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5e4e5eb2-92d8-33bd-8e45-c6d45e5c6285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b6:58:da:04:62:7d:cf:1a:d9:f6:27:49:55:d9:b3:04:8e:
d6:ef:7a:c3:bb:9a:ee:d0:fb:22:e9:58:aa:6e:20:bd:ea:55:
0f:64:f9:f4:8f:5e:f5:6d:10:e8:4b:f5:8e:d1:cd:f4:47:d8:
62:cd:d0:4a:ae:ac:2d:54:61:a2:f3:be:a2:1a:91:fd:45:34:
e1:c3:d3:bc:70:85:f5:d2:49:7f:b6:c7:5f:52:84:f6:c0:3e:
90:f3:f6:1b:42:a7:6a:2f:f3:c7:84:51:22:39:67:4c:77:4e:
ac:4c:c6:36:44:a0:89:96:47:eb:7c:dd:f1:7c:4f:cf:4a:a5:
d0:be:6d:35:f0:4e:6e:ce:ed:16:58:2d:65:09:ca:96:98:eb:
3c:aa:79:46:e8:6e:c3:b5:ae:2e:03:75:2f:48:db:97:7a:b6:
22:6b:a0:42:f5:6e:ee:2f:0f:5b:39:56:f7:70:5d:d8:6f:f3:
d7:c4:a4:54:eb:68:5c:46:d7:2e:66:ca:dd:7f:9a:f6:2c:cc:
df:43:1a:9e:50:cb:fb:b9:d4:c5:a1:f9:6f:0e:27:6e:28:fa:
c9:19:fd:03:e7:d4:60:6a:98:65:9b:d3:01:c1:a1:9d:79:9f:
0c:0f:24:f4:38:56:d2:b8:a6:14:94:ef:6c:13:4b:ae:f0:f7:
64:d8:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:28 2025 by rpki-client