Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
File: 603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa (raw, json)
Hash identifier: 7lVdr+LqrtANYhGqhZMZ5fmHdDtbUWA1YLmVxl2X52o=
Subject key identifier: 4D:E8:63:9A:22:6A:58:0B:0F:74:E7:41:87:A3:AE:A5:02:30:45:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482A8FDE043EECEDD96C335E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 12222
IP address blocks: 72.246.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:de:04:3e:ec:ed:d9:6c:33:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=d5af2c9d-9bfd-4b73-a643-17dae40b7c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:59:5d:bb:b5:48:23:14:d2:21:b3:2a:2b:
20:80:b5:ce:67:09:4e:b9:a0:c5:8a:d6:fa:72:33:
93:95:ed:db:10:e6:de:5a:56:64:3a:b5:49:de:54:
d5:ce:60:14:87:25:e8:86:90:71:81:e8:ec:9c:1b:
68:0e:69:ee:93:d8:fa:de:74:e0:b2:94:fe:a9:0e:
43:a6:3e:2e:e8:ec:15:c8:44:98:b4:df:df:e7:e8:
c5:0c:c4:97:4e:4c:19:5f:39:d9:0a:e6:07:27:45:
11:e0:6f:c6:d0:a7:d4:53:78:de:08:15:ea:eb:95:
e9:7c:32:fb:d1:c0:35:9b:52:89:8c:74:5f:fa:6c:
31:a0:f5:82:f6:7d:cd:85:3a:8f:a1:0c:97:69:df:
ee:21:dc:91:41:ec:5d:0b:89:6a:9e:20:8c:76:7c:
bc:91:00:4c:6a:73:b7:b0:42:80:4d:eb:3f:a6:41:
63:1d:0d:f3:9b:cd:5b:73:64:01:58:92:6f:ce:30:
d8:25:f8:97:9b:94:88:44:57:c5:f0:e6:62:dd:14:
64:ca:5a:5f:7e:5a:69:8f:56:7a:17:00:cd:5e:8e:
9b:94:24:a9:b8:f1:7b:9f:6a:dc:5f:77:b3:77:71:
07:38:72:09:d0:b4:4b:a5:04:e2:bf:2f:f7:e6:9c:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:63:9A:22:6A:58:0B:0F:74:E7:41:87:A3:AE:A5:02:30:45:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d9:ce:28:7f:27:db:cd:4a:76:01:c3:4d:e8:3e:a2:3e:30:
30:66:fb:82:ef:d9:06:a1:56:c9:80:5e:d5:d8:01:29:24:53:
9c:bf:2d:0c:57:ec:9d:c8:fc:5d:bd:5a:70:a0:11:cf:25:1e:
a5:df:f1:0c:ba:53:53:7f:ca:a7:35:5a:cf:48:89:cf:6c:8e:
c2:0e:55:5f:ce:5b:90:f2:0a:a9:7e:4e:7a:c3:1b:fa:bd:1e:
e3:70:4c:11:59:54:31:70:72:11:77:61:ba:b8:39:6d:86:03:
5a:a4:fe:27:2c:60:01:14:ff:7c:ea:be:c5:28:e5:43:5f:f8:
f7:35:9a:7b:94:50:d8:31:3b:3b:28:89:49:5e:5a:71:01:14:
05:45:6c:e3:cc:f5:29:08:37:75:62:de:33:97:f5:45:27:c8:
d2:53:bf:ec:47:14:f0:26:08:ab:02:c2:23:54:a0:07:b8:65:
77:b7:4e:cd:d0:1d:44:f3:de:9f:56:f0:ce:a4:43:20:6d:bd:
49:85:8c:8d:db:d9:49:b9:1e:0e:d9:99:64:1c:a1:75:12:c6:
e8:eb:8a:42:92:5d:a8:33:d8:22:86:53:1a:a2:d0:e5:78:48:
62:6d:7d:7f:85:e7:c2:7c:08:42:62:20:67:bc:c4:00:ca:5e:
58:a4:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:34 2025 by rpki-client