Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa
File: 68125722-c619-3d95-9f85-ce112d2cc7ae.roa (raw, json)
Hash identifier: +3CikTyD9JVjVkktzbslu2WAlOQMwBLUh2vpZvVVsjc=
Subject key identifier: EE:5A:AB:31:73:DB:13:98:4E:C8:2F:11:7F:BF:BA:F5:13:3F:EB:BF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF565B2F454CADBE8AC6500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 72.246.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:65:b2:f4:54:ca:db:e8:ac:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=03da9975-1524-4ad5-8fdf-6632e14a9297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:90:02:7a:bf:2f:d9:2a:8d:6b:cf:e2:0c:
11:2f:c6:59:0f:9a:6c:bd:16:95:d9:e8:a6:58:d6:
49:9d:f2:dc:33:31:95:4d:c1:6d:a1:3c:cd:35:d7:
e1:3d:29:eb:e7:3f:d5:4a:b1:4e:61:58:b1:5b:9f:
1e:d1:25:8f:7d:ea:3d:e8:85:2f:d1:c7:c4:68:61:
f0:1a:5d:15:06:a8:ec:3a:45:a8:6c:65:7e:7a:e4:
1b:00:87:11:52:a0:00:82:01:7d:a8:4b:20:c4:79:
cf:57:a0:68:0d:e2:da:aa:31:8b:43:7b:fa:f7:7e:
ef:6e:1f:ff:c9:1d:fa:93:a1:35:cd:7e:bb:36:05:
09:af:0e:50:cc:0a:f8:75:b5:c9:59:0f:99:2b:d2:
f8:93:e2:40:be:f4:84:1b:9b:7c:30:a1:41:9e:8c:
4c:47:3a:70:0c:a5:e1:6d:57:65:a6:55:64:76:06:
1b:cf:66:2e:ec:53:e1:d2:17:c5:e6:22:fc:49:a9:
45:d5:3f:18:63:3c:18:8e:d1:47:7f:ad:6d:de:c4:
2a:6b:6a:62:06:a3:4e:2b:f8:a5:bf:b7:df:c7:8e:
ce:b0:76:34:78:4f:1b:70:ce:bf:4a:00:08:06:87:
64:45:cd:56:96:77:20:af:78:9f:6e:21:dd:f7:98:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:AB:31:73:DB:13:98:4E:C8:2F:11:7F:BF:BA:F5:13:3F:EB:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68125722-c619-3d95-9f85-ce112d2cc7ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:d1:5b:b0:9b:e7:fb:06:a5:93:4f:24:27:48:2a:e6:7a:ba:
f1:31:20:2b:51:82:76:14:ef:0e:4e:65:04:1d:3a:ae:cb:4d:
69:62:bf:3f:3e:7e:14:ef:4f:f1:2e:0f:e4:03:27:60:77:1d:
44:0a:6f:b0:bc:0b:bd:33:08:69:ee:86:92:da:4c:b9:01:dc:
27:80:55:1b:16:92:39:ce:fc:af:22:67:4b:3a:3a:c3:3c:c6:
70:d9:26:97:8c:ca:6a:9c:5a:58:21:a8:72:ef:f5:aa:b0:85:
95:27:ab:fb:c6:67:16:e4:6d:98:19:64:3b:3d:b8:2b:5d:41:
20:e5:f9:14:92:15:4a:22:51:08:6b:ac:ed:11:60:cf:88:1b:
d3:76:97:0f:2a:dc:36:15:5d:22:40:83:be:3c:7e:87:13:b2:
69:da:2a:f6:14:2f:e9:ca:b2:64:6e:63:b5:e9:e3:9a:54:fb:
17:25:b1:08:7e:ed:da:7b:03:1d:e5:74:43:0f:78:13:56:1f:
2a:e6:19:50:fc:5c:4e:be:6f:c8:46:aa:1f:66:4f:54:e4:e1:
53:ab:43:78:14:bd:01:05:ed:7e:6c:5c:e9:3b:cd:bd:9e:b9:
8e:ec:d9:f3:f2:e6:c1:b6:4f:d4:92:77:82:bb:5f:5f:c1:98:
15:f1:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:25 2025 by rpki-client