Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c5d4bfb-ac1f-3f02-9a77-df0b9cb49bb2.roa
File: 6c5d4bfb-ac1f-3f02-9a77-df0b9cb49bb2.roa (raw, json)
Hash identifier: Np6N+2mQ/a6zp0Bej89zKHgGeybpZdBZEypgnFo+oQA=
Subject key identifier: 8D:FD:52:4D:45:3B:8B:73:17:CD:54:1A:3C:16:E0:37:6B:74:3E:03
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF573A309DB8BB197FE2160
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c5d4bfb-ac1f-3f02-9a77-df0b9cb49bb2.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 72.246.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:73:a3:09:db:8b:b1:97:fe:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=1a6386c9-4530-47b1-b81f-2eea365ce447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:8a:48:47:16:4d:af:70:3d:54:7b:cb:89:
3c:31:31:b7:c8:88:a1:d4:1c:9c:1e:46:6f:b6:74:
27:9c:12:5d:05:5d:fe:1b:41:7f:53:97:72:76:43:
52:0d:b1:82:28:e3:d9:a8:23:06:38:1c:30:5a:8b:
9e:6a:f0:00:c2:db:f9:17:5f:75:41:ad:f7:f7:fd:
be:9c:eb:d8:54:64:a3:08:82:64:53:c8:0c:c1:c4:
34:69:6d:03:5b:07:71:13:ab:4c:53:6d:fc:f1:c5:
31:97:53:5d:7e:e7:fe:0f:2c:c1:f4:11:1b:6e:a8:
fc:fa:ca:be:ac:5b:75:44:16:b6:92:7d:c9:a7:e8:
18:d5:f9:ea:15:8f:2e:2a:9d:88:de:60:3c:3e:3e:
29:92:08:7d:90:da:61:4c:a5:cd:52:54:0c:04:ce:
6d:ec:81:14:e1:e1:97:94:a5:94:5b:7d:2f:ef:29:
db:92:31:ed:52:fe:2e:87:a8:8c:1d:d5:b7:da:76:
fd:13:ac:cf:a7:fb:b1:80:58:35:4f:81:54:bd:c9:
59:23:d8:b9:bc:38:17:50:54:27:48:f0:68:48:4b:
35:9f:5b:84:e1:48:99:23:e9:41:e5:9d:8e:62:26:
2a:d8:d9:1b:8b:79:23:0f:3f:47:1e:0e:cc:78:a3:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:52:4D:45:3B:8B:73:17:CD:54:1A:3C:16:E0:37:6B:74:3E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c5d4bfb-ac1f-3f02-9a77-df0b9cb49bb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:8d:8c:f3:98:ce:82:2f:cf:f2:ed:66:27:5a:d7:85:63:16:
7b:55:35:f6:b5:85:ad:54:2c:ae:b2:ea:7c:dc:82:37:8b:2e:
03:5b:26:4a:ae:c9:bb:4b:8b:f1:1e:48:67:64:4f:41:6a:59:
84:ad:ce:b8:e7:2c:b8:00:d9:22:87:85:99:5f:27:2b:8b:37:
59:d6:2a:2f:b7:38:c2:55:c6:8e:af:33:12:c1:bf:00:dd:32:
a0:4c:78:87:24:99:b5:8e:6a:35:5c:29:95:1a:f3:86:cc:6a:
45:fe:f5:04:b0:bb:01:79:7a:c7:b1:7e:e3:6b:b9:86:ee:2c:
97:64:2d:de:90:13:b8:76:18:27:6d:ed:94:4b:6c:91:bd:75:
4c:ce:b3:e9:bb:8c:29:5c:ee:62:fb:6f:7f:eb:dc:92:12:d5:
45:5a:f6:c7:cd:c4:d6:94:26:b5:04:84:ee:6e:06:a7:e3:41:
cd:ea:51:72:b4:f6:52:67:1e:46:0e:4d:fd:01:18:59:a9:50:
0c:f2:02:b5:fb:68:6b:ec:e1:65:c0:69:4b:e6:0f:ed:21:93:
d8:ef:9e:31:36:13:9f:2c:b2:89:45:d2:bc:d9:10:e2:e8:3a:
4f:70:60:1f:4a:75:8c:00:d8:18:97:8a:36:2e:2e:aa:c6:10:
10:d7:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:44:36 2025 by rpki-client