Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa
File: 72ca930a-376a-3a46-86a7-480530a4ff01.roa (raw, json)
Hash identifier: DhZo0ewJtG/+FiIHcbHS1IzJ1wKewzgFGHCYCM6veX0=
Subject key identifier: B7:83:03:69:56:5E:FA:64:C3:4E:3C:0D:05:8B:10:F7:3A:56:39:01
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF56723944D0320359F1200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 35994
IP address blocks: 72.247.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:67:23:94:4d:03:20:35:9f:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=a3640c8a-e933-44b9-867b-04374bafcb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:ab:36:89:38:9d:08:41:08:68:51:be:74:
8d:a1:dc:7c:e9:f3:0f:3e:ca:fa:32:6f:02:01:e5:
47:61:d7:f7:fe:38:4b:05:92:04:ef:0f:48:74:be:
19:44:9e:10:2b:bd:80:34:c9:75:ea:f3:30:fa:3d:
4a:33:28:50:00:9e:35:c5:8a:bc:ae:02:f9:ca:d1:
e3:5e:0d:85:f6:94:ba:3d:b8:b1:cc:f5:31:4f:3d:
a2:4e:75:88:3f:e8:c4:2e:65:66:0d:ea:71:b8:37:
35:8b:d6:c9:3e:e3:2b:53:8b:87:d4:04:34:d9:6d:
0e:69:e5:3f:be:89:14:22:f7:ca:1e:40:3b:35:1c:
90:c7:c0:52:82:11:f4:54:e5:16:44:01:2a:96:b8:
19:01:f3:d7:f2:f9:34:f6:ac:7e:cd:4e:c7:2c:2b:
25:8f:37:f1:66:9b:bd:5d:d2:9c:58:4e:61:c0:f8:
c1:d7:83:d4:05:e0:df:b5:fc:94:87:f1:2d:de:ef:
71:0a:81:9a:eb:c7:cb:04:fd:8a:f1:0c:ae:7c:5c:
c3:26:1c:e7:66:6d:ae:ae:a5:28:44:cc:fe:81:05:
22:78:49:2c:86:5e:78:d0:35:bc:f0:77:1a:87:00:
0d:94:d8:a3:91:e6:e9:aa:41:90:d2:2b:eb:ce:d4:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:03:69:56:5E:FA:64:C3:4E:3C:0D:05:8B:10:F7:3A:56:39:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ca930a-376a-3a46-86a7-480530a4ff01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:99:83:43:e9:ff:12:98:35:25:f8:8a:15:0a:a3:ab:60:48:
33:70:78:ce:2a:d1:7f:b0:93:ad:b1:36:ae:f5:3b:ed:90:5f:
7c:cf:84:ce:60:03:ab:80:76:4d:54:b4:9a:c8:b7:5a:23:d4:
f4:22:1e:17:61:5a:9d:84:c7:f3:ea:2e:68:ad:45:47:b5:bb:
3c:78:0a:6a:e5:5e:52:07:64:f2:4d:63:36:d3:99:b4:46:2e:
66:7e:69:88:1b:92:48:63:7d:80:1c:7d:93:88:5c:59:c8:48:
58:7c:8c:e9:b0:fd:f3:d1:c5:b4:e9:db:7c:a1:91:97:46:b0:
9e:18:d7:e7:59:cd:f1:84:4e:35:e5:26:8d:f6:4f:cd:7a:3b:
6a:0c:f7:6c:11:47:a9:bb:c9:74:11:39:ce:82:fb:07:df:4b:
21:3a:3a:76:c6:ae:f4:4b:25:25:dd:9b:16:81:66:86:fb:c0:
aa:f0:6e:ca:8a:8c:20:28:3a:7a:22:75:f8:77:cb:a8:33:8c:
d3:70:63:8b:f5:d7:68:3a:0e:d3:47:2f:8e:58:54:3c:18:c3:
ce:a2:5e:d7:53:d3:fd:c6:ae:53:ee:e5:8b:d3:4c:c1:29:ca:
fc:9e:5b:c8:6b:a0:24:2e:a3:44:d6:38:c9:4b:97:fe:6d:f7:
bf:16:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:56:38 2025 by rpki-client