Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa
File: 903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa (raw, json)
Hash identifier: KK0jsUdMy6fC8nC3QGVFs6cIkzPH7zcjajlh4KLevD8=
Subject key identifier: 0F:5D:26:13:18:44:72:FC:B5:89:FB:49:87:3C:E4:D6:6F:EA:CC:22
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584824FA917FC44A044CDF525B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16625
IP address blocks: 72.246.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:91:7f:c4:4a:04:4c:df:52:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=397ea6c6-88c5-439b-accd-6e2b7c04e0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:a5:04:62:03:90:7a:ad:8d:ef:fd:48:a8:
2b:86:83:17:ed:a4:ff:9e:6d:4c:7d:af:a7:80:a2:
a8:65:0f:0a:56:97:a5:90:16:71:4d:35:bc:1a:5e:
95:fa:17:a8:fc:3b:67:6f:f7:7b:1c:0b:71:92:74:
a6:1f:ad:7f:3e:5f:92:82:4a:53:f7:af:71:f9:66:
e9:1f:66:ba:f5:ed:ec:b1:b2:74:b5:50:48:55:ef:
4f:05:bd:81:fb:bf:71:17:26:12:b2:84:8c:11:59:
28:38:a2:49:a8:ae:b2:82:25:5b:e9:6f:ea:c9:a0:
e9:7a:93:4d:3e:d7:f3:50:35:1f:4c:4c:4d:34:89:
8c:09:76:28:21:f6:5e:1e:c0:12:83:42:70:27:b7:
66:37:3f:57:c9:f4:54:4f:e9:7b:de:8e:06:7d:58:
e1:1c:de:1e:a1:80:fc:9f:50:a1:75:84:9e:9a:60:
a8:bf:23:de:4e:7f:4f:5d:10:ae:f6:1d:14:c5:58:
fc:32:af:6b:9c:02:42:46:98:ae:2c:91:0d:1d:d4:
78:8a:95:47:5f:22:59:bf:96:b4:c5:4e:ef:04:c8:
62:b8:a0:d3:be:ae:97:3b:9f:78:5a:8e:04:d7:14:
2b:34:4a:5f:a9:a0:b3:40:d8:4d:8f:89:aa:c6:73:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:26:13:18:44:72:FC:B5:89:FB:49:87:3C:E4:D6:6F:EA:CC:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903906b2-b483-3cef-8d4e-b15b9bf1e0e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.246.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:33:94:f3:26:be:fa:4a:ad:35:36:95:a0:47:c1:d4:39:99:
b3:56:d2:88:7c:72:ea:aa:1a:4b:8f:91:c6:43:d9:67:88:b0:
49:b0:3c:0c:b7:2b:60:61:cf:52:e2:15:de:5f:e2:fb:dd:30:
4e:35:21:d0:c6:69:ac:16:e6:51:49:68:91:cc:c8:5d:a7:a3:
1d:40:79:f7:c3:ae:ca:91:5c:f1:97:4f:ce:fc:31:fc:ab:5d:
3f:a7:20:a2:2b:6f:31:4a:f5:98:41:33:fe:54:a7:c5:f1:8f:
0e:b4:7c:2e:1b:00:10:fa:9f:58:b0:2a:97:03:43:06:a3:56:
1f:4f:4e:e5:24:ce:60:79:67:b6:e2:15:f6:cc:45:ea:80:73:
d9:d3:2f:70:14:12:72:c6:ef:aa:05:1e:ef:35:36:26:9a:ee:
76:e1:d8:d2:37:2d:91:5e:e0:67:b0:13:c1:f5:96:9a:71:2f:
f6:b6:f5:2e:93:7c:e1:a8:fb:1f:59:6d:8d:c5:87:2a:7a:67:
87:54:17:d5:b9:d9:bc:81:e1:ac:eb:a8:1f:69:7b:f5:d9:3b:
61:93:b8:73:b6:d3:30:1b:30:16:f6:9f:2b:1f:b6:01:50:2b:
8e:c1:ef:e3:2b:fa:ff:8c:14:cd:b7:d1:68:f0:03:bc:a2:69:
05:86:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:39 2025 by rpki-client