Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa
File: e48e6e23-43db-3cf8-b997-18f21cdd4538.roa (raw, json)
Hash identifier: jzX7SD6gaLCdL6WLvdyDTUOq97AFAwfBWC2xVpee7Ho=
Subject key identifier: 64:B8:46:10:5D:CA:5E:10:3B:F3:78:AA:D6:40:58:7E:CC:29:38:E3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858482BF566DAE971BF0DA40B54F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 72.247.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:66:da:e9:71:bf:0d:a4:0b:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=f28827fc-3ee0-42c1-a106-de18b21c68e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:8f:4e:db:4c:6c:86:bc:70:bc:82:c2:fd:
e4:82:f5:4d:82:1b:57:c9:9b:13:1e:97:be:af:67:
5c:4b:09:0f:63:e9:4f:66:31:68:cb:af:f2:49:9e:
9f:27:0a:1f:a9:c2:03:75:1e:46:1a:0e:35:04:8e:
c2:b0:0d:41:7e:bb:2d:29:41:93:14:e8:19:33:22:
cb:ab:54:e3:e3:ee:bc:2a:65:f5:30:3f:f2:91:3b:
24:cf:46:4c:5a:87:dc:1b:6b:b9:fb:22:69:fa:f7:
e0:1f:e2:50:bb:05:8d:37:27:13:c0:8f:a3:df:43:
00:31:d5:7c:ee:66:2b:f3:29:22:e0:64:43:4a:a5:
0f:aa:a1:75:20:da:75:0c:dc:1d:04:aa:95:09:6b:
dd:8a:93:02:a2:b4:0f:d6:bc:9c:8e:b6:d1:02:73:
d8:f1:8b:67:d4:3d:13:f6:2c:08:4f:6f:d5:65:e9:
71:9c:d9:53:3b:b2:7f:99:be:e1:3e:2b:ef:47:8f:
25:b1:48:ff:b1:0a:6a:ec:c3:a9:b2:f5:f6:01:37:
22:d1:c1:b2:20:25:3d:ec:5a:12:41:0b:be:65:d8:
bb:37:73:d4:65:fe:40:97:98:f8:0d:ad:4a:02:41:
59:b5:5b:58:79:e2:b0:62:fe:4a:8c:d4:2a:f7:02:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:46:10:5D:CA:5E:10:3B:F3:78:AA:D6:40:58:7E:CC:29:38:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e48e6e23-43db-3cf8-b997-18f21cdd4538.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.247.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:72:03:f8:04:11:35:ed:e3:69:eb:c5:c2:5d:60:d3:01:43:
6f:42:0e:29:0b:e1:35:4b:6e:b6:76:7f:58:90:be:02:2b:bf:
28:03:47:4d:ac:71:c4:40:70:ce:ae:0b:b4:58:a9:b6:95:d7:
a5:90:99:f7:e9:c1:a3:0c:2e:0c:88:b3:52:e8:4b:22:fb:af:
c0:17:ee:9c:7b:bb:27:52:b7:43:33:40:ea:11:c0:a7:68:1e:
94:51:1e:3f:17:47:60:f3:37:c7:5b:cb:f8:ff:d7:0d:40:49:
73:f8:55:58:0e:ae:bb:a1:fb:ce:23:a0:ed:03:f5:95:86:ba:
2f:56:2a:8f:08:b8:8d:a2:4e:91:2e:78:dc:ea:ee:95:ee:a2:
cd:95:37:3a:86:54:e1:0b:66:87:48:7c:6d:ed:f2:af:08:1c:
f5:96:bf:40:90:3e:20:39:6c:e3:69:93:9b:c4:3f:ee:53:61:
f1:72:77:c6:55:d3:44:3f:8f:16:f9:27:b4:6f:e1:e4:88:cd:
30:9a:39:bd:b4:f1:e0:58:ad:27:b6:6b:ac:8c:a1:86:8b:72:
b1:da:0f:3f:b5:6b:73:53:f7:d5:83:18:86:cc:ff:88:fd:f8:
0a:8d:68:1d:e7:64:71:df:e8:22:2b:3c:50:26:f7:0f:db:f4:
4d:6b:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:14 2025 by rpki-client