Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b45f8ae-3c0e-3b75-be2d-fc026e6d0f3d.roa
File: 1b45f8ae-3c0e-3b75-be2d-fc026e6d0f3d.roa (raw, json)
Hash identifier: p77HgkhZWNSq6Uoq4leAHYV4Cn8rOsKeDo8pBkVmFJ8=
Subject key identifier: BE:04:21:B8:CA:28:CA:9B:B3:AE:DF:70:31:FA:39:E8:35:34:E2:29
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00FC6C5C7D4BC58C3D400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b45f8ae-3c0e-3b75-be2d-fc026e6d0f3d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 40050
IP address blocks: 72.52.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:0f:c6:c5:c7:d4:bc:58:c3:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=9d258421-05be-4d61-9500-934918592c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:74:74:f0:06:43:4e:eb:07:de:f3:bb:81:
8f:65:5a:53:f7:d9:4a:f5:c1:9c:57:a6:3b:fd:b0:
3e:39:f7:96:17:ad:1e:ed:29:ab:38:07:34:c0:ba:
5c:ea:7c:e5:53:ab:b7:3e:0d:fd:70:dd:39:4b:ef:
94:5c:08:94:2b:1b:0b:2d:9f:30:49:50:1e:65:58:
35:fa:0f:92:78:f5:d3:b1:6b:87:7b:d5:a6:47:7f:
37:17:81:d1:f4:aa:70:1d:ec:e4:75:e1:93:d3:bd:
8c:22:df:cf:24:9d:49:54:73:a4:2b:cf:f1:f3:fd:
a2:2a:7e:16:24:53:69:b4:a5:d6:c7:5d:be:29:4f:
90:9e:04:0e:52:49:27:4a:57:b0:15:2a:74:59:10:
fd:f2:f1:7d:f6:a7:05:0f:d0:90:9f:c1:e7:b2:02:
ef:8e:87:86:63:a7:6d:c0:a6:ef:bf:94:76:4d:bb:
26:31:3b:94:b4:ba:e4:4a:cf:64:ea:3c:fb:47:ba:
4a:47:ef:25:b4:61:b0:c5:07:f8:fc:2e:55:3b:ab:
45:48:e5:e1:7f:41:59:85:76:75:bc:b6:7b:ae:12:
1e:55:9d:14:e4:cd:d4:9e:65:5b:d5:fa:a9:fe:b7:
82:09:81:24:65:a4:ec:ee:08:19:4d:d1:b7:2d:85:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:21:B8:CA:28:CA:9B:B3:AE:DF:70:31:FA:39:E8:35:34:E2:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1b45f8ae-3c0e-3b75-be2d-fc026e6d0f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:5b:6d:cd:ed:71:b2:ff:5c:9a:56:e1:f3:aa:39:d3:32:a4:
9d:12:d5:e1:cc:f9:74:77:a7:4e:3c:74:27:3f:c4:35:bc:dc:
b5:ac:96:6f:a7:bf:d9:6d:92:6d:27:0a:f7:80:2b:95:e2:cc:
80:f8:61:e3:94:f5:6b:c9:3a:a1:cc:c9:d5:f0:77:a6:07:42:
86:ff:1c:04:e3:c6:c7:60:85:ae:71:c3:7b:45:80:47:e2:52:
00:bd:15:af:2a:7c:85:8b:f4:09:ea:cf:f8:29:0b:b7:27:f8:
a0:06:b3:5d:6b:cc:34:5b:8a:85:57:8e:75:0c:4e:2d:88:55:
52:5b:84:6e:bc:04:1a:ad:09:5e:4e:8d:1c:c1:db:3d:f7:0b:
3d:d6:64:14:5d:04:ef:24:ae:db:0f:cd:a1:03:f2:25:ea:dc:
f9:e1:39:37:01:f1:e8:26:93:8c:f4:04:0c:7d:03:40:f6:e7:
d7:eb:35:61:d6:71:2b:5a:38:c4:91:0d:ef:6b:39:b8:ff:67:
5b:e0:b3:a8:b0:41:f8:d8:5d:7e:2a:d3:9b:c6:78:41:ca:bf:
86:76:c2:1e:d5:c0:2c:d3:11:55:58:a2:fc:26:89:09:77:90:
11:49:f9:5e:eb:dd:51:25:33:d3:d7:22:87:dd:fd:b3:9b:f1:
d9:5f:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:58:06 2025 by rpki-client