Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
File: 15de4dc8-a657-3baf-8d71-7563142b8734.roa (raw, json)
Hash identifier: v3zngNXg+JSdl2z9jlAK5rfbBO7vCg0+U97/1iuOPLs=
Subject key identifier: 8B:17:B9:76:E9:69:9C:51:5E:43:BF:94:90:E0:FD:3D:54:93:42:E3
Certificate issuer: /CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Certificate serial: 010D0C9F43285848037B6B8445A10F9EEF6E2800
Authority key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 11708
IP address blocks: 72.22.208.0/20 maxlen: 32
75.98.112.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6b:84:45:a1:0f:9e:ef:6e:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=cce6ded5-aa9f-48c8-a91a-1838f7cb2e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:d6:d8:e1:ae:91:3c:68:71:57:ed:a2:08:
7c:7c:78:63:e4:20:8f:ba:99:7e:fb:df:f7:08:5c:
8a:e9:f0:c5:17:92:ab:ed:12:b5:6c:85:30:1a:59:
e8:ea:8c:ca:44:66:ad:e0:fd:82:b1:24:9e:af:81:
37:b3:48:20:5a:ff:0f:0e:ce:d0:e9:29:40:ca:fc:
b2:d9:f4:36:3f:c6:eb:f9:9a:2c:5f:83:a2:8e:23:
86:e3:7b:04:80:3b:34:92:1c:9b:88:2e:d6:53:ba:
83:a8:fa:4c:be:bb:89:b4:06:82:07:35:e9:b5:7e:
27:ce:b1:3d:08:f1:89:16:6f:f2:5f:8c:21:8c:5b:
50:c0:ed:cb:a5:20:e9:d7:e0:2f:5e:96:a2:f1:fd:
58:17:aa:11:2a:cb:f2:d0:fb:3e:e6:71:09:1d:a5:
72:3b:61:6a:15:78:75:ba:f3:b1:65:df:90:28:6f:
08:ee:6d:96:39:da:c9:15:d0:24:c1:50:f4:43:34:
9f:bb:39:5c:9e:39:e4:7c:88:bf:a0:62:06:b5:d7:
51:8f:48:80:cb:19:ce:f2:b6:db:15:b2:37:f3:70:
a0:d4:86:94:ed:ae:82:52:8b:1a:f5:ce:7e:19:6a:
d8:89:2a:58:e8:64:56:15:ef:6a:83:3c:66:38:86:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:B9:76:E9:69:9C:51:5E:43:BF:94:90:E0:FD:3D:54:93:42:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/15de4dc8-a657-3baf-8d71-7563142b8734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.crl
X509v3 Authority Key Identifier:
keyid:02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.208.0/20
75.98.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:dd:af:70:2c:dd:ab:74:60:93:8d:e5:3b:97:51:7a:f3:34:
6a:df:16:1d:3c:1c:7c:e5:68:15:3b:a1:2d:db:e7:b9:97:36:
bd:09:ac:4f:e1:d8:83:9f:4d:2d:a8:f0:19:29:97:23:43:86:
d3:8e:ce:7d:3c:ff:79:35:ec:41:05:7a:b8:d3:48:1f:ca:d7:
2b:af:5d:ca:ff:2b:44:83:5a:82:9d:08:3c:13:c3:bd:1d:42:
27:db:97:b4:3b:a0:54:69:e2:ae:63:8e:98:15:25:5b:14:99:
e8:48:cc:ab:10:3f:88:1f:17:4a:4f:26:91:90:10:e5:70:2a:
c2:40:32:bd:bf:26:d8:09:32:fd:8e:b2:4f:35:8c:a7:ad:20:
9a:eb:6c:55:6f:58:a9:e8:82:30:d9:14:40:08:9d:01:f9:db:
3f:e7:82:1c:7c:28:75:b5:fe:89:44:bc:db:4c:95:cd:ac:3a:
31:d6:84:9e:85:f1:61:75:b7:64:b4:51:71:ac:31:36:3b:b7:
de:a7:bc:0b:2d:55:0e:5a:88:74:1a:2b:7e:8d:ca:df:87:22:
f5:64:c1:09:bf:ac:85:c5:a1:99:bd:f0:d2:37:75:7d:44:b2:
2b:ae:99:6b:73:38:4e:e3:c1:fc:19:84:a6:b4:dc:a0:a1:30:
20:83:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:23 2025 by rpki-client