Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
File: 7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa (raw, json)
Hash identifier: rzbdUh556GceE4o9OIvBV2vxg98qODM3m0qS3YhuYWY=
Subject key identifier: F4:04:CD:76:1D:47:A5:5D:3A:50:B2:00:4C:33:AA:4D:3E:B5:89:10
Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial: 010D0C9F432858491D717B9CAD68107EC59328C0
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 8987
IP address blocks: 72.18.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7b:9c:ad:68:10:7e:c5:93:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=eb782002-f361-40cd-abee-70d01a85e752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:43:80:67:d1:84:35:cb:08:49:ac:d3:1d:
b9:c9:08:a7:2d:62:2b:59:5c:3c:6d:ec:bb:c6:75:
71:4c:19:2c:93:3e:8d:fe:1b:c1:6e:e7:4c:09:44:
68:bd:d6:03:0b:2b:56:65:cf:da:b6:a1:3f:f2:23:
3e:74:bf:6a:24:7e:6e:7b:69:7b:f7:ab:c7:63:f9:
a9:fd:5a:a6:10:c9:2c:e6:a4:bd:d5:aa:b7:ca:26:
30:c1:ee:66:00:35:bc:79:c3:d4:8f:0f:d8:62:10:
48:0a:dd:7f:4a:c3:27:e7:ec:44:d1:d8:db:f4:4d:
d5:bb:2a:ee:4b:e4:23:13:a4:56:cb:49:43:92:13:
d8:7e:66:8a:62:25:95:f6:2d:61:64:d1:95:67:1d:
26:95:f4:0c:ee:6a:58:35:22:0c:e6:77:5a:53:20:
fc:fe:b5:14:8a:be:62:05:e9:97:28:e1:ad:d3:01:
bf:3c:ab:41:dd:71:00:86:19:fe:09:07:7c:77:59:
12:4a:3d:35:83:23:48:41:d8:46:df:f4:6f:43:cb:
f2:be:3a:ea:f0:be:d8:db:c9:33:e4:be:85:2f:65:
64:f5:ec:7d:80:20:4c:d4:17:f1:88:7f:eb:23:8b:
b5:03:34:d4:2f:cd:c8:6b:95:cf:46:b6:03:99:73:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:CD:76:1D:47:A5:5D:3A:50:B2:00:4C:33:AA:4D:3E:B5:89:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/7dae7a15-92d5-3a05-9576-1a80ff484bb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl
X509v3 Authority Key Identifier:
keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:56:3c:7d:5c:8f:b4:f7:15:2c:a2:5a:45:c5:f5:de:0a:87:
0b:40:28:e6:5b:aa:c8:7d:27:77:e4:37:ea:e2:f7:64:41:5e:
da:d3:10:cd:ec:ed:b5:60:18:27:7b:aa:26:ce:5d:6b:5f:32:
94:4e:be:1a:9d:31:e6:26:dc:41:71:32:a3:38:c5:6a:91:ea:
3f:35:01:18:2f:79:94:ae:a4:6c:35:7f:06:91:b7:2b:68:80:
eb:ab:77:72:dd:1d:c5:04:ce:73:ff:e2:f3:a1:62:66:c7:2d:
6c:79:8a:e2:95:34:9a:80:a9:f6:a0:b9:50:33:2c:b9:65:9a:
1d:f3:65:0f:c5:bc:7f:14:15:e9:b8:eb:e9:0f:2a:1a:ca:81:
cc:ce:23:fe:08:73:10:dc:b7:29:f9:52:4d:09:3c:92:1d:a6:
cc:e6:37:c3:bf:3a:ff:d1:51:4b:77:86:7d:4e:31:1d:29:a2:
bc:40:b9:23:fe:77:2a:81:17:89:e2:f8:47:cb:2f:21:04:63:
bb:a9:2d:37:cc:f5:d3:23:9b:9a:c0:4a:d3:76:9a:44:e3:92:
df:76:d9:cb:35:35:ea:01:5f:98:f5:b8:27:86:ba:3e:65:e9:
57:32:32:3b:bf:a2:68:62:2a:e6:36:e3:69:6a:46:21:55:ce:
06:6c:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:04 2025 by rpki-client