Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
File: ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json)
Hash identifier: FkV91KHhqHFpa0GILlWNePP/MRlHG74XUvCNFHcrDbU=
Subject key identifier: 14:75:F3:6F:82:97:39:BE:50:54:9E:35:75:94:D5:7A:72:4E:C3:DC
Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial: 010D0C9F4328584917DC388D3539189693B64160
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 16509
IP address blocks: 72.22.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:38:8d:35:39:18:96:93:b6:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=e1b89288-7daf-46d3-a67a-cbe63939d835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:45:32:5e:33:b2:17:ec:93:07:90:0f:7e:
82:75:19:d9:c7:c8:b2:64:ba:ee:19:a4:d7:e5:c6:
f2:47:d7:0a:cc:37:0d:74:84:90:e6:1c:ea:55:c0:
a7:e0:24:e8:29:ae:81:9a:18:c8:8f:f1:b7:a7:22:
43:3a:61:95:4c:04:34:5a:36:c6:ec:15:ce:cd:38:
a3:0e:42:23:68:ec:f5:e6:39:ca:31:66:f2:de:a2:
44:79:60:f2:92:2c:89:34:e8:f7:92:ea:1d:ac:42:
17:9c:3a:f7:74:3b:e3:e5:b1:31:b5:9b:20:f0:7c:
dd:9a:33:56:63:2d:f7:23:80:0d:6b:ed:06:2e:e8:
9a:05:4e:bb:e4:fe:d1:49:8a:35:80:02:75:d1:b5:
b2:d6:eb:a8:20:b4:e8:7e:39:06:8f:cb:43:9a:1e:
b3:cc:dd:96:99:c1:f0:5b:6a:3d:81:3a:32:43:b1:
fe:39:f3:4a:bf:d2:18:6f:1c:87:28:6c:52:3c:2e:
ca:9d:2b:71:27:de:c8:ac:52:98:39:95:df:b5:7c:
11:42:96:26:46:e3:b0:74:b5:9e:50:d0:53:16:ea:
5c:da:a4:1b:63:09:0a:2b:2e:93:8c:5a:25:8a:0f:
f4:4a:69:33:2b:00:dc:e2:55:28:2a:40:82:6c:88:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:75:F3:6F:82:97:39:BE:50:54:9E:35:75:94:D5:7A:72:4E:C3:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
X509v3 Authority Key Identifier:
keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.22.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:7a:f7:4e:93:ba:9e:d1:cd:c8:c5:e4:fb:ae:d8:08:ba:96:
8b:97:5f:3a:79:37:b6:76:da:91:0c:0b:98:a6:7a:a2:b4:25:
e9:82:73:b8:7b:d6:08:80:99:de:3c:f5:f9:4c:b6:6a:83:b2:
2d:6b:ea:9e:b6:f2:bd:24:9c:06:77:57:60:02:5e:70:4b:02:
f8:c8:2a:94:2c:7b:00:dd:a7:d2:38:73:28:07:b4:e8:77:c4:
01:83:0b:f2:da:0e:fd:82:d6:1e:bd:ed:ec:01:f1:d3:10:71:
b1:c2:35:54:6b:5c:7c:e5:90:04:8c:a4:3f:58:98:56:1e:2a:
11:e5:de:ed:8f:b9:48:ae:ad:c6:d1:78:5a:91:21:55:e6:90:
e4:9e:c1:fd:d4:8c:7f:e2:d8:e8:b9:52:c2:2d:ae:be:b8:82:
c1:c0:33:77:5f:9c:62:4e:00:38:dd:0d:81:27:88:7d:c6:0f:
00:ba:6b:c9:6a:26:96:e3:0a:a1:02:96:42:0f:d4:20:d3:a0:
81:1c:28:52:68:1a:04:f0:96:37:0a:b8:e7:f1:df:1c:73:e8:
34:2b:af:3a:b2:c6:25:ef:f0:0c:e7:90:f8:1d:b5:5b:55:a4:
f3:2f:e0:de:8a:90:cf:94:ac:3e:8f:25:fa:52:00:e4:b7:e3:
6a:4e:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:22 2025 by rpki-client