Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb00a40c-0d74-30f0-8061-497545886ef6.roa
File: eb00a40c-0d74-30f0-8061-497545886ef6.roa (raw, json)
Hash identifier: ok20awqUE/tvOLM+G/UCAUdrKhMphiZVQw/m1uC7E60=
Subject key identifier: B4:23:71:66:F5:20:D6:4F:69:1C:A0:FE:25:33:B1:A2:D1:B9:E7:E2
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B54D6E06CC3B817F8A1400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb00a40c-0d74-30f0-8061-497545886ef6.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 72.28.64.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:4d:6e:06:cc:3b:81:7f:8a:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=c2d47ac1-9a17-44b8-8f04-2df51a5925e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:60:29:5c:d5:c4:1f:1d:a3:3e:0a:28:c1:
1a:9a:e8:23:b9:4d:3f:85:a4:89:7c:a1:30:1a:34:
c6:dc:8a:1c:2f:79:65:39:28:88:63:69:2c:80:1b:
0a:36:61:af:c1:26:68:dc:74:b4:9b:02:4c:98:2b:
c6:6d:ce:d2:d7:07:50:90:31:23:08:ec:e5:f0:1f:
82:79:88:06:48:88:11:f9:8f:03:38:11:25:0e:90:
95:63:78:a9:cf:55:e9:af:f0:1d:97:4f:da:04:7f:
71:e4:f1:9c:60:b8:c6:3e:93:5d:5a:e9:0e:3c:d4:
86:b5:23:36:1b:09:79:64:4e:c5:81:02:90:49:b1:
e8:b9:7b:25:d7:04:28:68:1c:87:7b:11:e0:97:88:
e1:84:24:a3:3f:3c:2c:39:c8:d2:13:64:e7:ab:72:
90:84:0f:2e:92:f5:de:1f:3c:f0:0d:f7:c9:08:39:
c0:3b:51:a4:a6:11:7b:f0:a1:85:d7:e9:0a:a5:e5:
28:f1:b7:de:83:c5:15:dd:8c:7f:b3:15:c3:5c:2e:
6c:f7:5a:24:e7:10:28:d8:32:87:f8:a4:2e:12:d8:
04:35:61:2c:f7:bc:0e:36:47:61:be:fa:9b:5b:07:
3a:0c:5d:46:63:22:e6:4c:42:e5:2f:9c:02:82:be:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:71:66:F5:20:D6:4F:69:1C:A0:FE:25:33:B1:A2:D1:B9:E7:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb00a40c-0d74-30f0-8061-497545886ef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
72.28.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:7b:0b:b5:74:7b:14:5c:bb:05:fc:60:71:13:a0:6f:20:be:
47:60:ff:14:c4:db:70:10:29:c7:45:a9:59:5c:53:7f:e5:85:
b5:41:27:61:dc:b3:86:53:3c:b1:bb:c3:ca:01:4b:a9:a8:96:
60:cc:36:66:11:ca:7a:c3:3d:18:af:bb:40:d9:41:26:2a:8e:
d7:8a:7c:1e:a7:d5:ab:7d:99:9d:a2:e7:9f:9a:45:50:65:ce:
d8:7b:70:4a:29:39:53:0e:6c:d2:b1:97:e9:52:d9:96:bd:9c:
50:1b:27:72:86:43:d3:0f:81:28:e7:30:63:49:fd:c6:34:0f:
5c:60:de:13:e3:b7:d9:47:be:78:1a:51:38:35:9c:93:6d:e4:
68:96:13:66:f7:9f:6c:02:59:22:b8:51:dd:8a:d0:c9:95:7d:
99:ad:c4:b1:59:82:4c:c9:08:24:a9:47:ef:33:88:17:04:2c:
12:db:ec:32:88:bd:df:06:11:64:33:2d:ac:ed:39:47:a4:8c:
62:3d:72:d0:c8:1c:86:06:c3:7e:c0:29:d5:2b:1c:b7:5d:63:
88:01:6f:64:43:00:bf:2d:54:af:fe:df:30:73:df:09:19:08:
91:11:ad:79:b3:84:97:ea:d8:32:d4:09:25:ad:3f:0f:d8:5c:
a4:78:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:08 2025 by rpki-client