
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
File: 0ad64713-402c-3924-953d-172630874932.roa (raw, json)
Hash identifier: a1OpD+VdXeEyNvgTTHUoBCW5GaXTGdzDeiAMt6xZUuI=
Subject key identifier: D2:CA:89:8C:40:F5:6C:85:61:8B:34:2E:F2:A4:3E:1E:CA:CA:83:1A
Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial: 010D0C9F432858489340A68A331242DEFBE05580
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 15267
IP address blocks: 72.18.112.0/22 maxlen: 22
72.18.112.0/23 maxlen: 23
72.18.114.0/24 maxlen: 24
72.18.116.0/23 maxlen: 23
72.18.117.0/24 maxlen: 24
72.18.120.0/21 maxlen: 21
72.18.120.0/22 maxlen: 22
72.18.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a6:8a:33:12:42:de:fb:e0:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=64f8af8d-2c35-4682-8914-2639611227b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:a0:0e:ac:14:56:e0:f9:ce:28:f9:c4:2c:
40:57:8f:99:9c:6f:72:81:6b:4a:df:9b:93:33:ce:
cd:ba:48:2d:b8:e9:b8:62:5d:65:f8:5a:3b:aa:71:
a4:c4:76:a9:d1:f4:2c:64:7c:b8:05:8b:0c:61:b4:
51:ee:7d:74:7a:ad:19:c4:79:0c:7b:28:7e:9a:04:
d1:f4:32:7d:12:4e:d9:01:09:da:12:21:cc:0b:a6:
25:ef:57:bb:aa:b1:02:c7:a7:55:be:b8:e4:a3:8c:
32:81:2b:b7:0c:3c:07:6a:ab:25:5d:57:b1:e9:57:
57:1f:a2:11:65:27:d2:a3:b2:97:79:b9:92:d5:94:
ef:5d:ac:eb:90:48:5c:45:86:7f:45:be:61:8f:0a:
80:30:fd:3a:f1:ac:dd:79:57:07:e5:f0:7d:ba:73:
55:b1:c9:e2:62:2e:51:43:79:93:e1:bb:d9:48:be:
bc:ad:af:1b:d0:8c:2b:fd:40:dc:0a:32:51:83:8c:
1a:2e:80:b1:6c:cf:5b:c3:db:5b:e3:44:67:c1:70:
9a:04:63:60:45:ca:2a:c2:cf:89:30:a6:37:3c:9a:
d8:79:69:ac:3c:fc:9e:44:fa:cd:2b:8c:f9:b6:d5:
eb:7e:6c:8d:e9:f5:58:6b:8b:0f:89:af:c3:50:8d:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:89:8C:40:F5:6C:85:61:8B:34:2E:F2:A4:3E:1E:CA:CA:83:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/0ad64713-402c-3924-953d-172630874932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
X509v3 Authority Key Identifier:
keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.112.0-72.18.117.255
72.18.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d2:8f:ce:fb:73:ab:7d:48:9d:ff:50:3c:72:3d:70:30:f5:
f7:45:42:ee:e0:99:8e:43:cb:d3:53:db:0c:b4:70:fb:c6:7b:
71:90:a5:7c:5b:be:f5:7a:b6:72:a4:83:9f:61:ea:08:50:c4:
81:a4:41:e0:f9:df:14:f1:e3:8f:7b:ee:c2:d1:a6:20:85:29:
75:73:89:48:1b:24:ab:8f:17:68:ec:23:70:39:a5:51:af:82:
7c:dd:42:09:53:69:cc:f0:4e:f2:10:8d:49:c2:d5:6a:84:02:
96:25:45:d2:f8:71:15:d5:a5:4b:2c:f8:70:95:8e:d6:bf:ba:
d3:9a:9f:6e:79:8e:76:87:dc:cc:95:ec:06:63:6f:a6:e6:3a:
85:9e:24:1a:20:96:92:e7:9c:74:1a:4c:a1:f8:0c:18:ec:e8:
1c:ad:f1:75:93:eb:5b:0c:6b:00:9b:b5:69:ef:74:52:5c:62:
ba:b1:23:c3:4f:99:ec:45:0a:d4:1c:e9:13:04:e1:70:4d:c1:
41:12:1f:8f:d6:94:76:f4:9a:9f:b8:2a:04:15:7d:9c:16:be:
57:ca:1d:d9:2d:40:0c:5b:6f:11:82:3b:bb:e3:49:ec:2e:d9:
86:dc:60:de:5b:90:b5:f3:50:56:db:a7:a1:47:3a:34:94:be:
59:97:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:42 2025 by rpki-client