Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa
File: b029c412-754d-3db3-b3ab-d20f6b3bda34.roa (raw, json)
Hash identifier: k+PUXVnPlvlB3l7emAA1rDpBycK0vhgcBuj9oowYPrQ=
Subject key identifier: A4:37:80:90:5A:8E:3C:2C:11:4B:8C:18:C0:94:DA:F5:1D:BF:91:84
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858493ED3D3909B1E3B353F0E28C0
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 32097
IP address blocks: 72.18.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d3:90:9b:1e:3b:35:3f:0e:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=cd7a8c74-7e5f-43b8-8684-47efe3047a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:4e:04:9f:12:20:2e:c8:24:23:cd:98:6c:
19:91:d3:a7:53:27:27:b3:83:32:b6:64:16:ef:71:
45:10:8f:e5:12:5e:6e:96:19:34:7f:91:66:4f:3c:
07:50:75:6c:f8:5c:73:03:f2:38:0b:af:f5:23:c8:
ab:fd:84:8f:0c:26:3f:3f:58:ab:5a:99:9b:3b:e2:
ef:2c:28:49:1f:6b:30:c8:b4:c0:b5:bb:ad:6f:a3:
c1:88:38:9e:0a:12:28:cf:0b:77:f9:14:25:d2:4c:
99:29:b7:e9:6e:cb:63:31:d1:0c:08:c2:ec:bb:65:
7c:b0:ab:1b:2c:eb:ad:d7:30:70:5f:f2:ca:a7:6c:
57:f2:4d:a8:e1:9c:ff:f5:a3:cd:42:1b:ee:bf:9b:
2f:e4:5e:d3:2f:ff:ec:c7:f6:44:81:f8:54:1d:90:
76:cf:8b:ba:43:49:9a:5f:e8:33:73:bd:c1:ad:fe:
ad:32:5f:49:d6:1f:b6:66:df:02:80:1a:dc:8a:c0:
4d:b8:c0:30:c9:87:f1:0b:13:16:73:f8:3c:4b:8e:
70:03:ed:67:a2:38:c6:28:b5:06:b1:86:9a:e2:75:
f3:5d:7e:cb:ec:3c:8b:c1:c0:2c:16:38:31:98:a9:
5b:88:9f:d9:dd:34:74:43:23:d7:6e:75:ce:d1:12:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:80:90:5A:8E:3C:2C:11:4B:8C:18:C0:94:DA:F5:1D:BF:91:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:86:43:81:ee:20:ae:de:6f:41:1a:63:c2:ff:42:b9:19:32:
05:cb:c2:1a:26:63:bb:1c:47:6e:38:cb:0d:9f:8f:ca:33:58:
e0:81:f4:06:e7:ed:7a:6d:5b:e8:a7:a6:fb:4c:aa:db:9e:e6:
0b:ac:70:fc:16:cb:e5:6e:08:23:cc:a9:7a:04:f8:21:e0:67:
08:9c:07:1a:89:6b:c2:fe:2d:da:d1:d7:14:71:cf:73:30:a3:
77:54:7c:5f:a5:0a:9b:1f:47:29:32:88:b5:d8:f9:80:4f:a4:
8b:9d:8c:24:b2:5a:15:82:1b:56:db:95:0b:8a:69:27:8e:0d:
f6:da:d3:d8:3f:a2:39:82:62:79:59:52:bc:14:65:4b:0c:b9:
0a:0b:59:fd:a7:82:8d:93:1e:e1:7e:8f:52:8d:bb:23:b7:84:
f8:eb:8b:4e:c6:97:d4:f8:f2:1f:61:56:93:de:95:c8:0b:8c:
2f:e3:88:8a:c1:17:0f:ff:83:9f:fc:60:3b:2c:dc:b4:e7:61:
fa:8e:b8:f8:8d:f8:08:04:c1:2f:b2:f6:53:cb:68:76:b9:5e:
53:8a:87:9f:e6:d7:ca:c7:85:98:3a:8d:40:6a:5e:c7:a9:c6:
6f:1a:4f:85:39:41:08:45:cb:b3:2a:cd:6e:de:ff:ba:4d:7f:
c5:96:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:14 2025 by rpki-client