Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
File: 65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa (raw, json)
Hash identifier: WBH0uXTz7bPDCupi9pErIJW+HZGwWDRjJlgqeF9QbN4=
Subject key identifier: 94:75:F6:6D:F3:6A:54:4C:14:37:41:BE:38:B6:7B:84:B8:24:41:27
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F4328584908817658AA54D561C2938400
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 212335
IP address blocks: 72.14.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:76:58:aa:54:d5:61:c2:93:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=5b148850-fc2c-4943-aec8-8a5372dde388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:c5:c4:a4:ae:0c:fa:f2:63:ff:94:07:f9:
e7:c5:52:63:47:16:dc:59:ed:d7:04:21:c3:a1:02:
42:2c:57:01:71:dd:e3:14:0c:aa:c0:8c:15:fa:0b:
7f:bc:a2:54:22:24:58:98:7b:74:41:dc:a4:3e:24:
3d:d3:1c:1a:33:8b:0c:9b:87:eb:b9:c5:1c:83:b9:
bb:02:75:85:55:e9:79:76:e9:e3:46:9d:d8:03:ef:
88:8a:bf:0e:04:79:ad:8a:9c:d7:8c:20:dc:51:b4:
21:12:1b:bd:e3:f9:0b:b9:8b:ac:70:87:8e:22:ba:
a7:6e:bb:45:2e:04:1a:a7:7a:c9:1c:9b:24:7a:13:
42:08:42:8f:63:3a:d6:05:34:d3:d8:12:07:33:98:
89:17:ea:04:9a:e8:48:ef:1b:18:60:e7:08:5b:1a:
af:cf:db:18:e0:c1:2e:be:47:8c:55:15:0f:ea:6e:
df:ef:46:fb:49:c8:2a:65:c7:af:a9:a4:1d:11:88:
8a:c9:98:a3:5e:b3:c5:7b:1e:d8:99:58:36:51:07:
7f:61:0f:46:75:a4:ff:8e:29:01:2b:de:04:0f:d9:
a9:33:00:80:17:13:e8:c3:e1:a4:cd:ed:a7:ff:dc:
6f:d3:37:07:b2:cb:ec:9d:3d:03:31:70:82:71:51:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:75:F6:6D:F3:6A:54:4C:14:37:41:BE:38:B6:7B:84:B8:24:41:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/65dc9077-7be6-3985-a1c2-e0c82fa4410c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:16:91:dd:df:79:42:29:c4:41:db:6f:94:67:71:77:8d:d7:
18:17:1a:8a:ab:ed:ca:69:34:3d:15:1f:e5:32:c7:58:07:88:
75:b9:ca:0c:0f:f9:e2:d1:f1:cd:fc:98:1c:94:e8:b1:02:05:
a8:94:43:9f:61:98:0f:f8:25:b5:5f:d9:a9:7b:9a:4e:43:ab:
73:a2:9d:4c:20:a7:b4:80:a5:62:b3:10:c5:69:98:13:80:fa:
81:8d:dd:4a:8b:c6:03:56:a7:b0:16:24:c1:73:22:38:fd:50:
95:3d:ad:01:9f:e5:1a:c3:01:47:31:95:df:d2:b5:a0:02:91:
21:56:70:17:e1:e4:f0:4c:df:1b:e8:20:1a:c1:6e:40:76:da:
16:a6:ef:6f:44:bd:c0:74:6a:8f:11:a1:8d:32:7d:65:bb:a9:
1e:73:0f:0c:9a:ed:9d:1f:38:d4:f3:93:12:0e:f5:a1:87:e2:
65:2c:2f:e5:0d:bb:e0:33:f3:3c:fd:ce:e8:46:a9:84:fd:93:
b8:e4:41:9e:67:20:2f:7c:c7:02:9b:b7:0e:fd:b3:ba:0c:9d:
01:1f:cf:63:e6:dd:ac:fc:85:48:7b:06:93:a7:95:ea:8b:1d:
fd:79:6d:33:50:05:38:b9:fe:67:f9:e8:a4:89:89:d8:f2:8a:
47:41:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:50 2025 by rpki-client