Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa
File: 7a4b2917-6976-34de-8fe8-248aadad86b3.roa (raw, json)
Hash identifier: GtqYogNziMfSUNrGrvYEcH2msRaj6wlPfiGq/zpxZJI=
Subject key identifier: 96:7F:A6:3C:6E:49:DB:0A:B2:71:79:16:83:DB:5C:AB:C8:3E:A8:A0
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858491AA6D0C894C515A6CC892380
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 20460
IP address blocks: 72.14.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d0:c8:94:c5:15:a6:cc:89:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=301efba8-a835-4b4d-8665-30d00f567ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:0e:50:31:b5:a4:d8:af:6c:fa:50:01:ce:
bb:98:75:0b:69:89:08:ac:c3:45:ba:ed:70:a1:d5:
ac:6f:3d:c7:ca:1b:1c:b5:74:71:c4:23:be:c8:33:
74:c9:94:1b:16:17:0a:6b:59:aa:d7:57:ee:45:27:
24:3d:f9:55:22:e9:d5:19:8f:8c:91:18:2e:d2:91:
05:4f:9d:de:12:7a:88:a5:61:34:87:33:5d:35:3d:
d2:47:6d:10:73:93:94:af:22:90:e6:75:5c:5c:09:
ef:68:7e:ee:ad:00:03:88:f5:2d:dc:ff:c8:02:00:
ac:aa:6e:d8:0d:f2:9f:2b:c3:f3:41:a3:9e:26:27:
27:49:fd:69:40:13:38:0b:5f:13:6a:85:04:5d:24:
93:44:20:32:82:8e:80:5f:63:9a:01:81:76:93:dd:
e3:61:49:02:af:ef:e2:d8:55:89:f2:13:27:b8:c4:
4f:e4:45:01:00:58:6c:e2:dd:ce:65:2a:20:e2:2f:
31:78:0b:41:8e:24:3e:c2:5d:32:f8:c3:8b:58:e0:
a7:62:10:84:dc:26:68:71:64:92:2b:68:ac:a4:ec:
4c:0e:a6:4f:e0:3f:ee:33:71:b9:b2:d4:ec:a4:bc:
dd:df:64:79:25:26:ec:46:ec:83:fc:c7:14:91:73:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:A6:3C:6E:49:DB:0A:B2:71:79:16:83:DB:5C:AB:C8:3E:A8:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c1:d8:82:7c:f6:aa:4e:e0:b1:b1:aa:36:d3:50:34:78:fe:
a4:4a:16:85:34:32:85:93:ca:2f:fe:a8:81:3a:84:51:dc:d8:
3b:cf:51:ea:4c:7c:43:8c:be:5e:dc:44:b9:d1:2e:56:02:41:
f0:58:5e:bb:51:89:80:d3:34:c5:87:15:02:3c:3e:6d:e0:78:
cf:5f:30:09:d1:c7:a8:92:7b:58:34:78:e2:55:4e:0c:bb:be:
0b:66:fb:35:e5:c2:e4:ff:d3:1e:fa:74:6d:14:03:b4:8a:11:
d7:67:ed:ce:ae:ec:42:dc:81:14:8a:ed:d3:7b:ce:94:0a:de:
4d:56:8d:ab:0b:e4:3d:dd:23:7b:86:e6:95:0a:81:7a:0d:37:
62:3b:44:c4:ee:46:dd:71:8d:2f:19:9a:5a:cb:9f:d6:fb:42:
a2:46:26:a1:c8:73:1d:41:d0:76:8f:6e:87:64:91:eb:ae:bf:
0c:a8:f5:dc:56:83:9a:04:23:aa:ff:3e:dd:03:55:41:03:f0:
db:75:9c:4f:ec:90:42:03:43:2e:f2:a1:34:a5:35:3b:1c:5b:
41:38:fe:81:3f:fa:6d:78:89:3e:63:46:c2:5b:e4:8f:f7:b8:
f1:0c:e1:39:19:b5:86:47:90:27:ab:f1:9d:99:6b:16:90:46:
f2:a0:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:28 2025 by rpki-client