Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7e66c6a9-3835-35e7-8b29-061047de11f7.roa
File: 7e66c6a9-3835-35e7-8b29-061047de11f7.roa (raw, json)
Hash identifier: 80faPP2Ref01Pbh8CZcsaZ/7y76dLmKaA/3Y96+SpF4=
Subject key identifier: 3E:38:27:FA:2F:08:31:90:E4:52:F0:1D:FB:1F:80:4D:0E:15:D3:D2
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285848C6E6396222A916945ACADE00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7e66c6a9-3835-35e7-8b29-061047de11f7.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 396026
IP address blocks: 72.14.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:39:62:22:a9:16:94:5a:ca:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=d12e9e44-ddc9-4937-9eee-329f9dfb2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6d:55:e7:d1:fe:88:4a:0d:36:98:03:6c:39:
b1:1d:b7:a8:ae:b1:9e:92:9f:a3:8b:51:89:1c:8b:
d8:eb:5a:a2:82:86:f7:c6:5b:7d:71:d3:87:59:ef:
2d:c7:86:bd:b0:79:80:5f:56:9c:a3:27:ec:a1:93:
11:0b:e8:d6:ed:e3:f6:a1:cd:dc:dd:54:b5:e7:d5:
16:d4:ea:fa:0e:11:4c:30:7f:f8:6a:93:d3:8e:44:
68:67:a1:a5:3c:8d:d0:81:fb:41:e0:5b:78:4d:dc:
70:79:f4:b0:f4:e4:94:ba:13:f8:b8:4d:df:89:aa:
d9:28:63:d8:cf:ce:e3:86:17:b6:46:e0:80:f1:75:
8f:70:9f:60:98:88:98:f2:d7:9c:0b:fc:db:08:a6:
9d:f5:7d:87:ac:ba:0c:31:22:b7:8c:74:7d:37:d6:
5b:65:20:28:49:a3:e6:5e:02:8c:11:72:d2:b7:23:
f9:1e:c4:51:17:73:6a:25:b8:42:46:fd:e1:c0:a7:
3c:4c:e7:a9:75:2c:7f:b5:70:e0:02:d5:1f:b6:b2:
7c:8d:85:7f:a5:69:18:77:9c:aa:65:ee:f6:48:6a:
c6:58:de:0b:d6:61:cb:68:2b:62:d4:59:93:ff:2b:
ab:89:ee:ea:bb:db:29:32:8f:4c:90:bd:9c:85:e0:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:38:27:FA:2F:08:31:90:E4:52:F0:1D:FB:1F:80:4D:0E:15:D3:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7e66c6a9-3835-35e7-8b29-061047de11f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:9e:14:d8:57:ba:bf:c8:70:51:6b:bf:23:77:12:8e:8c:23:
f3:7a:8b:3d:9a:cb:9e:d9:72:27:5d:03:97:69:89:59:1a:23:
f7:f5:2c:41:e2:a4:a8:07:bb:5f:51:ef:8e:ae:87:85:1e:b2:
1b:5d:ae:41:1b:60:b6:62:89:e8:80:f2:ad:dd:65:b5:b6:aa:
55:07:00:45:37:0a:75:7f:05:2c:3a:64:fa:69:7f:32:64:7f:
29:a0:7a:bf:2d:ae:b0:77:7d:df:49:f2:85:b6:d4:50:cb:a0:
6a:9a:83:8b:cf:fa:8e:f8:18:7b:d5:d8:aa:47:74:42:f9:82:
4c:1b:e4:f6:57:78:ff:9f:c4:c3:23:75:15:8d:1d:cd:3f:28:
46:00:27:6b:0e:13:8d:83:07:0b:ae:b4:6a:e6:59:c4:2e:11:
30:1d:09:b5:d7:19:fa:ac:4f:59:82:3b:78:91:51:44:88:e9:
ae:68:26:29:be:b5:c5:79:eb:2a:b8:30:e4:95:84:bf:89:1d:
db:b5:e3:f4:2b:c7:92:7c:7c:17:12:c6:da:03:b9:1e:8b:3d:
d2:38:4a:f0:49:5d:37:36:b2:03:67:a8:02:b3:58:2b:d3:c6:
2a:59:df:6e:b7:a9:cb:df:15:b8:fc:61:bf:70:38:0d:9e:fc:
74:fb:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:51 2025 by rpki-client