Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
File: b2baff77-b625-3202-8580-45c0ed7a13c0.roa (raw, json)
Hash identifier: qCtfbr6RcAWRvrb3ncFF5kvdmrZnvPbOK/dYEIU2OVA=
Subject key identifier: A9:D3:1E:41:33:9D:CC:81:86:50:E2:BA:0F:6E:4E:E3:15:37:4E:28
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F43285848037A4BD5A0D57C5B558DF4D0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 212238
IP address blocks: 72.14.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4b:d5:a0:d5:7c:5b:55:8d:f4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2ccd6580-7878-4413-aa9d-3c8d346905a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:86:ce:59:9c:66:38:dd:e8:2c:fb:c4:31:
a9:2a:a1:40:6d:18:00:ec:a6:91:86:83:05:49:a5:
cf:b2:90:af:c6:d4:91:6c:94:7e:a6:4b:0a:5e:d8:
e5:4c:8d:8d:0d:5e:06:0a:b2:84:b8:3c:58:f8:41:
1c:93:cb:e5:8b:92:24:5b:6f:e4:04:56:e2:f1:97:
04:3f:c4:1b:fc:54:d3:96:24:b6:8c:dd:8e:5a:86:
b8:54:7d:34:23:2c:36:15:3f:37:46:4b:f2:a4:7a:
fa:17:85:53:63:bd:c0:0e:b1:e6:56:84:b4:25:da:
19:79:dc:1b:0f:98:4b:34:6c:50:9a:23:f7:06:56:
bc:0d:19:46:28:d8:94:a0:51:f4:55:17:e6:59:bb:
23:20:d5:b2:68:3f:41:e3:59:88:49:e7:5d:da:d8:
6e:e9:a1:42:3c:f1:f4:77:49:e1:67:47:f0:4e:d2:
60:ab:92:cd:09:b0:78:23:27:11:07:2e:f2:02:75:
eb:a5:d8:74:3f:da:72:18:43:0a:fa:67:22:a4:57:
21:0a:4c:a8:f2:b0:81:34:1a:e0:04:12:dd:7e:e4:
8b:e9:38:52:a9:38:d2:66:8c:1b:07:42:ae:c7:ad:
6d:68:8b:cf:c4:4f:7a:70:47:04:7f:6f:d0:00:5d:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D3:1E:41:33:9D:CC:81:86:50:E2:BA:0F:6E:4E:E3:15:37:4E:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b2baff77-b625-3202-8580-45c0ed7a13c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8a:d1:68:89:ca:db:a8:da:36:46:1d:f4:7f:44:93:ec:a3:
f1:ac:67:f0:e5:8d:c4:24:29:fb:a4:4a:12:52:e4:d3:6b:81:
41:35:7e:96:d9:ab:e0:42:4e:ea:a7:09:f6:41:fe:fe:da:5a:
43:bc:28:fb:27:7b:c4:6a:b7:b3:87:fc:38:16:4f:c5:8b:7a:
2b:81:1a:27:93:5c:bd:7b:79:0b:4d:72:7d:c4:eb:8d:97:51:
c2:93:4a:1a:de:9b:36:32:1b:5a:2e:aa:8e:ba:6a:cf:bf:35:
34:f7:a7:7b:64:5e:65:59:21:d3:63:4f:9d:bd:05:19:05:1c:
e9:d4:a2:c5:82:df:9d:77:db:89:97:60:21:63:72:51:86:d2:
96:49:54:52:fe:25:0d:72:39:bd:96:80:9e:41:7c:b6:47:82:
1e:48:98:0b:65:42:e0:b2:0a:2c:95:67:74:ff:f7:e3:f0:f3:
f6:57:b0:18:65:4b:47:4c:30:f5:79:27:43:6e:d3:72:a8:9f:
3b:87:81:6d:55:5f:c9:6c:28:ae:36:80:8c:80:2c:9f:b5:0a:
05:a3:51:52:eb:eb:03:5f:96:49:81:d6:23:8c:e5:7e:f2:6f:
c6:d7:ae:c1:55:fd:d6:0f:63:58:80:39:f8:9c:c3:4c:1f:75:
33:21:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 13:39:42 2025 by rpki-client