
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
File: 4940bb59-1840-3398-aa2f-52b23d3dccf1.roa (raw, json)
Hash identifier: gB5XF4MKcxeFG7/AiGD5Lx0WPgDJwn0TJYX/zZU+4X0=
Subject key identifier: 80:97:EF:B7:89:99:BB:62:EB:58:23:DB:48:A8:21:08:BB:25:B2:EA
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FD0904D49A0C92D49E4DB580
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
Signing time: Mon 24 Feb 2025 11:24:34 +0000
ROA not before: Mon 24 Feb 2025 11:24:34 +0000
ROA not after: Sun 25 May 2025 10:24:34 +0000
asID: 30036
IP address blocks: 72.255.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:09:04:d4:9a:0c:92:d4:9e:4d:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 24 11:24:34 2025 GMT
Not After : May 25 10:24:34 2025 GMT
Subject: CN=a3560101-6df8-4dee-8664-be87cec156d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:10:9c:6f:bf:28:7d:04:bc:45:52:57:d4:
07:60:b5:ff:4d:ec:ab:6b:e4:18:ca:d4:bf:a9:db:
7d:1c:83:bd:98:24:1b:d4:2a:31:b6:8d:da:94:f7:
83:ab:7b:08:56:1f:53:4d:51:c6:3a:43:f4:1f:a9:
81:d7:95:05:e7:b9:d3:15:1c:71:9c:a8:2c:d7:4f:
26:09:ab:b2:52:f0:dd:04:73:87:a1:ff:3a:73:f0:
4c:34:cf:19:fc:48:64:d4:cf:4d:19:3e:a8:5a:4d:
27:7e:34:e7:5d:a8:da:e8:fc:e7:11:ef:2a:d5:ee:
a2:c8:e6:67:3a:8c:26:85:f2:66:ef:73:94:92:5d:
06:28:88:a8:ef:93:1b:df:1f:10:da:9b:ee:02:6e:
35:be:bc:e3:fa:b9:68:7d:59:c4:6d:b7:d9:0a:d7:
c1:ff:ec:1f:10:5e:74:28:bf:fc:1a:26:88:8f:48:
2c:b0:5a:6a:be:c0:64:51:f7:ef:16:49:58:d1:1d:
3e:d0:1d:9c:84:95:fc:6f:a9:7a:d6:a1:f9:8e:49:
5b:62:61:08:47:db:e9:6d:cb:08:46:8b:1b:d0:d5:
d1:f1:69:ba:bc:be:c5:d2:25:f5:66:a3:61:db:c3:
49:e4:1b:61:c5:42:a8:f4:24:6d:1b:f1:77:42:34:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:EF:B7:89:99:BB:62:EB:58:23:DB:48:A8:21:08:BB:25:B2:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4940bb59-1840-3398-aa2f-52b23d3dccf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
72.255.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:59:1e:3c:92:bd:5a:b5:42:3a:26:49:d7:01:b4:fc:40:5e:
7f:f7:e0:7f:76:df:cc:9a:5a:28:10:79:07:c7:cf:76:bb:1d:
4d:d1:43:dd:e5:66:84:8d:84:04:a9:0a:a9:a9:ea:cb:6a:a2:
a9:15:da:6d:98:0f:35:20:3a:62:be:38:90:f6:ae:b2:74:04:
82:e6:ee:e7:95:39:56:a1:54:c6:48:6b:33:e7:f8:a8:d7:ba:
38:5f:a3:f1:2c:ef:a6:3f:08:c7:64:a1:95:76:dd:f8:7b:69:
b3:72:b1:22:0d:c8:09:0e:b2:ce:f3:7e:f5:b3:25:b3:7c:11:
00:66:9f:97:7d:1b:ae:9a:9e:29:55:3e:d0:15:db:5d:0a:19:
52:e3:6a:68:c6:83:bb:1c:0b:e3:ca:8b:13:46:d2:cd:f9:0b:
35:cb:5d:23:50:54:ee:b2:4b:52:31:4f:37:00:26:85:11:a3:
25:e7:a4:f6:a6:04:60:52:10:63:44:d8:4b:02:25:30:5f:e4:
a2:69:2d:fc:8d:21:c8:70:04:2b:3f:bf:07:0a:23:90:1c:d1:
3f:e8:3a:18:fd:a6:e7:12:bc:3a:8b:dc:9c:63:20:f5:39:48:
3a:3d:ea:d3:35:f6:50:b8:3f:e2:97:af:33:ee:31:80:22:d6:
47:e7:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:07 2025 by rpki-client